Privacy Policy - Carpet Cleaners SW16

This Privacy Policy explains how Carpet Cleaners SW16 collects, uses, stores, and protects personal data relating to its customers. It applies to all Carpet Cleaners SW16 customers in the area, including individuals and businesses that request, receive, or enquire about our cleaning services. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We take privacy seriously and aim to ensure that any personal data we process is limited to what is necessary for delivering our services, managing customer relationships, meeting legal obligations, and improving our operations. By using our services, you acknowledge that your information may be processed as described in this policy.

1. Who We Are

Carpet Cleaners SW16 is a service provider operating in the SW16 area. For the purposes of data protection law, we act as the data controller for personal data we collect directly from customers, prospects, and service users. This means we decide why and how your personal data is used.

We may also work with trusted third parties who act as data processors on our behalf. These processors only handle personal data under our instructions and are required to keep it secure.

2. What Personal Data We Collect

We collect only the information that is relevant and necessary for providing our services, managing enquiries, and maintaining records. The categories of personal data we may collect include:

Identity data such as your name or business name.
Contact data such as address details, telephone number, and email address.
Service-related data such as property access instructions, cleaning preferences, appointment history, and service notes.
Transaction data such as payment records, invoices, and billing information.
Communication data such as enquiries, complaints, feedback, and correspondence.
Technical data if you interact with our online systems, including device or usage information collected through standard website or system logs.
Special category data only where strictly necessary and where you voluntarily disclose it, for example, accessibility needs or health-related instructions relevant to service delivery. We will process this only with appropriate safeguards and lawful justification.

We do not intentionally collect more data than needed. If you provide additional information that is not required for our services, we will handle it in line with this policy and applicable law.

3. How We Collect Your Data

We may collect personal data in the following ways:

Directly from you when you make an enquiry, request a service, complete a booking, or communicate with us.
During the service relationship, such as when we record cleaning requirements, appointment updates, or payment details.
From third parties where necessary, such as referral partners, payment service providers, or contractors involved in service delivery.
Automatically through standard technical logs or system records when you interact with our digital systems.

Where we receive data about you from another source, we will take reasonable steps to ensure it is accurate, relevant, and handled lawfully.

4. Lawful Basis for Processing

We process personal data only when we have a lawful basis under UK GDPR. The bases we rely on may include:

Contract – when processing is necessary to provide a service you have requested, manage bookings, issue invoices, or perform our obligations under an agreement.
Legitimate interests – when processing is necessary for our legitimate business interests, such as responding to enquiries, improving service quality, keeping internal records, preventing fraud, and managing customer relationships, provided these interests do not override your rights and freedoms.
Legal obligation – when we need to process data to comply with tax, accounting, consumer, or other regulatory requirements.
Consent – where we rely on your clear permission, for example for optional communications or the use of certain non-essential categories of information. You may withdraw consent at any time where it is the basis for processing.
Vital interests – in rare cases where processing is necessary to protect someone’s life or physical safety.

When we process special category data, we will only do so where an additional condition under UK GDPR applies, and only where this is necessary and proportionate.

5. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To schedule, deliver, and manage cleaning services.
To maintain customer records and service history.
To issue invoices, process payments, and manage accounts.
To communicate about appointments, service updates, or important notices.
To handle complaints, feedback, and service recovery.
To comply with legal, tax, or regulatory requirements.
To improve service delivery, train staff, and maintain quality standards.
To protect our business, staff, customers, and property from misuse, fraud, or other risks.

We will not use your personal data for purposes that are incompatible with those described here unless we have a lawful basis to do so.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the purpose for which it is held.

In general:

Customer and service records are kept for the duration of the business relationship and for a reasonable period afterwards.
Financial and transaction records are kept for the period required by tax and accounting law.
Communication records may be retained for as long as needed to resolve disputes, maintain service continuity, or meet legal obligations.
Data that is no longer required is securely deleted, anonymised, or otherwise disposed of in a safe manner.

We regularly review retained data to ensure it is still necessary. Where data is no longer needed, we will remove it securely in line with our retention practices.

7. Data Processors and Third Parties

We may share personal data with carefully selected third parties who support our operations. These third parties act either as processors or, in some cases, as independent controllers. We only share data when necessary and only with appropriate safeguards in place.

Examples of processors may include:

Payment processors that handle card or electronic payments.
Accounting or bookkeeping providers that assist with financial administration.
IT and cloud service providers that store or secure business records.
Scheduling or communications tools used to manage appointments and service notifications.
Contractors or subcontractors who help deliver services under our instructions.

We require processors to protect personal data, process it only on our instructions, and comply with data protection law. Where data is transferred outside the UK, we will ensure appropriate safeguards are in place, such as adequacy regulations or approved contractual protections.

8. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include secure storage, access controls, staff confidentiality obligations, and restricted access to personal information.

Although no system can be guaranteed to be completely secure, we take appropriate steps to reduce the risk of a data breach and to respond promptly if one occurs. If required by law, we will notify the relevant authority and affected individuals.

9. Your Rights

Under data protection law, you have several rights in relation to your personal data. These may include:

The right of access – to request a copy of the personal data we hold about you.
The right to rectification – to ask us to correct inaccurate or incomplete data.
The right to erasure – to request deletion of your data in certain circumstances.
The right to restrict processing – to ask us to limit how we use your data in certain situations.
The right to object – to object to processing based on legitimate interests or direct marketing.
The right to data portability – to receive certain data in a structured, commonly used format where applicable.
The right to withdraw consent – where processing relies on consent, you may withdraw it at any time.
The right to complain – to raise concerns with the UK Information Commissioner’s Office (ICO) if you believe your data has been handled improperly.

These rights are not absolute and may be subject to legal exceptions. If you make a request, we will respond within the time limits required by law and may ask for information to verify your identity.

10. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is necessary in a limited and lawful context, such as where a customer provides information relevant to access, household arrangements, or service instructions. In such cases, we will process only what is necessary and with appropriate care.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational needs. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is used.

12. Summary of Our Commitment

We are committed to treating your personal data with respect, keeping it secure, and using it only when we have a valid reason to do so. Carpet Cleaners SW16 aims to ensure that every customer in the area can rely on a transparent and lawful approach to privacy. If you use our services, your data will be handled in line with this policy, applicable legislation, and our internal safeguards.

This policy is intended to provide a clear and GDPR-compliant explanation of our data practices for Carpet Cleaners SW16 customers in the area.