Privacy Policy - Carpet Cleaners SW19

This Privacy Policy explains how Carpet Cleaners SW19 collects, uses, stores, shares, and protects personal data. It applies to all Carpet Cleaners SW19 customers in the area, including prospective customers, current customers, and individuals who enquire about our services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpet Cleaners SW19 provides professional carpet cleaning and related cleaning services to customers in SW19 and surrounding local areas. For the purposes of data protection law, we are the data controller in relation to the personal data we collect and use for our business operations.

This policy applies whenever we process personal data about customers, potential customers, property owners, tenants, landlords, and any other individuals who interact with us in connection with our services.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing our business, and meeting legal obligations. The types of information we may collect include:

Identity details, such as your name and title.
Contact details, such as address, telephone number, and email address.
Service information, such as the type of cleaning requested, property details, booking preferences, and special instructions.
Transaction information, such as records of services provided, payments made, invoices, and billing history.
Communication records, including emails, messages, complaints, feedback, and service enquiries.
Technical data, if you interact with our digital systems, such as IP address or device information collected through standard website or email tools.
Access and safety information, where needed to enter premises safely or complete a booking at a property.

We do not intentionally collect special category data unless it is directly provided by you and strictly necessary to deliver our services or meet a legal requirement. If such information is ever collected, it will be handled with enhanced protection and only where permitted by law.

3. How We Collect Data

We may collect your data in several ways:

Directly from you when you make an enquiry, book a service, or communicate with us.
From third parties who arrange services on your behalf, such as landlords, managing agents, or tenants.
Through payment providers and other business systems used to process transactions.
From operational records generated during service delivery, such as booking logs or job notes.

Where you provide information about another person, you should ensure that you have the authority to do so and that they are aware of this Privacy Policy.

4. Lawful Basis for Processing

We process personal data only when we have a lawful basis under data protection law. Depending on the situation, our lawful bases may include:

Contract - when processing is necessary to provide our services, manage bookings, issue invoices, or respond to service requests.
Legitimate interests - when processing is necessary for our business operations, such as record keeping, improving services, preventing fraud, and handling customer communications, provided that your rights do not override those interests.
Legal obligation - when we must retain or disclose information to comply with tax, accounting, or other legal requirements.
Consent - where we rely on your explicit permission for a specific purpose, such as certain marketing activities where consent is required by law.

When we rely on legitimate interests, we consider whether the processing is necessary and whether it is balanced against your privacy rights. When consent is used, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. How We Use Your Data

We use personal data to:

Provide quotations, confirm bookings, and deliver cleaning services.
Communicate with you before, during, and after a service.
Process payments and issue invoices or receipts.
Maintain business and service records.
Respond to questions, complaints, or requests.
Improve the quality, reliability, and efficiency of our services.
Protect the security of our operations and prevent misuse or fraud.
Comply with legal and regulatory requirements.

We will only use your data for the purposes for which it was collected, unless we reasonably determine that we need to use it for another compatible purpose and the law allows it.

6. Data Sharing and Processors

We may share personal data with trusted processors who help us operate our business. These third parties process data on our behalf and only under our instructions. Examples may include:

Payment processors that handle card or electronic payments.
Accounting and bookkeeping providers that support financial record keeping and tax compliance.
IT and cloud service providers that store or secure business data.
Communication providers used to send emails, messages, or booking confirmations.
Operational contractors or service partners who assist with service fulfilment where necessary.

We require our processors to protect personal data, process it only for the specified purpose, and comply with data protection obligations. We do not sell your personal data.

We may also disclose data where required by law, court order, regulatory request, or to protect our legal rights, customers, employees, or the public.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including satisfying any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the reason it is held.

Customer and booking records are typically retained for the period needed to manage the service relationship and resolve any queries.
Financial records are retained for the period required by tax and accounting law.
Communication records may be retained for a reasonable period to support service administration and dispute handling.

When personal data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices. In some cases, limited information may be kept where it is necessary for legal claims or compliance purposes.

8. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures are designed to reflect the nature of the information we process and the risks associated with it.

Examples of safeguards may include access controls, secure storage, password protection, staff confidentiality obligations, and careful management of third-party systems. While no system can be guaranteed completely secure, we work to reduce risk and respond appropriately to any incident.

9. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access - to request a copy of the data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete information.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restriction - to ask us to limit how we use your data in certain situations.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to request transfer of data you provided in a structured, commonly used format, where applicable.
Right to withdraw consent - where processing is based on consent.

These rights are not absolute and may be subject to legal limitations. If you exercise a right, we may need to verify your identity before responding. We will respond within the time limits set by law.

Marketing Preferences

If you receive marketing communications from us where consent is required, you may opt out at any time. If we send communications based on legitimate interests, you can still object and we will stop unless we have compelling lawful grounds to continue.

10. International Transfers

If any service provider stores or processes data outside the UK, we will ensure appropriate safeguards are in place to protect your personal data in line with applicable law. These safeguards may include standard contractual protections or transfers to countries recognised as providing adequate protection.

11. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from minors except where necessary in connection with a customer arrangement and only with appropriate authority from a parent, guardian, or responsible adult where required.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers in SW19 and the surrounding area to review this policy periodically.

13. Summary of Our Approach

We aim to process personal data lawfully, fairly, and transparently. We collect only what we need, use it for clear purposes, share it only with trusted processors or where required by law, and keep it only for as long as necessary. We also respect your rights and work to ensure that all Carpet Cleaners SW19 customers in the area receive responsible and privacy-conscious service.

Important: This policy is intended to provide clear information about our privacy practices and does not limit any rights you may have under applicable data protection law.