Privacy Policy - Carpetcleaning SE17

This Privacy Policy explains how Carpetcleaning SE17 collects, uses, stores, shares, and protects personal data in connection with its carpet cleaning services. It applies to all Carpetcleaning SE17 customers in the SE17 area, including residential and commercial customers who request, receive, or enquire about our services.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to help you understand what data we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have regarding your information.

1. Data We Collect

We collect only the personal data that is necessary to provide our services, manage our relationship with you, and meet legal obligations. The types of data we may collect include:

Identity data: your name and, where relevant, business name.
Contact data: address, email address, telephone number, and service location details.
Service data: information about the cleaning services requested, property type, stain or fabric details, preferred service times, and notes related to the job.
Payment data: transaction records, invoicing details, and payment status. We do not retain card details unless required through a secure payment provider.
Communication data: messages, enquiries, complaints, quotes, and correspondence between you and our team.
Technical data: limited device or usage information if you interact with our digital systems, such as IP address or browser details, where applicable.
Marketing preferences: your choices about receiving promotional information, where you have given or withheld consent.

We do not intentionally collect special category data unless you voluntarily provide it and it is necessary for a specific service request. If such information is shared, we will only process it where a lawful basis exists and appropriate safeguards are in place.

2. How We Use Your Data

Your personal data is used for the following purposes:

to provide carpet cleaning and related services;
to respond to enquiries and provide quotations;
to schedule appointments and manage service visits;
to process payments, issue receipts, and maintain accounting records;
to communicate with you about your booking, service updates, or complaints;
to maintain internal records and improve service quality;
to comply with legal and regulatory requirements;
to protect our business against fraud, misuse, or legal claims;
to send marketing messages, where permitted by law and where you have the necessary consent or an applicable soft opt-in basis.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for a compatible purpose or another lawful reason exists.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis to process your personal data. Depending on the circumstances, we may rely on the following bases:

Performance of a Contract

We process personal data when it is necessary to provide a quote, carry out cleaning services, arrange appointments, or manage payment for services requested by you.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your interests and rights do not override those interests. This may include maintaining records, improving our services, preventing fraud, and handling customer communications. We always consider whether the processing is necessary and proportionate.

Legal Obligation

We may process and retain certain information to comply with legal requirements such as tax, accounting, consumer protection, and record-keeping duties.

Consent

Where required, we rely on your consent, for example for certain forms of direct marketing or non-essential communications. You may withdraw consent at any time, and this will not affect the lawfulness of any processing carried out before withdrawal.

Vital Interests

In rare cases, we may need to process personal data to protect someone’s life or physical safety.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our services. These parties act as processors when they process data on our behalf and under our instructions. They are required to protect your data and may only use it for the agreed purpose.

Processors and service partners may include:

Booking and administration providers: systems used to manage appointments, service records, and customer communications.
Payment processors: secure providers that handle payment transactions and related fraud checks.
Accountancy and invoicing providers: services that support billing, tax, and financial record management.
IT and cloud storage providers: systems used to store data securely and support business operations.
Professional advisers: including legal, insurance, or accounting advisers where necessary.
Regulatory or law enforcement bodies: where we are required to disclose information by law or to protect our legal rights.

We do not sell your personal data. If personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect your information, such as approved transfer mechanisms and contractual protections.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including meeting legal, accounting, or reporting obligations. The retention period depends on the type of information and the reason for processing.

Customer service and booking records: retained for as long as needed to manage the service relationship and address follow-up issues.
Financial and invoicing records: retained for the period required by tax and accounting law.
Complaint or dispute records: retained for as long as needed to resolve the matter and defend legal claims.
Marketing preferences: retained until you withdraw consent or opt out.

When data is no longer required, we will securely delete, anonymise, or archive it in line with our retention practices.

6. Your Rights

You have a number of rights in relation to your personal data. These rights are not absolute and may be subject to legal conditions or exemptions. Your rights include:

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: you may ask us to delete your data in certain circumstances.
Right to restrict processing: you may request limited use of your data in specific situations.
Right to data portability: you may request that we provide certain data in a structured, commonly used format.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We will respond within the time limits required by data protection law.

7. Security of Your Data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and data minimisation practices. While we take reasonable precautions, no system can be guaranteed to be completely secure.

8. Marketing Communications

Where allowed by law, we may send you service-related or promotional information. If you no longer wish to receive marketing messages, you can object at any time. We will honour your preference and stop using your data for direct marketing purposes.

9. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is necessary in the course of providing services to a household and only with appropriate adult involvement. If we become aware that we have collected information from a child without a valid basis, we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. Any updated version will apply from the date it is made available. We encourage you to review this policy periodically so that you remain informed about how we handle personal data.

11. Summary of Key Points

Carpetcleaning SE17 processes personal data to deliver cleaning services, manage bookings and payments, meet legal duties, and maintain customer records. We only process information where we have a lawful basis, and we share data only with trusted processors who support our operations under strict controls. Personal data is retained only for as long as necessary, and customers in the SE17 area have clear rights over their information, including access, correction, deletion, objection, and withdrawal of consent.

By using our services, you acknowledge that you have read and understood this Privacy Policy.