Privacy Policy - Carpet Cleaners SE16

This Privacy Policy explains how Carpet Cleaners SE16 collects, uses, stores, shares, and protects personal data when providing services to customers in the SE16 area. It applies to all Carpet Cleaners SE16 customers in the area, including residential and commercial clients, and to any person who interacts with us in connection with a booking, enquiry, quotation, service visit, or follow-up support.

We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only collect information that is necessary for providing our services, managing our relationship with customers, and meeting our legal or operational obligations.

1. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity details such as your name and, where relevant, the name of your business or organisation.
Contact details such as telephone number, email address, and service address within SE16.
Service information including details of the cleaning work requested, property access instructions, preferred appointment times, and service history.
Payment information such as payment confirmation, billing records, and transaction references. We do not intentionally store full card details unless required by a secure payment provider.
Communication records such as emails, messages, booking notes, complaint records, and feedback.
Technical or usage data if you interact with any digital booking or enquiry system, such as device type, browser information, and basic usage logs.

In some cases, we may also collect special category data only if it is necessary and you have chosen to provide it, for example, access notes relating to health or mobility requirements that affect service delivery. We aim to keep this information to a minimum and process it only where appropriate safeguards are in place.

2. How We Use Personal Data

Carpet Cleaners SE16 uses personal data for the following purposes:

To respond to enquiries and provide quotations.
To manage bookings, carry out cleaning services, and confirm service completion.
To communicate about appointments, access arrangements, changes, or service issues.
To process payments, issue invoices, and maintain accounting records.
To handle complaints, follow-up requests, and customer support.
To improve our services, customer experience, and operational planning.
To comply with legal, tax, insurance, and record-keeping obligations.
To prevent fraud, misuse, or unauthorized activity.

We do not sell personal data. We only use it in ways that are relevant, proportionate, and consistent with the reason it was collected.

3. Lawful Basis for Processing

We process personal data only when we have a valid lawful basis under the UK GDPR. Depending on the situation, our lawful bases may include:

Contract: processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, such as providing a quotation or completing a cleaning service.
Legal obligation: processing is necessary to comply with legal requirements, including tax, accounting, and record retention duties.
Legitimate interests: processing is necessary for our legitimate business interests, such as improving services, managing customer relationships, securing our operations, and maintaining accurate records, provided these interests do not override your rights and freedoms.
Consent: where required, for example for certain optional communications or the handling of specific sensitive information that you voluntarily provide.

If we rely on consent, you have the right to withdraw it at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us deliver our services or operate our business. These parties act as data processors or, in some cases, independent controllers. They may include:

Payment processors that securely handle card or electronic payments.
Accounting and bookkeeping providers that help manage invoices, tax records, and financial reporting.
IT and cloud service providers that support secure storage, email, scheduling, and system maintenance.
Customer management or booking platforms used to organise appointments and service records.
Professional advisers such as insurers, legal advisers, or auditors where required.
Regulatory or public authorities where we are legally required to disclose information.

When processors handle personal data on our behalf, they are required to keep it secure, use it only for the agreed purpose, and comply with applicable data protection requirements. We do not permit processors to use your personal data for their own marketing purposes.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods vary depending on the type of information and the reason for processing.

Customer and service records are kept for as long as needed to manage services, disputes, warranties, or follow-up requests.
Financial and tax records are retained for the period required by law, typically for accounting and tax compliance purposes.
Communication records are retained for a reasonable period to help manage ongoing customer relationships and resolve issues.
Consent-based data is kept until consent is withdrawn or the data is no longer needed.

When data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a safe manner. We regularly review retained data to ensure it remains necessary.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, secure storage, password protection, limited staff access, and careful selection of service providers.

Although no system can be guaranteed to be completely secure, we take data protection seriously and work to reduce risks wherever reasonably possible. If we become aware of a personal data breach that may pose a risk to your rights and freedoms, we will act in accordance with applicable legal requirements.

7. Your Rights Under GDPR

As a data subject, you have a number of rights regarding your personal data. These rights may be subject to conditions or legal exceptions, but we will always respond appropriately and within the required timeframes.

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you can request deletion of your data where there is no lawful reason for us to keep it.
Right to restriction: you can ask us to limit how we use your data in certain circumstances.
Right to data portability: you can request that we provide certain information in a structured, commonly used format.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where consent is the basis for processing, you may withdraw it at any time.

If you believe that your data protection rights have been breached, you also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority.

8. Children’s Data

Our services are generally intended for adults who are responsible for arranging cleaning services. We do not knowingly collect personal data from children unless it is necessary for service-related access arrangements or is provided by an adult customer on their behalf. If we become aware that we have collected data inappropriately, we will take steps to delete it.

9. International Transfers

Where service providers store or process data outside the UK, we will ensure that appropriate safeguards are in place to protect the data in line with UK GDPR requirements. This may include the use of approved contractual protections or transfer mechanisms.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or the services we provide. Any updated version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically.

Summary of Our Commitment

Carpet Cleaners SE16 processes personal data only where necessary, using clear lawful bases, secure systems, and limited retention periods. We aim to respect your privacy, protect your information, and support your rights as a customer in the SE16 area. We are committed to GDPR-compliant handling of all customer data.