Privacy Policy - Carpet Cleaners E8

This Privacy Policy explains how Carpet Cleaners E8 collects, uses, stores, and protects personal data when providing carpet cleaning and related services. It applies to all Carpet Cleaners E8 customers in the area, including individuals who request quotes, make bookings, receive services at home or at business premises, or otherwise interact with our company.

1. Who We Are

For the purposes of UK data protection law and the UK GDPR, Carpet Cleaners E8 is the data controller for the personal data described in this policy. This means we decide why and how your personal data is processed. We are committed to processing personal information lawfully, fairly, and transparently, and to using it only for clear and legitimate purposes connected with our services.

2. Personal Data We Collect

We may collect different types of personal data depending on how you interact with us. The information we collect may include:

Identity information such as your name and title.
Contact details such as address, email address, and telephone number.
Service information such as details about the cleaning service requested, property access notes, preferred appointment times, and service history.
Payment information such as transaction records and limited payment details necessary to process payments and maintain accounting records.
Communication records including messages, call notes, complaints, feedback, and correspondence regarding bookings or service issues.
Technical information where applicable, such as device or browser information if you contact us through digital channels.
Special circumstances information that you may choose to share, for example access requirements or sensitive instructions related to a property or service visit.

We do not intentionally collect more personal data than is necessary for the services we provide. Where possible, we keep data collection to a minimum and use it only for relevant business purposes.

3. How We Use Your Data

We use personal data to provide, manage, and improve our services. This may include:

Responding to enquiries and providing quotations.
Managing bookings, attendance, and service delivery.
Processing payments and issuing invoices or receipts.
Keeping records of work completed and customer preferences.
Handling complaints, refunds, or service issues.
Meeting legal, tax, and accounting obligations.
Improving our customer service, operations, and internal processes.
Preventing fraud, misuse, or unlawful activity.

We may also use data to communicate important information about a booking or service. We will not use your data for purposes that are incompatible with the reasons it was collected unless required or permitted by law.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each category of personal data we process. Carpet Cleaners E8 relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering cleaning services, arranging access, processing payments, and managing post-service matters.

Legal Obligation

We may process certain data to comply with legal requirements, including tax, accounting, consumer, and record-keeping obligations.

Legitimate Interests

We may process personal data where it is in our legitimate interests to do so and where those interests are not overridden by your rights and freedoms. Examples include improving our services, maintaining business records, preventing fraud, and handling customer service queries.

Consent

In limited situations, we may rely on your consent, for example where you voluntarily provide information that is not necessary for the service or agree to a specific optional use of your data. Where consent is used, you may withdraw it at any time.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Retention periods depend on the type of data and the reason for processing.

In general:

Customer and booking records are retained for the period needed to manage the service relationship and handle any follow-up matters.
Payment and invoice records are kept for the period required by tax and financial regulations.
Communication records may be retained for a reasonable period to support customer care, dispute resolution, and business administration.
Information no longer needed is securely deleted, anonymised, or archived in line with our retention practices.

When deciding how long to keep data, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorised use or disclosure, the purposes of processing, and any legal requirements that apply.

6. Sharing Data and Processors

We may share personal data with trusted third parties where necessary to provide our services or comply with the law. These third parties act either as independent controllers or as processors acting on our instructions.

Processors may include:

Payment service providers that process card or electronic payments.
Accounting and bookkeeping providers that assist with financial records and compliance.
IT and cloud service providers that store or support secure business systems.
Customer communication tools that help us manage enquiries, appointments, or service updates.
Professional advisers such as auditors, insurers, or legal advisers where necessary.

We require all processors to protect your data, process it only for specified purposes, and apply appropriate security measures. We do not sell personal data. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with applicable law.

7. Data Security

We take reasonable and appropriate technical and organisational measures to protect personal data from accidental loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, restricted permissions, staff confidentiality obligations, and regular review of internal processes.

While we work hard to protect personal information, no system can be guaranteed to be completely secure. If we become aware of a personal data breach that presents a risk to your rights and freedoms, we will handle it in line with legal obligations and take appropriate steps to limit any impact.

8. Your Rights

As a data subject, you have rights under UK data protection law. These rights may be subject to legal limitations, but we will always aim to respond fairly and transparently. Your rights include:

The right to be informed about how your data is used.
The right of access to request a copy of the personal data we hold about you.
The right to rectification if your information is inaccurate or incomplete.
The right to erasure in certain circumstances, sometimes called the right to be forgotten.
The right to restrict processing in certain situations.
The right to object to processing based on legitimate interests or direct marketing, where applicable.
The right to data portability for data processed by automated means on the basis of contract or consent, where applicable.
Rights relating to automated decision-making, if such processing is ever used.

If we rely on consent for any processing, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

9. Exercising Your Rights

You can exercise your rights by making a request for access, correction, deletion, restriction, objection, or portability. We may need to verify your identity before responding to protect your data and ensure requests are handled securely. We aim to respond within the time limits required by law and will keep you informed if a request is complex or if additional time is needed.

Please note that some requests may not be possible where we must keep data for legal, contractual, or legitimate operational reasons. In those cases, we will explain the basis for any refusal or limitation.

10. Children’s Data

Our services are generally intended for adults. We do not knowingly collect personal data from children unless it is necessary in connection with a service request or provided by a parent, guardian, or authorised adult. If we become aware that we have collected data unlawfully from a child, we will take appropriate steps to delete it or otherwise process it in accordance with legal requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal obligations, operational practices, or service arrangements. The latest version will always apply to the processing of personal data. We encourage customers to review this policy periodically to stay informed about how their information is handled.

12. Final Statement

Carpet Cleaners E8 is committed to protecting your privacy and using personal data responsibly. We process information only where we have a valid legal reason to do so, keep it only for as long as needed, and work with trusted processors who meet appropriate data protection standards. This policy applies to all Carpet Cleaners E8 customers in the area and is intended to provide clear information about how personal data is collected, used, retained, and protected.