Privacy Policy - Carpetcleaning W10

Carpetcleaning W10 is committed to protecting the privacy and personal data of all customers in the W10 area. This Privacy Policy explains how we collect, use, store, share, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Carpetcleaning W10 customers in the area, including prospective customers, active customers, and anyone who communicates with us regarding our services.

1. Data Controller

For the purposes of data protection law, Carpetcleaning W10 acts as the data controller for personal data collected in connection with our carpet cleaning services. This means we decide how and why your personal data is processed. We take our responsibilities seriously and aim to handle all personal information fairly, lawfully, and transparently.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing customer relationships, and fulfilling legal or operational obligations. The types of information we may collect include:

Identity details such as your name
Contact details such as address, telephone number, and email address
Service information such as booking preferences, property access notes, and requested cleaning services
Payment-related information where needed for billing, invoicing, or refunds
Communication records such as messages, complaints, feedback, and service updates
Technical data such as basic website or device information if you use digital enquiry forms

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, or there is another lawful basis for processing it under data protection law.

3. How We Use Personal Data

We process personal data for specific and limited purposes. These include:

Responding to enquiries and providing quotes
Booking, managing, and completing carpet cleaning appointments
Processing payments and issuing invoices or receipts
Handling customer service requests and complaints
Maintaining internal records and business administration
Improving our services and customer experience
Meeting legal, tax, accounting, and insurance obligations
Preventing fraud, misuse, or security incidents

We will never use your personal data for unrelated purposes without first ensuring that we have a valid lawful basis.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing your personal data. Carpetcleaning W10 relies on the following lawful bases:

Contract

We process personal data when it is necessary to perform a contract with you or to take steps at your request before entering into a contract. For example, this applies when you ask us for a quote, make a booking, or request a cleaning service.

Legitimate Interests

We may process data where it is in our legitimate interests, provided your rights and freedoms do not override those interests. This may include customer service management, business administration, quality control, and safeguarding our operations. We always consider the impact on your privacy before relying on this basis.

Legal Obligation

In some cases, we need to process personal data to comply with legal obligations, such as tax record keeping, accounting rules, insurance requirements, or lawful requests from public authorities.

Consent

Where required, we may rely on your consent. If consent is used, it will be specific, informed, and freely given. You can withdraw consent at any time, although this will not affect the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We may share personal data with trusted third parties known as processors who help us deliver our services or manage our business. These processors act only on our instructions and are required to keep your data secure and confidential.

Examples of processors or service providers may include:

Payment processing providers
Accounting and invoicing services
IT, cloud storage, and communications providers
Customer management or scheduling systems
Professional advisers such as accountants or legal advisers

We may also disclose personal data if required by law, court order, regulator, or law enforcement authority. Where possible, we will ensure that any such disclosure is limited to what is necessary and proportionate.

We do not sell your personal data.

6. International Transfers

If any of our processors store or access data outside the United Kingdom, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other legally approved transfer mechanisms. Our goal is to ensure your personal data receives a level of protection consistent with UK GDPR requirements.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by law. Retention periods may vary depending on the type of information and the legal or operational purpose for keeping it.

As a general approach:

Enquiry data may be kept for a limited period after the enquiry is closed
Booking and service records may be retained to manage customer history, disputes, or follow-up work
Financial and tax records may be retained for the period required by law
Complaint or dispute records may be kept until the matter is resolved and for a reasonable period afterwards

When data is no longer needed, it is securely deleted, anonymised, or archived in a way that prevents unnecessary access.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our data handling practices. Although no system is completely secure, we take reasonable steps to safeguard all information we hold.

9. Your Rights

Under data protection law, you have several rights regarding your personal data. These rights apply subject to certain legal limitations and exceptions. They include:

Right of access – you may request a copy of the personal data we hold about you
Right to rectification – you may ask us to correct inaccurate or incomplete data
Right to erasure – in some cases, you may request deletion of your data
Right to restriction – you may ask us to limit how we use your data
Right to object – you may object to processing based on legitimate interests
Right to data portability – in certain cases, you may receive your data in a usable format
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time

If you wish to exercise any of these rights, we will respond in line with applicable data protection law. We may need to verify your identity before acting on your request.

10. Complaints

If you have concerns about how your personal data is handled, you have the right to raise a complaint with the relevant data protection authority. We encourage you to contact us first so we can try to resolve the matter promptly and fairly. We treat privacy concerns seriously and aim to address them in a transparent and respectful manner.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our internal processes. Any revised version will apply from the date it is published. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

12. Scope of This Policy

This Privacy Policy applies to all Carpetcleaning W10 customers in area, including individuals who request quotations, make bookings, receive services, submit feedback, or otherwise interact with us in relation to our carpet cleaning services. By using our services, you acknowledge that you have read and understood the practices described in this policy.

We are committed to processing your personal data responsibly, securely, and in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.