Privacy Policy - Carpet Cleaners W1W

This Privacy Policy explains how Carpet Cleaners W1W collects, uses, stores, shares, and protects personal data in connection with our carpet cleaning services. It applies to all Carpet Cleaners W1W customers in the W1W area, including individuals who request a quotation, make a booking, communicate with us, receive a service, or otherwise interact with us in relation to our operations. We are committed to handling personal data fairly, lawfully, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy is intended to help customers understand what data we process, why we process it, the lawful basis we rely on, how long we keep it, who may process it on our behalf, and what rights individuals have regarding their personal information.

1. Personal Data We Collect

We collect only the personal data that is necessary for us to provide services, manage customer relationships, comply with legal obligations, and run our business efficiently. The categories of information we may collect include:

Identity details such as your name and, where relevant, business name.
Contact details including address, email address, and telephone number.
Service information such as the property location, requested cleaning services, booking dates, access instructions, and special service requirements.
Payment and transaction data such as payment confirmation, invoices, receipts, and billing records. We do not knowingly store more payment information than is necessary for processing and accounting purposes.
Communication records including messages, enquiries, complaints, feedback, and service-related correspondence.
Technical and usage data if you contact us electronically, such as basic device or system information provided through email or similar channels.
Service notes relating to the condition of carpets, stain types, cleaning methods used, and any instructions needed to complete the work safely and effectively.

In some cases, we may process limited information that could be considered sensitive if it is shared by you and is necessary for service delivery, for example access needs, property conditions, or health and safety considerations. We aim to minimise such data and only process it where strictly necessary.

2. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To schedule, confirm, and deliver carpet cleaning services.
To manage customer records and service history.
To process payments, issue invoices, and maintain accounts.
To communicate about appointments, changes, service issues, or follow-up matters.
To handle complaints, claims, and requests for support.
To meet legal, tax, accounting, and regulatory obligations.
To improve our services, train staff, and maintain quality standards.
To protect our business, customers, and staff from fraud, misuse, or security risks.

We do not use personal data for purposes that are incompatible with the reasons for which it was collected, unless we have a lawful basis to do so and have informed you where required.

3. Lawful Basis for Processing

Under data protection law, we must have a valid lawful basis for each processing activity. The lawful bases we rely on may include the following:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes handling bookings, providing services, processing payments, and managing customer communications related to the service.

Legal Obligation

We may process data where necessary to comply with legal requirements, such as tax recordkeeping, accounting duties, business compliance, and responses to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, improving operations, preventing fraud, securing our systems, and maintaining internal records. When we rely on legitimate interests, we consider whether the processing is reasonable, necessary, and proportionate.

Consent

In limited situations, we may rely on your consent, for example where it is required for optional communications or certain uses of information. Where consent is used, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Processors

We may share personal data with trusted third parties where necessary for business operations, service delivery, or compliance. Where these third parties process personal data on our behalf, they act as processors. We ensure that appropriate contractual safeguards are in place so that processors only act on our instructions and protect the data they handle.

Processors or service providers may include:

Payment processors that handle card or electronic transactions.
Accounting or bookkeeping providers that assist with financial records and tax compliance.
IT and cloud service providers that support email, storage, scheduling, or record management.
Customer management systems used to organise bookings, quotes, and service history.
Professional advisers such as accountants, insurers, or legal advisers where needed.

We may also disclose personal data where required by law, to enforce our terms, to protect our rights, or to prevent harm, fraud, or unlawful activity. We do not sell personal data.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. Retention periods vary depending on the type of data and the reason it was collected.

Customer and booking records are generally kept for the duration of the service relationship and for a reasonable period afterwards for administration and dispute handling.
Financial records are retained for the period required by tax and accounting laws.
Correspondence and complaint records may be kept longer where needed to evidence communications, resolve issues, or defend legal claims.
Technical logs and security records are kept only as long as required for security, troubleshooting, or operational purposes.

When personal data is no longer needed, we take steps to delete, anonymise, or securely archive it, depending on the circumstances.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, limited authorisation, staff awareness procedures, and data minimisation practices. While no system can be completely secure, we work to maintain a level of protection appropriate to the risks involved.

7. Your Rights

Individuals whose personal data we process have several rights under data protection law. Subject to legal limits and verification of identity, you may have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete information.
Erase your data in certain circumstances.
Restrict how we process your data in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability for information you have provided to us, where applicable.
Withdraw consent where processing is based on consent.

You also have the right to be informed about how your data is used and to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to raise any concerns with us first so that we can address them promptly and fairly.

8. International Transfers

If any of our processors or systems store or access data outside the UK, we will ensure that appropriate safeguards are in place to protect your information in line with applicable law. These safeguards may include approved contractual clauses or other lawful transfer mechanisms.

9. Children’s Data

Our services are intended for adults and businesses arranging cleaning services. We do not knowingly collect personal data from children unless it is incidental to a service request and necessary for lawful business or safety reasons. Where such data is processed, it is handled with the same level of care and protection.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service-related changes. Any revised version will replace the previous policy and will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

11. Summary of Our Commitment

Carpet Cleaners W1W respects your privacy and aims to process personal data in a lawful, fair, and transparent manner. We collect only what is necessary, use it for clear business purposes, retain it for no longer than required, and protect it through appropriate safeguards. This policy applies to all customers in the W1W area and sets out the standards we follow to ensure responsible data handling throughout our services.

By using our services, you acknowledge that your personal data may be processed as described in this Privacy Policy, subject always to applicable data protection law.