Privacy Policy - Carpetcleaning Sw17

This Privacy Policy explains how Carpetcleaning Sw17 collects, uses, stores, shares, and protects personal data when providing cleaning services. It applies to all Carpetcleaning Sw17 customers in the area, including prospective customers, current customers, and anyone who contacts us for a quote, booking, or service-related enquiry. We are committed to handling personal information lawfully, fairly, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning Sw17 provides professional carpet and upholstery cleaning services. For the purposes of data protection law, we act as the data controller for the personal data we collect and use in connection with our services. This means we decide why and how personal data is processed.

2. What Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing customer relationships, and meeting legal or operational obligations. The categories of data we may collect include:

Identity information such as your name
Contact details such as your address, email address, and telephone number
Service details such as booking preferences, property access information, and service instructions
Payment-related information where required to process transactions or issue invoices
Communication records including messages, complaints, feedback, and service requests
Technical data such as limited device or browser information if you contact us electronically
Service history including past appointments, quotations, and customer notes

We do not intentionally collect special category data unless it is absolutely necessary and you have provided it, for example if you volunteer information relevant to access needs or safety requirements. Where special category data is processed, we apply additional safeguards.

3. How We Use Your Data

We use personal data for the following purposes:

To provide quotations and confirm bookings
To deliver carpet cleaning and related services
To communicate about appointments, updates, and service changes
To handle payments, invoices, refunds, and account administration
To respond to questions, complaints, and service issues
To maintain records for internal administration and service quality
To comply with legal, tax, and regulatory obligations
To improve our services and customer experience

We only process personal data for specified, explicit, and legitimate purposes and do not use it in ways that are incompatible with those purposes.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the context, Carpetcleaning Sw17 relies on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging services, confirming bookings, delivering cleaning work, and handling payment-related administration.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include managing customer relationships, maintaining service records, improving operations, preventing fraud, and resolving disputes.

Legal Obligation

We may process and retain certain information to comply with legal obligations, including tax, accounting, record-keeping, and consumer protection requirements.

Consent

Where required, we rely on your consent. For example, if we need to process information that is not otherwise covered by another lawful basis, we will ask for clear permission. You may withdraw consent at any time, although this will not affect processing already carried out lawfully before withdrawal.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties when necessary to provide our services, operate our business, or meet legal obligations. These organisations act as processors or, in some cases, independent controllers.

Examples of processors may include:

Payment service providers who process card or electronic payments
Accounting or bookkeeping services used for tax and financial administration
IT and cloud storage providers that host business systems and records
Customer communication tools used to manage bookings and messages
Operational support services that help us deliver our work

Where processors handle personal data on our behalf, we require them to act only on our instructions, keep data secure, and comply with data protection law. We do not sell personal data.

We may also disclose information if required to do so by law, court order, or a public authority, or where necessary to protect our rights, customers, or business operations.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason it is held.

In general:

Customer booking and service records are retained for a period necessary for administration and dispute resolution
Financial and invoicing records are retained for the period required by tax and accounting law
Communication records are kept for as long as needed to manage the customer relationship and respond to queries
Data no longer needed is securely deleted or anonymised

When determining retention, we consider the sensitivity of the data, the risk of harm from unauthorised use, and applicable legal obligations.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our data-handling practices.

Although no method of transmission or storage is completely secure, we work to maintain a level of security appropriate to the nature of the data and the risks involved.

8. Your Rights

You have a number of rights under data protection law in relation to the personal data we hold about you. These rights may be subject to certain conditions or exemptions. They include:

Right of access – to request a copy of the personal data we hold about you
Right to rectification – to ask us to correct inaccurate or incomplete data
Right to erasure – to request deletion of data in certain circumstances
Right to restriction – to ask us to limit how we use your data in certain cases
Right to object – to object to processing based on legitimate interests or direct marketing
Right to data portability – to receive certain data in a structured, commonly used format
Right to withdraw consent – where processing is based on consent

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been breached.

9. Children’s Data

Our services are intended for adult customers and property-related service arrangements. We do not knowingly collect personal data from children unless it is incidental and necessary for service delivery or access arrangements. If we become aware that we have collected data from a child without appropriate justification, we will take steps to remove it where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data-handling practices. Any updated version will apply from the date it is issued. We encourage customers to review the policy periodically to stay informed about how personal data is protected.

11. Summary of Our Commitments

Carpetcleaning Sw17 is committed to processing personal data lawfully, fairly, and transparently. We collect only what we need, use it for clear and legitimate purposes, retain it only as long as necessary, and share it only with trusted processors or where required by law. We respect your rights and take the protection of your personal data seriously.

By using our services, you acknowledge that personal data may be processed in line with this Privacy Policy and applicable data protection laws.