Privacy Policy - Carpet Cleaners E17

This Privacy Policy explains how Carpet Cleaners E17 collects, uses, stores, shares, and protects personal data. It applies to all Carpet Cleaners E17 customers in the area, including anyone who enquires about, books, receives, or pays for our carpet cleaning services. We are committed to handling personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpet Cleaners E17 is the data controller for the personal information collected in connection with our services. This means we decide how and why personal data is used. We only process personal data where we have a valid lawful basis and only for legitimate business purposes connected with providing cleaning services, managing customer relationships, and meeting legal obligations.

2. Personal Data We Collect

We collect only the information needed to provide and manage our services. The types of data we may collect include:

Identity details such as your name and title.
Contact details such as your address, phone number, and email address.
Service details including booking preferences, service history, property access notes, and cleaning instructions.
Payment information such as payment confirmation and billing records. We do not retain more card data than is necessary for payment processing.
Communication records including enquiries, complaints, feedback, and messages you send to us.
Technical data such as basic website or device information if you interact with our online systems.
Special category data only where strictly necessary and where you have provided it voluntarily, for example, if access needs or health-related information are relevant to service delivery.

We do not intentionally collect more data than we need. If you provide information about another person, you should ensure you have permission to do so.

3. How We Use Your Data

We use personal data to provide safe, efficient, and reliable carpet cleaning services. Typical uses include:

Processing enquiries and bookings.
Delivering cleaning services at the requested property.
Managing payments, invoices, and service administration.
Communicating about appointments, changes, or service updates.
Responding to complaints, feedback, or service issues.
Maintaining business records and internal quality control.
Meeting legal, tax, insurance, and accounting requirements.
Preventing fraud, misuse, or unlawful activity.

We use personal data only in ways that are fair, lawful, and transparent. Where we rely on consent, you may withdraw it at any time.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each use of personal data. We rely on the following bases:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes booking services, arranging appointments, carrying out cleaning, and handling payments.

Legal Obligation

We may process information when required to comply with legal duties, including accounting, tax, record-keeping, health and safety, or responding to lawful requests from public authorities.

Legitimate Interests

We may use data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include customer administration, improving services, maintaining security, and preventing fraud.

Consent

In limited situations, we may ask for consent, especially where the law requires it. If we rely on consent, you can withdraw it at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

Vital Interests

In rare circumstances, we may process data to protect someone’s vital interests, for example if an emergency arises during a service visit.

5. Sharing Your Data and Processors

We do not sell personal data. We may share it only when necessary and only with trusted third parties who help us operate our business. These third parties act as processors when they process data on our instructions, or as independent controllers where they determine their own purposes.

Examples of processors may include:

Payment processors for secure payment handling.
Booking and scheduling systems used to manage appointments.
IT and cloud service providers that store or secure business data.
Communication providers that help us send service-related messages.
Professional advisers such as accountants, auditors, or insurers where necessary.

We require processors to safeguard personal data, use it only for authorised purposes, and comply with applicable data protection laws. If data is transferred outside the UK, we will ensure suitable safeguards are in place.

6. Data Retention

We keep personal data only for as long as needed to fulfil the purposes for which it was collected, and to meet legal, accounting, or reporting requirements. Retention periods depend on the type of information and the reason for holding it.

Booking and service records are usually retained for a reasonable period after the service ends, to manage queries, complaints, or repeat bookings.
Financial and tax records are retained for the period required by law.
Communication records may be kept for a limited time to resolve disputes or maintain service history.
Consent-based information is kept only until consent is withdrawn or the purpose ends.

When data is no longer needed, we securely delete, anonymise, or archive it in line with our retention practices.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures may include access controls, secure storage, staff awareness, and limiting data access to those who need it for business purposes. While no system is completely risk-free, we aim to keep your data protected at all times.

8. Your Rights

Under GDPR, you have several rights regarding your personal data. These rights may be subject to legal exceptions and limitations, but we will always assess requests carefully and respond appropriately.

Right of access – you may ask for a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – in some circumstances, you may request deletion of your data.
Right to restriction – you may ask us to limit how we use your data in certain cases.
Right to data portability – you may request a copy of data you provided to us in a structured format, where applicable.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – if processing is based on consent, you may withdraw it at any time.

You also have the right to raise concerns with the UK Information Commissioner’s Office if you believe your data has not been handled properly.

9. Children’s Data

Our services are intended for adults or those acting on behalf of property owners or tenants. We do not knowingly collect children’s personal data unless it is necessary and lawful in connection with a service request. Where such data is involved, we apply additional care and only process what is strictly required.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. Any updated version will apply from the date it is published. We encourage customers to review the policy periodically so they remain aware of how personal data is handled.

11. Our Commitment

We respect your privacy and aim to process personal data in a transparent and responsible way. Our approach is based on minimisation, necessity, and accountability. This means we only collect the data we need, keep it for no longer than required, and use it only for lawful purposes connected to our services.

By using Carpet Cleaners E17 services in the area, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.