Privacy Policy - Carpet Cleaners NW6

This Privacy Policy explains how Carpet Cleaners NW6 collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related cleaning services to customers in the NW6 area. It applies to all Carpet Cleaners NW6 customers in the area, including private households, landlords, tenants, property managers, and business clients who request or receive our services.

We are committed to handling personal data in a lawful, fair, and transparent way in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to help customers understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights individuals have over their personal data.

1. Data We Collect

We only collect personal data that is necessary for us to provide services, manage customer relationships, and meet our legal and operational obligations. The types of data we may collect include:

Identity details such as name, title, and, where relevant, company or property management details.
Contact details such as telephone number, email address, and service address.
Service information such as cleaning instructions, property access preferences, appointments, and details of the requested cleaning service.
Payment and billing information such as invoices, payment status, and transaction records. We do not store more payment information than is necessary to process and record transactions.
Communication records including messages, complaints, queries, feedback, and service confirmations.
Technical data where applicable, such as basic usage data if a customer contacts us through digital channels.

We do not intentionally collect special category data, such as information relating to health, religion, ethnicity, or political opinions, unless a customer voluntarily provides such information and it is strictly necessary for the service. If that happens, we will apply additional safeguards.

2. How We Use Personal Data

Personal data is used for the following purposes:

To arrange, deliver, and manage cleaning services.
To confirm bookings, amend appointments, and communicate service updates.
To issue invoices, process payments, and maintain financial records.
To respond to enquiries, complaints, and after-service requests.
To maintain internal records and improve our service delivery.
To comply with legal, tax, accounting, and insurance obligations.
To protect our business, staff, and customers from fraud, misuse, or security incidents.

We will only use personal data for the purposes for which it was collected, unless we reasonably determine that we need to use it for a compatible purpose and the law permits that use.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing personal data. Carpet Cleaners NW6 relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with a customer. This includes managing bookings, providing cleaning services, and handling payment or service delivery arrangements.

Legal Obligation

We may process personal data where needed to comply with legal obligations, such as accounting, tax record keeping, insurance requirements, and regulatory responsibilities.

Legitimate Interests

We may process personal data for legitimate business interests, including improving service quality, maintaining customer records, preventing fraud, managing internal administration, and ensuring the security of our operations. When we rely on this basis, we consider whether our interests are overridden by the rights and freedoms of the individual.

Consent

In limited situations, we may rely on consent, for example where a customer has asked us to use certain optional information or receive non-essential communications. Where consent is used, it will be informed, specific, and freely given, and it can be withdrawn at any time.

4. Sharing and Processors

We do not sell personal data. However, we may share personal data with trusted third parties who act as processors on our behalf, or with independent organisations where required by law or necessary for service delivery. These may include:

Payment processors who handle card or online payment transactions.
Accounting and bookkeeping providers who support invoicing, tax, and financial record keeping.
IT and cloud service providers who store or support customer records and business systems.
Communication service providers who assist with email, scheduling, or administrative correspondence.
Insurance providers, legal advisers, and auditors where disclosure is necessary for legitimate business, compliance, or claims handling purposes.

All processors are required to protect personal data and may only process it according to our instructions and applicable data protection law. We take reasonable steps to ensure that any third party with access to personal data has appropriate security measures in place.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, reporting, or dispute-resolution requirements. Retention periods may vary depending on the type of data and the purpose for processing.

Customer service and booking records are generally retained for the duration of the customer relationship and for a reasonable period afterwards.
Invoices and payment records are retained for the period required by tax and accounting law.
Complaints, disputes, and claims-related records may be retained for longer where necessary to protect our legal interests.
Consent-based records are retained until consent is withdrawn or the information is no longer needed.

When personal data is no longer required, it is securely deleted, anonymised, or destroyed in line with our internal retention practices.

6. Data Security

We use appropriate technical and organisational measures to safeguard personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limited access to records on a need-to-know basis.

Although we take reasonable steps to protect data, no system can be guaranteed as completely secure. If a personal data breach occurs that is likely to result in a risk to individuals, we will respond in line with legal requirements.

7. User Rights

Individuals have a number of rights under data protection law. Subject to legal limits and verification of identity, customers may have the right to:

Access the personal data we hold about them.
Rectify inaccurate or incomplete personal data.
Erase personal data in certain circumstances.
Restrict processing in certain circumstances.
Object to processing based on legitimate interests or direct marketing.
Data portability, where processing is based on consent or contract and carried out by automated means.
Withdraw consent at any time where consent is the lawful basis.

Customers also have the right to raise concerns about how their personal data is handled. If an individual believes their data protection rights have been infringed, they may seek assistance from the UK data protection authority. We encourage customers to raise concerns with us first so we can try to resolve the issue promptly.

8. Children’s Data

Our services are directed to adults and property occupants rather than children. We do not knowingly collect personal data from children unless it is necessary in a family or household context and only to the extent required to provide our services. If we become aware that we have collected data from a child without appropriate grounds, we will take steps to delete it.

9. International Transfers

If any processor stores or accesses data outside the United Kingdom, we will ensure that appropriate safeguards are in place in accordance with applicable data protection law. These safeguards may include recognised contractual protections or other lawful transfer mechanisms.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. Any updated version will apply from the date it is made available. Customers are encouraged to review the policy periodically to stay informed about how personal data is handled.

11. Summary of Our Commitment

Carpet Cleaners NW6 is committed to processing personal data responsibly, transparently, and securely. We collect only the information needed to deliver our services, rely on clear lawful bases for processing, retain data for no longer than necessary, and work only with processors that are bound to protect data appropriately. This policy applies to all Carpet Cleaners NW6 customers in area and is designed to protect individual privacy while allowing us to provide reliable cleaning services.

By using our services, customers acknowledge that their personal data may be processed in accordance with this Privacy Policy and applicable law.