Privacy Policy - Carpetcleaning SE10

This Privacy Policy explains how Carpetcleaning SE10 collects, uses, stores, shares, and protects personal data in connection with the services we provide. It applies to all Carpetcleaning SE10 customers in the area, including anyone who requests a quotation, books a service, communicates with us, or otherwise interacts with our business. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning SE10 provides carpet cleaning and related cleaning services to residential and commercial customers. For the purposes of data protection law, we act as the data controller for the personal data we collect and use about our customers, prospective customers, and certain business contacts. This means we decide why and how your personal data is processed.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing our business, and meeting legal obligations. The types of data we may collect include:

Identity data: your name and title.
Contact data: address, email address, and telephone number.
Service data: details of the cleaning service requested, property access information, service preferences, and appointment history.
Payment data: billing details and transaction records. We do not store full payment card details where payment processing is handled by secure third-party providers.
Communication data: messages, complaints, feedback, and records of correspondence with you.
Technical data: limited information such as device type, browser type, and basic usage data if you interact with our digital systems.
Marketing preferences: your choices regarding whether you wish to receive promotional messages, where applicable.

We do not intentionally collect special category data unless you choose to provide it to us, for example if you share information that may reveal health-related access needs or other sensitive details that are necessary for service delivery. Where such information is provided, we will handle it with extra care and only where a lawful basis applies.

3. How We Use Your Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to schedule, deliver, and manage cleaning services;
to process payments and maintain financial records;
to communicate with you about appointments, service updates, or changes;
to manage complaints, disputes, and customer support requests;
to keep appropriate business and tax records;
to improve our services, processes, and customer experience;
to comply with legal and regulatory obligations;
to send marketing communications where permitted and where you have not opted out.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose and that such use is lawful.

4. Lawful Basis for Processing

We process personal data only when we have a valid lawful basis under data protection law. Depending on the context, we rely on one or more of the following:

Contract: when processing is necessary to take steps at your request before entering into a contract or to perform a contract with you, such as arranging and delivering cleaning services.
Legal obligation: when we must process data to comply with legal duties, including tax, accounting, and record-keeping requirements.
Legitimate interests: when processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms, such as managing our operations, preventing misuse, improving services, and handling customer queries.
Consent: where we rely on your consent, for example for certain marketing activities or the processing of specific optional information. You may withdraw consent at any time.

Where special category data is processed, we will also ensure that a separate condition under UK GDPR is satisfied and that the processing is necessary and proportionate.

5. Sharing Your Personal Data

We may share your personal data with trusted third parties where necessary for the operation of our business and the delivery of services. These third parties act as processors or, in some cases, as independent controllers. We require them to handle data securely and only in accordance with our instructions or legal obligations.

Examples of processors and recipients may include:

payment service providers that process transactions securely;
IT and software providers used for scheduling, invoicing, or record management;
cloud storage or backup providers;
accountants or bookkeeping services;
customer communication tools and email service providers;
professional advisers, such as lawyers or insurers, where required;
public authorities, regulators, or law enforcement where legally required.

We do not sell your personal data. If any third party receives data on our behalf, we ensure appropriate contractual and security measures are in place.

6. International Transfers

If any of our service providers process personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses, so that your data remains protected to the standard required by law.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The exact retention period depends on the type of data and the context in which it was collected.

Customer service and booking records are typically kept for a period necessary to manage ongoing business and support obligations.
Invoice, payment, and accounting records are kept for the period required by tax and financial regulations.
Complaint and correspondence records are retained for as long as needed to resolve issues and demonstrate proper handling.
Marketing preferences are retained until you withdraw consent or opt out.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures may include access controls, secure storage, limited staff access, password protection, and supplier due diligence. While no system can be guaranteed to be completely secure, we work to reduce risk and maintain an appropriate level of protection.

9. Your Rights

Under UK data protection law, you have a number of rights regarding your personal data. These rights may apply depending on the circumstances and the legal basis for processing.

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete data.
Right to erasure: you may ask us to delete your data in certain situations.
Right to restriction: you may request that we limit how we use your data in certain cases.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to data portability: you may request that certain data be provided in a structured, commonly used format.
Right to withdraw consent: where processing is based on consent, you can withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law and may need to verify your identity before taking action. Please note that some rights are subject to legal limits and may not apply in every situation.

10. Marketing Preferences

If we send marketing communications, we will do so only where allowed by law. You can opt out of marketing at any time. If you do not wish to receive promotional messages, your choice will be respected. Non-essential communications will be limited to lawful and relevant purposes.

11. Cookies and Similar Technologies

If we use any cookies or similar technologies on our digital systems, they may be used to support functionality, improve performance, or understand usage patterns. Where required, we will seek consent before placing non-essential cookies. You can manage preferences through your browser settings or device controls where applicable.

12. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children for direct service purposes. If we become aware that we have unintentionally collected a child’s personal data without proper permission, we will take reasonable steps to delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our practices, or the services we provide. The latest version will apply to your use of our services. We encourage customers to review this policy periodically so they remain informed about how their information is handled.

14. Complaints and Supervisory Authority

If you have concerns about how we handle your personal data, we encourage you to raise them so we can address the issue. You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed.

15. Summary of Our Commitment

At Carpetcleaning SE10, we aim to process personal data responsibly, transparently, and only when necessary. We collect only the information needed to provide and manage our services, rely on clear lawful bases, keep data only as long as required, use trusted processors under proper safeguards, and respect your rights under data protection law. This policy applies to all Carpetcleaning SE10 customers in area and is designed to give you confidence that your information is treated with care and in compliance with GDPR principles.