Privacy Policy - Carpet Cleaners Kentishtown

This Privacy Policy explains how Carpet Cleaners Kentishtown collects, uses, stores, shares, and protects personal data. It applies to all Carpet Cleaners Kentishtown customers in the area, including individuals who request quotations, book services, make enquiries, or otherwise interact with our cleaning services. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK GDPR and the Data Protection Act 2018.

By using our services, you acknowledge that your personal data may be processed for the purposes described in this Policy. We aim to keep the information we hold about you accurate, secure, and no more extensive than necessary for the service we provide.

1. Data We Collect

We only collect personal data that is relevant to providing our services, managing our relationship with you, and meeting legal obligations. Depending on how you interact with us, we may collect the following categories of information:

Identity details: name, title, and any information you provide when requesting a service.
Contact details: address, email address, and telephone number.
Service details: property type, cleaning requirements, carpet or upholstery condition, preferred dates, and instructions relating to access or service delivery.
Payment and transaction details: records of payments made, invoices, and billing information. We do not unnecessarily store card details where payment is handled by a secure third-party processor.
Communication records: emails, message history, notes from phone calls, and feedback or complaints.
Technical data: limited information such as IP address or device data where collected through online forms or service tools.

We do not intentionally collect special category data unless you voluntarily provide it and it is necessary for a specific service request. If such information is provided, we will only process it where permitted by law and where appropriate safeguards are in place.

2. How We Use Your Data

We use personal data only for clear and legitimate purposes. These include:

providing quotes and assessing service needs;
booking, delivering, and managing cleaning services;
communicating with you about appointments, changes, or service issues;
processing payments and maintaining financial records;
responding to enquiries, complaints, and feedback;
maintaining internal records and service history;
meeting legal, tax, accounting, and regulatory obligations;
protecting our business, staff, and customers from fraud or misuse;
improving service quality and customer experience.

We will not use your personal data for purposes that are incompatible with those listed above unless we inform you and, where required, obtain a valid legal basis for the new processing activity.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. The lawful bases we rely on are:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotations, scheduling services, carrying out cleaning work, and managing payments.

Legal Obligation

We process certain data to comply with legal requirements, including tax, accounting, and record-keeping obligations. We may also retain information where required by law or where a lawful request is made by a public authority.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. Examples include improving our services, maintaining business records, preventing fraud, handling service disputes, and ensuring the security of our operations.

Consent

In limited cases, we may rely on your consent, for example if you agree to receive optional marketing communications. Where consent is used, you may withdraw it at any time, and withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

We always aim to choose the most appropriate lawful basis for the specific processing activity.

4. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods depend on the type of information and the reason it is held.

Service and customer records: retained for as long as needed to manage the service relationship and address follow-up queries or disputes.
Financial and tax records: retained for the period required by applicable law.
Communication records: retained for a reasonable period to support customer care, service quality, and issue resolution.
Marketing records: retained until you withdraw consent or opt out, where applicable.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

5. Processors and Sharing of Data

We may share personal data with trusted third parties who act as data processors on our behalf. These processors are only permitted to use your data according to our instructions and are required to protect it appropriately.

Examples of processors may include:

Payment service providers: to process transactions securely.
Accounting and bookkeeping providers: to manage financial records and legal obligations.
IT and cloud service providers: to store data, manage business systems, and support secure communication.
Scheduling or administration tools: to help manage appointments and customer records.
Professional advisers: such as accountants or legal advisers, where needed.

We may also disclose data where required by law, including to regulatory bodies, law enforcement agencies, or courts. We do not sell your personal data.

6. International Transfers

If any processor stores or accesses personal data outside the UK, we will take steps to ensure appropriate safeguards are in place. These may include approved contractual protections or transfer mechanisms recognised under data protection law. We only transfer data where it is necessary and where adequate protection can be maintained.

7. Data Security

We use reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and limiting access to staff or contractors who need the information for legitimate business purposes.

Although we work to protect your information, no system can be guaranteed completely secure. If we become aware of a personal data incident that affects your rights or poses a risk, we will take appropriate steps in line with our legal obligations.

8. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to legal limits and exemptions.

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: in certain circumstances, you can ask us to delete your data.
Right to restriction: you can ask us to limit how we use your data in specific situations.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: where applicable, you can request that we provide your data in a portable format.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will review your request and respond within the timeframe required by law. We may need to verify your identity before responding to ensure personal data is not disclosed to the wrong person.

9. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where provided by an adult customer as part of a service arrangement, for example access or household details necessary to complete work safely. If we learn that we have collected data unlawfully, we will take appropriate steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal duties, or data handling practices. The latest version will apply from the date it is published or otherwise communicated. We encourage customers to review this Policy periodically so they remain informed about how their personal data is used.

11. Summary of Our Commitment

Carpet Cleaners Kentishtown is committed to respecting your privacy and handling personal data responsibly. We collect only what is necessary, use it for clear purposes, retain it for appropriate periods, and protect it with suitable safeguards. Our approach is designed to support a professional service while meeting the standards expected under data protection law.

This Privacy Policy applies to all Carpet Cleaners Kentishtown customers in area.