Carpet Cleaning SE16 Data Protection and Privacy Policy

This Privacy Policy explains how Carpet Cleaning SE16 collects, uses, stores, and protects personal data relating to our customers and prospective customers in the SE16 area. It is designed to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood the practices described in this policy.

Scope and Controller Responsibility

This Privacy Policy applies to all Carpet Cleaning SE16 customers and prospective customers located in the SE16 area who contact us, request a quotation, make a booking, or otherwise interact with our services. Carpet Cleaning SE16 is the controller of the personal data described in this policy and is responsible for ensuring that your data is handled in accordance with applicable data protection law.

Types of Personal Data We Collect

We collect and process different categories of personal data depending on how you interact with us. The main categories are:

Identification and contact details: name, address, postcode, and other contact information necessary to provide our services and communicate with you.

Service and booking information: property type, access instructions, preferred dates and times for appointments, details of the cleaning services requested, and information about previous bookings.

Communication records: information contained in messages, enquiries, or complaints you send to us, and our responses to you.

Billing and payment information: records of payments, invoices, and transaction history. We do not store full payment card details; where card payments are processed, these are handled by secure payment processors.

Technical and usage data: where applicable, limited technical information about how you use our website, such as IP address, device data, and basic analytics, to improve our services and maintain security.

How We Collect Personal Data

We collect personal data directly from you when you contact us by phone, through online forms, or in person, when you request a quotation, make a booking, or provide feedback. We may also collect data when you browse our website, subject to your browser settings and any consent provided for analytics or similar technologies.

Lawful Bases for Processing

We only process personal data where we have a lawful basis under the UK GDPR. The main lawful bases we rely on are:

Contract: We process your personal data to enter into and perform a contract with you, for example to provide carpet cleaning services, manage your bookings, send confirmations, and handle payments.

Legitimate interests: We may process data where it is necessary for our legitimate business interests, provided these are not overridden by your rights and interests. This includes managing and improving our services, keeping records for business planning, responding to enquiries, and protecting our operations.

Legal obligations: We process personal data where required to comply with legal and regulatory obligations, such as tax, accounting, and record-keeping requirements.

Consent: In limited cases, we may rely on your consent, for example for certain marketing communications where required by law. Where processing is based on consent, you can withdraw that consent at any time.

Purposes for Which We Use Personal Data

We use personal data for the following purposes:

To provide, manage, and deliver carpet cleaning and related services in the SE16 area, including arranging appointments, accessing your property as agreed, and carrying out the requested work.

To communicate with you about enquiries, quotations, bookings, rescheduling, or cancellations, and to provide customer support.

To issue invoices, process payments, handle refunds where applicable, and maintain accurate financial records.

To manage our relationship with you, including requesting feedback, handling complaints, and improving the quality of our services.

To maintain the security and integrity of our systems, prevent fraud or misuse, and ensure the proper functioning of our website and internal processes.

To comply with applicable laws, regulations, and requests from competent authorities where required.

Data Sharing and Processors

We do not sell your personal data. We may share your data with carefully selected third parties who act as processors on our behalf, strictly for the purposes described in this policy and subject to appropriate contractual safeguards.

These processors may include:

Payment processing providers that handle card or electronic payments in a secure and compliant manner.

IT and hosting providers that support our website, booking systems, and data storage.

Administrative and accounting service providers who assist with financial record keeping and compliance.

Where required by law or to protect our legal rights, we may also share your data with professional advisers or with regulatory and law enforcement authorities.

Whenever we use data processors, we ensure they only process personal data on our documented instructions, implement appropriate security measures, and respect your data protection rights.

International Data Transfers

Where possible, we aim to keep your personal data within the United Kingdom or the European Economic Area. If data is transferred to countries outside these regions by our processors, we require that appropriate safeguards are in place, such as standard contractual clauses or equivalent protection measures, to ensure your personal data remains adequately protected.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, and to meet our legal and regulatory obligations.

Customer records, including booking history and invoices, are typically retained for a period consistent with legal requirements for tax and accounting records. After this period, data is securely deleted or anonymised so that it can no longer be linked to an identifiable person.

Where processing is based on consent for marketing communications, we will retain your contact details for that purpose until you withdraw your consent or object to further communications, after which we will remove you from our marketing lists.

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include access controls, secure storage, and limiting personal data access to personnel who need it to perform their duties. While we strive to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Data Protection Rights

Under the UK GDPR, you have certain rights in relation to your personal data. These include:

Right of access: You have the right to request confirmation as to whether we process your personal data and to obtain a copy of that data.

Right to rectification: You can ask us to correct inaccurate or incomplete personal data we hold about you.

Right to erasure: In certain circumstances, you may request the deletion of your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.

Right to restriction: You can ask us to restrict processing of your data in specific situations, such as while we are verifying the accuracy of the data or handling an objection.

Right to object: You may object to processing that is based on our legitimate interests, and you have an absolute right to object to direct marketing at any time.

Right to data portability: Where processing is based on consent or contract and carried out by automated means, you can request that we provide your personal data in a structured, commonly used, machine-readable format, or that it is transmitted directly to another controller where technically feasible.

If you wish to exercise any of these rights, we may need to verify your identity before fulfilling your request to protect your privacy and security.

Marketing Communications

We may use your contact details to send you information about services that are similar to those you have already purchased, where permitted by law. You can opt out of receiving marketing communications at any time by following any instructions provided in the message or by contacting us to update your preferences. Opting out of marketing does not affect our ability to contact you for service or administrative purposes.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any significant changes will be described in an updated version of this policy, which will apply from the date it is made available. We encourage you to review this policy periodically to stay informed about how we handle your personal data.

Contact and Complaints

If you have any questions about this Privacy Policy, how we process your personal data, or if you wish to exercise your data protection rights, you can contact us using the details provided on our website or other customer communication materials.

You also have the right to lodge a complaint with the UK data protection supervisory authority if you believe your rights have been infringed. We would, however, appreciate the opportunity to address your concerns directly before you approach the authority, and we encourage you to contact us first so we can try to resolve any issues.