Privacy Policy - Carpetcleaning SW20

This Privacy Policy explains how Carpetcleaning SW20 collects, uses, stores, shares, and protects personal data. It applies to all Carpetcleaning SW20 customers in the area, including current, former, and prospective customers who request or receive our services. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning SW20 provides carpet cleaning and related cleaning services to residential and commercial customers in the SW20 area. For the purposes of data protection law, we are the data controller for the personal data we collect and process in connection with our services.

This policy sets out what data we may collect, why we use it, the legal grounds we rely on, how long we keep it, the categories of third parties that may process it on our behalf, and the rights available to individuals under data protection law.

2. Data We Collect

We only collect personal data that is necessary for providing and managing our services, dealing with enquiries, fulfilling legal obligations, and improving our operations. The types of personal data we may collect include:

Identity information, such as your name and title.
Contact details, such as your address, telephone number, and email address.
Service information, such as property details, service preferences, appointment notes, and records of services requested or completed.
Communication records, including emails, message content, complaint details, and notes from phone or written correspondence.
Payment information, such as payment status, transaction references, invoices, and limited billing details.
Technical information if you interact with our digital systems, such as device or browser information and basic usage logs, where applicable.

We do not intentionally collect special category data unless it is necessary and lawful to do so. If such information is provided to us incidentally, we will handle it in accordance with data protection law and only where a valid legal basis applies.

3. How We Use Your Personal Data

We use personal data only for clear and legitimate purposes. These may include:

responding to enquiries and providing quotes;
scheduling and delivering cleaning services;
managing customer accounts and service records;
processing payments, issuing invoices, and maintaining accounting records;
handling complaints, feedback, or service disputes;
meeting legal, tax, insurance, or regulatory obligations;
maintaining internal records and service quality;
protecting against fraud, misuse, or unlawful activity;
sending service-related communications that are necessary for your booking or ongoing customer relationship.

We will not use your personal data for purposes that are incompatible with the original purpose for which it was collected, unless we have a valid legal basis and have informed you where required.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each processing activity. Depending on the context, Carpetcleaning SW20 may rely on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering cleaning services, processing payments, and managing service-related communications.

Legal Obligation

We may process data where necessary to comply with legal duties, such as tax, accounting, fraud prevention, or record-keeping obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. This can include maintaining service records, improving operations, responding to customer queries, and protecting our business against misuse.

Consent

Where required, we will ask for your consent before processing your data for a specific purpose. If processing is based on consent, you can withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

5. Data Sharing and Processors

We do not sell personal data. We may share limited information with third parties only where necessary and lawful. These third parties may act as processors or independent controllers depending on the service they provide.

Examples of processors or service providers may include:

Payment processors that handle secure payment transactions;
IT and hosting providers that store or support our business systems;
Accounting or invoicing services that help manage financial records;
Customer communication tools used for appointment or service messages;
Professional advisers, such as accountants, insurers, or legal advisers, where necessary;
Public authorities, regulators, or law enforcement where required by law.

Where we use processors, we ensure they are bound by written contracts requiring them to protect personal data, process it only on our instructions, and implement appropriate technical and organisational measures. We take reasonable steps to ensure data is shared only with trusted parties and only to the extent needed for the relevant purpose.

6. International Transfers

If any personal data is transferred outside the United Kingdom, we will only do so where appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other legally approved transfer mechanisms. We will take reasonable steps to ensure your data remains protected to the standard required by applicable law.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, and reporting obligations. Retention periods may vary depending on the type of data and the reason for processing.

In general:

Customer and service records are kept for the period needed to manage the service relationship and resolve any issues.
Financial records are retained for the period required by tax and accounting law.
Enquiry data may be kept for a limited period if no service is booked, unless deletion is requested and no lawful reason exists to retain it.
Complaints and correspondence may be retained for as long as needed to evidence our handling of the matter.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

8. Your Rights

Under data protection law, individuals have a number of rights in relation to their personal data. Subject to legal limits, you may have the right to:

Access the personal data we hold about you;
Rectify inaccurate or incomplete information;
Erase your data in certain circumstances;
Restrict processing in specific situations;
Object to processing based on legitimate interests;
Data portability for information you provided to us where applicable;
Withdraw consent where processing is based on consent;
Lodge a complaint with the Information Commissioner’s Office if you believe your rights have been infringed.

To help protect your privacy, we may need to verify your identity before responding to a request. We will respond within the time limits required by law and will not usually charge a fee unless a request is manifestly unfounded, excessive, or repetitive.

9. Data Security

We take the security of personal data seriously and apply appropriate measures to protect it against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and limiting data access to those who need it for legitimate business purposes.

While no system can be guaranteed completely secure, we review our security practices periodically and aim to maintain a level of protection appropriate to the nature of the data we process.

10. Children’s Data

Our services are not directed at children. We do not knowingly collect personal data from children unless it is necessary in connection with a service request made by an adult customer and lawful to do so. If we become aware that personal data has been collected without appropriate permission or lawful basis, we will take steps to delete or otherwise handle it in line with the law.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is published. We encourage customers to review this policy periodically to remain informed about how we protect personal data.

12. Scope of This Policy

This policy applies to all Carpetcleaning SW20 customers in the area, as well as individuals who contact us about services, request information, or otherwise engage with us in relation to our cleaning services. By using our services or submitting your personal data to us, you acknowledge that you have read and understood this Privacy Policy.

Carpetcleaning SW20 is committed to privacy, accountability, and compliance. We will only process personal data where it is necessary, lawful, and proportionate, and we will continue to review our practices to ensure that customer information is respected and protected.