Privacy Policy - Carpetcleaning TW7

This Privacy Policy explains how Carpetcleaning TW7 collects, uses, stores, shares, and protects personal data. It applies to all Carpetcleaning TW7 customers in the area, including prospective customers, existing customers, and anyone who has made an enquiry or requested services. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Personal Data We Collect

We only collect personal data that is necessary to provide our services, manage our business operations, and meet legal requirements. The information we may collect includes:

Identity data: name, title, and any details you provide when contacting us or booking a service.
Contact data: address, email address, and telephone number.
Service information: details about the cleaning service requested, property type, preferred appointment times, and notes relevant to the job.
Payment data: payment status, transaction records, and billing information where applicable. We do not store unnecessary payment details beyond what is required for processing and accounting.
Communication data: records of calls, emails, messages, quotes, complaints, and service-related correspondence.
Technical data: limited information such as IP address or device details if you interact with our digital systems, where relevant to security and service performance.

We do not intentionally collect special category personal data unless you choose to provide it and it is necessary for a legitimate reason, for example to make reasonable adjustments or respond to a specific request. If such information is provided, it will be handled with extra care and only where permitted by law.

2. How We Use Personal Data

We use personal data for the following purposes:

to provide quotations and carry out cleaning services;
to schedule appointments and manage customer bookings;
to communicate with customers before, during, and after service delivery;
to process payments and maintain accurate records;
to respond to enquiries, feedback, and complaints;
to comply with legal, tax, accounting, and regulatory obligations;
to improve our services, customer experience, and internal processes;
to protect against fraud, misuse, or security incidents.

We will not use your personal data in a way that is incompatible with the original purpose for which it was collected unless we have a lawful basis to do so.

3. Lawful Basis for Processing

We only process personal data when we have a lawful basis under UK GDPR. Depending on the circumstances, the lawful basis may be one or more of the following:

Contract

We process your data where it is necessary to enter into or perform a contract with you. This includes taking bookings, providing services, sending confirmations, and managing billing.

Legal Obligation

We may process personal data where required to comply with legal obligations, such as tax records, accounting rules, insurance obligations, or lawful requests from public authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include maintaining service records, preventing fraud, improving customer service, and ensuring secure operations.

Consent

Where required, we rely on your consent. For example, if we need permission to use certain optional information or send non-essential communications, we will ask clearly and you may withdraw consent at any time.

4. Sharing Personal Data and Processors

We may share personal data with trusted third parties when necessary to run our business and deliver our services. These third parties act as processors or independent controllers depending on their role.

Processors may include:

IT and cloud service providers that store or support business systems;
payment processing providers;
accounting and bookkeeping services;
customer communication tools used to manage messages or appointment reminders;
professional advisers such as lawyers, insurers, or auditors where needed.

We require processors to handle personal data securely, confidentially, and only in accordance with our instructions and applicable data protection law. They are not permitted to use your data for their own unrelated purposes.

We may also disclose personal data if required by law, court order, regulatory authority, or where necessary to protect our rights, property, staff, or customers.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the reason for holding it.

Customer records: retained for the duration of the customer relationship and for a reasonable period afterwards.
Financial and tax records: retained for the period required by law.
Communication records: kept as long as needed to manage the relevant enquiry, complaint, or service issue.
Marketing preferences: stored until you withdraw consent or object, where applicable.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. Retention is reviewed regularly to ensure data is not kept longer than necessary.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include restricted access, password protection, secure storage, staff awareness practices, and carefully selected processors.

Although no method of transmission or storage is completely secure, we work to protect your information using reasonable and appropriate safeguards. Where a personal data breach occurs and there is a risk to your rights and freedoms, we will respond in accordance with legal requirements.

7. Your Rights

Under data protection law, you have a number of rights regarding your personal data. These rights may apply depending on the circumstances and the legal basis for processing:

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: you can request deletion of your data in certain cases.
Right to restrict processing: you can ask us to limit how we use your data in certain situations.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you can request certain data in a structured, commonly used format where applicable.
Right to withdraw consent: where we rely on consent, you can withdraw it at any time.

Exercising your rights will not normally affect the core services we provide to you, though some requests may limit our ability to continue certain processing or deliver particular functions. We may need to verify your identity before responding to a request.

8. Automated Decision-Making

We do not use fully automated decision-making or profiling in a way that produces legal or similarly significant effects for customers. If this changes, we will update this policy and provide the information required by law.

9. Children’s Data

Our services are intended for adults and business or household customers. We do not knowingly collect personal data from children unless it is incidental to a service request and lawful to process. If we become aware that we have collected data from a child without proper authority, we will take appropriate steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the time it is published. We encourage customers to review this policy periodically to stay informed about how we handle personal data.

11. Summary of Our Commitment

We value privacy and aim to keep personal data accurate, secure, and used only for legitimate purposes. Carpetcleaning TW7 will process customer information fairly, transparently, and lawfully, with respect for individual rights. This policy applies to all Carpetcleaning TW7 customers in the area and describes how we manage personal data throughout the customer relationship.