Privacy Policy - Carpet Cleaners SW3

This Privacy Policy explains how Carpet Cleaners SW3 collects, uses, stores, shares, and protects personal data belonging to customers in the SW3 area. It applies to all Carpet Cleaners SW3 customers in the area, including individuals who request quotations, book services, receive cleaning appointments, or otherwise engage with our services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to customers, prospective customers, and any person who communicates with us in connection with our carpet cleaning services in SW3. It also applies to data received from third parties where they arrange services on behalf of another person, such as landlords, letting agents, property managers, or family members. By using our services, you acknowledge that your personal data may be processed as described in this policy.

2. Data we collect

We collect only the personal data needed to provide our services, manage our business, and meet legal obligations. The types of data we may collect include:

Identity information: name and, where necessary, title.
Contact details: address in SW3 or surrounding service area, telephone number, and email address.
Service information: details about the cleaning service requested, property access requirements, preferred dates, and instructions relevant to the appointment.
Payment information: records of payments, invoices, transaction references, and billing details. We do not intentionally store full card details unless required by a secure payment provider.
Communication records: correspondence relating to quotes, bookings, complaints, feedback, or service follow-up.
Technical information: limited data such as basic website or device information if you interact with our online services, where applicable.

We do not seek to collect special category data unless it is strictly necessary and you provide it voluntarily, for example if you give information that affects access arrangements or health-related sensitivities. In such cases, we will only process it where a lawful basis exists and suitable safeguards are in place.

3. How we use your data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange, deliver, and manage carpet cleaning services.
To process payments and issue invoices or receipts.
To communicate appointment updates, service changes, and follow-up messages.
To handle complaints, disputes, and customer support requests.
To keep business records and comply with legal, accounting, and tax obligations.
To improve our services, maintain quality standards, and prevent fraud or misuse.

We only process data that is relevant and necessary for these purposes. We aim to ensure that all processing is lawful, limited, and proportionate.

4. Lawful basis for processing

Under data protection law, we must have a valid lawful basis to process your personal data. Depending on the context, we rely on the following bases:

Performance of a contract

We process personal data when it is necessary to provide a quote, make a booking, carry out cleaning services, or take steps at your request before entering into a contract.

Legal obligation

We may process and retain certain information to comply with tax laws, accounting requirements, consumer protection rules, or other legal obligations.

Legitimate interests

We may process data for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. This includes managing customer records, improving services, maintaining security, and responding to enquiries or complaints.

Consent

In limited situations, we may rely on consent, such as where you opt in to receive optional communications. If we rely on consent, you may withdraw it at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

5. Data sharing and processors

We may share personal data with trusted third parties that help us operate our services. These parties act as data processors or independent controllers depending on the context. We only share the minimum information necessary and require appropriate security and confidentiality measures.

Examples of processors may include:

IT and cloud service providers: for secure storage, email, and system administration.
Payment service providers: to process payments securely.
Accounting and bookkeeping providers: for invoicing, financial record keeping, and tax compliance.
Scheduling or customer management tools: to organise appointments and maintain service records.
Professional advisers: such as accountants or legal advisers where necessary.

We may also disclose data where required by law, court order, regulatory request, or to protect our rights, property, staff, customers, or the public. We do not sell personal data.

6. Data retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Retention periods depend on the type of data and the reason it was collected.

In general:

Quotation and booking information may be kept for a reasonable period to manage customer relationships and service history.
Financial and invoicing records are typically retained for the period required by tax and accounting law.
Communication records may be retained for as long as needed to resolve disputes or support service quality.
Data no longer required will be securely deleted, anonymised, or otherwise disposed of in a safe manner.

Where possible, we periodically review retained data to ensure it is still necessary. We do not keep data indefinitely without a lawful purpose.

7. Data security

We take reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, limited permissions, staff awareness, and the use of reputable service providers. Although no system can be completely secure, we work to maintain appropriate safeguards for the nature of the information we process.

8. International transfers

If any service provider stores or processes data outside the United Kingdom, we will take steps to ensure that appropriate safeguards are in place in line with UK data protection law. This may include the use of approved contractual protections or transfers to countries with adequate data protection standards.

9. Your rights

As a data subject, you have rights under UK data protection law. These rights may apply depending on the circumstances and the legal basis for processing. They include:

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: you can request deletion of your data in certain situations.
Right to restrict processing: you can ask us to limit how we use your data in certain cases.
Right to data portability: you may request your data in a structured, commonly used format where applicable.
Right to object: you can object to processing based on legitimate interests in certain circumstances.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law and may need to verify your identity before taking action. In some cases, legal requirements may prevent us from deleting or restricting certain information immediately.

10. Complaints and supervisory authority

If you are concerned about how your personal data has been handled, you have the right to raise a complaint with the relevant data protection supervisory authority in the UK. We encourage you to contact us first so we can try to resolve the matter promptly and fairly. Your privacy matters to us, and we aim to address concerns with care and transparency.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is used.

12. Summary of our approach

Carpet Cleaners SW3 processes personal data only for legitimate and necessary purposes, uses lawful bases under UK GDPR, shares data only with trusted processors, and retains information for no longer than necessary. We respect your rights and aim to ensure that all customers in SW3 can rely on a clear, secure, and responsible approach to privacy.