Privacy Policy - Carpetcleaning W1J

Last updated: This Privacy Policy explains how Carpetcleaning W1J collects, uses, stores, shares, and protects personal data. It applies to all Carpetcleaning W1J customers in the W1J area, including individuals and businesses that request or receive our carpet cleaning services, quote requests, inspections, aftercare support, and related communications.

1. Introduction

We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy sets out what information we collect, why we collect it, the legal bases we rely on, how long we keep it, who may process it on our behalf, and the rights you have over your personal data.

We only collect data that is necessary for providing our services, operating our business, maintaining records, meeting legal obligations, and improving the quality and safety of our work. We do not sell personal data.

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Identity information: name, title, and where relevant, business or property ownership details.
Contact information: address, email address, and phone number.
Service information: details about the property, rooms, carpet types, stains, cleaning requirements, access instructions, and booking preferences.
Payment and transaction information: records of payments, invoices, receipts, and related billing data.
Communication records: emails, messages, call notes, complaints, feedback, and customer service correspondence.
Technical information: limited device, browser, or usage information if you contact us through digital channels, where applicable.
Special category data: we do not intentionally collect special category data. If such information is incidentally provided, we will handle it with additional care and only where necessary and lawful.

We may collect personal data directly from you, from a person acting on your behalf, from your property manager or business representative, or from records created during the delivery of our services.

3. How We Use Your Data

We use personal data for the following purposes:

to provide quotations, schedule appointments, and deliver carpet cleaning services;
to manage customer accounts, job records, and service history;
to communicate with you about bookings, changes, or service updates;
to process payments, issue invoices, and maintain accounting records;
to respond to enquiries, complaints, or requests for support;
to maintain safety, quality control, and service standards;
to comply with legal, tax, insurance, and regulatory obligations;
to protect our business, staff, customers, and property from fraud, misuse, or security incidents;
to analyse service performance and improve our operations.

We will only use your personal data for the purposes described in this policy or for compatible purposes permitted by law.

4. Lawful Basis for Processing

We process personal data only when we have a lawful basis under the UK GDPR. The main lawful bases we rely on are:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes providing quotes, confirming bookings, carrying out cleaning services, invoicing, and handling service-related communications.

Legal Obligation

We process certain data where we must comply with legal requirements, such as tax laws, accounting obligations, insurance requirements, and record-keeping duties.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, improving services, preventing fraud, keeping records, and maintaining business security.

Consent

In limited circumstances, we may rely on your consent, for example where it is required for certain optional communications or specific uses not covered by another lawful basis. Where consent is used, you may withdraw it at any time.

We do not rely on consent where another lawful basis is more appropriate.

5. Data Sharing and Processors

We may share personal data with trusted third parties who act as data processors or, in some cases, independent controllers. These third parties only process data on our instructions or for their own lawful purposes where applicable. We require appropriate confidentiality, security, and data protection safeguards.

Processors and service providers may include:

booking and scheduling systems;
payment service providers and accounting software;
email, messaging, and customer support tools;
IT hosting, cloud storage, and backup services;
professional advisers such as accountants, insurers, legal advisers, or auditors;
subcontractors or operatives engaged to assist with service delivery, where necessary;
regulators, authorities, or law enforcement where required by law.

We only share the minimum personal data necessary for the relevant purpose. Where a third party processes data on our behalf, they are contractually required to protect it and use it only as instructed.

6. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose it was collected, including to meet legal, accounting, or reporting obligations. The exact retention period depends on the type of data and the context in which it is held.

Customer and service records: retained for a reasonable period after the service ends to handle follow-up queries, quality control, and dispute resolution.
Invoice and payment records: retained for the period required by tax and accounting laws.
Communication records: retained for as long as necessary to manage the relationship and maintain accurate records.
Complaints and incident records: retained for the period needed to resolve the matter and demonstrate compliance.

When personal data is no longer needed, we will securely delete, destroy, or anonymise it.

7. Security of Your Data

We take reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and appropriate data handling procedures.

Although no system can be guaranteed completely secure, we work to ensure that personal data is protected according to the nature and sensitivity of the information we hold.

8. International Transfers

If any personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or equivalent protections required by data protection law.

9. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access: request a copy of the personal data we hold about you.
Right to rectification: ask us to correct inaccurate or incomplete data.
Right to erasure: request deletion of your data in certain circumstances.
Right to restriction: ask us to limit how we use your data in certain situations.
Right to object: object to processing based on legitimate interests or direct marketing.
Right to data portability: request transfer of certain data in a structured, commonly used format where applicable.
Right to withdraw consent: withdraw consent where we rely on consent as the lawful basis.

We will respond to valid requests in line with applicable data protection law. Please note that these rights may be subject to legal exceptions and limitations.

10. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is necessary in connection with a service request made by an adult customer or authorised representative.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices. Any updated version will apply from the date it is published or otherwise communicated.

12. Further Information

If you have questions about how your personal data is handled, you may ask for further information about our privacy practices, data retention approach, or the lawful basis used for a particular processing activity. We aim to keep our privacy information clear, lawful, and easy to understand.

This Privacy Policy applies to all Carpetcleaning W1J customers in the W1J area and should be read alongside any service terms or notices that may apply to your booking or customer relationship.

We are committed to respecting your privacy and handling your personal data responsibly.