Privacy Policy - Carpetcleaning SE15

This Privacy Policy applies to all Carpetcleaning SE15 customers in the area. It explains how we collect, use, store, share, and protect personal data when we provide carpet cleaning services. We are committed to handling personal information in a lawful, fair, and transparent way in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning SE15 provides carpet cleaning and related domestic or commercial cleaning services within the SE15 area. For the purposes of data protection law, we act as the data controller for the personal data we collect and process in connection with our services. This means we decide why and how your personal data is used.

2. Information We Collect

We only collect personal data that is necessary for providing our services, managing our business, and meeting legal obligations. The types of information we may collect include:

Identity details such as your name
Contact details such as address, phone number, and email address
Service details including appointment times, property access notes, cleaning preferences, and service history
Payment information where needed to process invoices and payments
Communication records such as emails, messages, and notes from phone calls
Technical information if you interact with digital services, such as basic device or usage data
Special instructions relating to stains, materials, allergies, pets, or access requirements

We do not intentionally collect special category data unless it is necessary and lawful to do so. If such data is provided to us by you, we will treat it with additional care and only use it where a valid legal condition applies.

3. How We Use Your Data

We use your personal data to deliver our services and operate responsibly. This may include:

Booking and confirming cleaning appointments
Preparing service quotations and invoices
Providing carpet cleaning and related services
Managing customer communication and service updates
Handling complaints, queries, and follow-up requests
Keeping internal records for business administration
Meeting tax, accounting, and legal obligations
Improving service quality and customer experience

We only use personal data for the purposes stated in this policy or for closely related purposes that would reasonably be expected.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. Depending on the situation, we may rely on one or more of the following:

Contract

We process your personal data when it is necessary to enter into or perform a contract with you. For example, we need your name, address, and contact details to provide the carpet cleaning service you requested.

Legal Obligation

We may process data to comply with legal requirements, such as record keeping for tax and accounting purposes, or to respond to lawful requests from authorities.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include maintaining service records, preventing fraud, or improving operations. Where required, we will balance our interests against your privacy rights.

Consent

In limited cases, we may ask for your consent, for example for certain marketing communications or optional uses of data. Where we rely on consent, you can withdraw it at any time.

5. How We Share Personal Data

We do not sell your personal data. We may share it only where necessary and lawful, including with trusted service providers and processors who help us run our business. These may include:

Payment processors that handle card or electronic payments
IT and cloud service providers that store data or support our systems
Accounting or bookkeeping providers that assist with financial records
Communication providers that help us send emails, messages, or appointment confirmations
Professional advisers such as accountants or legal advisers when necessary

All processors are required to protect your data and act only on our instructions. We take steps to ensure they meet GDPR standards and provide appropriate security measures.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason for processing.

Customer service records are generally kept for a reasonable period to support business administration and service history
Financial and invoice records are retained for the period required by tax and accounting law
Communication records are kept only as long as needed to manage queries, disputes, or service follow-up

When personal data is no longer needed, we will securely delete it or anonymise it so that it can no longer identify you.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and limiting access to those who need the information to carry out their duties. While no system can be guaranteed to be completely secure, we take data protection seriously and continuously review our safeguards.

8. Your Rights

Under data protection law, you have several rights in relation to your personal data. Subject to legal conditions and exemptions, these rights include:

The right to be informed about how your data is used
The right of access to obtain a copy of your personal data
The right to rectification to correct inaccurate or incomplete data
The right to erasure in certain circumstances, also known as the right to be forgotten
The right to restrict processing in certain situations
The right to data portability where processing is based on consent or contract and carried out by automated means
The right to object to processing based on legitimate interests or direct marketing
Rights related to automated decision-making, where applicable

You may also withdraw consent at any time where we rely on consent as the lawful basis. This will not affect the lawfulness of processing carried out before withdrawal.

9. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children unless it is necessary in connection with a customer request, such as access arrangements involving a family household. If we become aware that we have collected data from a child without appropriate legal basis, we will take steps to delete it.

10. International Transfers

If any personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it. These may include adequacy regulations, contractual protections, or other lawful transfer mechanisms recognised under data protection law.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our data handling practices. Any updates will apply from the date they are published. We encourage customers to review this policy periodically to stay informed about how their data is protected.

12. Summary of Our Approach

Carpetcleaning SE15 only processes personal data when it has a valid legal reason to do so, and it limits use to what is necessary for service delivery, administration, compliance, and legitimate business needs. We keep data secure, retain it only for as long as needed, and respect your rights under GDPR. Your privacy is important to us, and we aim to handle all personal information responsibly and transparently.

By using Carpetcleaning SE15 services in the area, customers acknowledge that this Privacy Policy applies to them.