Privacy Policy - Carpet Cleaners Nottinghill

This Privacy Policy explains how Carpet Cleaners Nottinghill collects, uses, stores, shares, and protects personal data. It applies to all Carpet Cleaners Nottinghill customers in the area, including current, former, and prospective customers who enquire about or receive our carpet cleaning services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpet Cleaners Nottinghill provides professional carpet cleaning services to homes and businesses in the local area. For the purposes of data protection law, we act as a data controller when we determine the purposes and means of processing personal data. This means we decide why and how your information is used in connection with our services.

We take privacy seriously and aim to ensure that any personal information we process is relevant, accurate, and limited to what is necessary. We only process data when we have a valid lawful basis to do so.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity details: name, title, and, where relevant, business name.
Contact details: address, email address, and telephone number.
Service information: details of the cleaning services requested, property access notes, preferred booking times, and service history.
Payment information: payment status, transaction records, and limited billing details. We do not store full card details unless strictly necessary and permitted by the payment method used.
Communication records: messages, calls, complaints, feedback, and correspondence relating to quotes, bookings, or completed services.
Technical data: basic website or device information if you interact with our online systems, such as IP address, browser type, and usage logs, where applicable.
Special instructions: any information you voluntarily provide that helps us deliver the service, such as access preferences or cleaning requirements.

We do not intentionally collect sensitive personal data unless it is necessary and you choose to provide it. If such information is received, we will handle it with additional care and only where there is a lawful basis for processing.

3. How We Use Your Data

We use personal data for the following purposes:

To provide quotations, confirm bookings, and deliver carpet cleaning services.
To communicate with you before, during, and after a job.
To process payments, refunds, and account-related matters.
To manage customer service requests, complaints, and service follow-up.
To maintain records for accounting, tax, and business administration.
To improve our services, training, quality control, and operational planning.
To comply with legal obligations and respond to lawful requests from authorities.

We only collect information that is reasonably necessary for these purposes and avoid using personal data in ways that are incompatible with the reason it was collected.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. Depending on the context, we may rely on one or more of the following:

Contract

We process data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes managing bookings, providing services, and handling payment-related matters.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining customer records, improving services, preventing fraud, and managing business operations. We ensure that any processing on this basis is proportionate and privacy-conscious.

Legal Obligation

We may process and retain certain information where required by law, such as accounting, tax, or record-keeping obligations.

Consent

In some situations, we may rely on your consent, particularly for optional communications or specific processing activities. Where consent is used, you may withdraw it at any time. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors or, in limited circumstances, as separate controllers. These parties only process data on our instructions or where they have their own lawful basis.

Examples of processors or service providers may include:

Payment processors: to handle card or electronic payments securely.
Accounting and bookkeeping providers: to support invoicing, tax, and financial records.
IT and cloud service providers: to store data, manage systems, and support communication tools.
Customer management or scheduling tools: to organise appointments and service records.
Professional advisers: such as legal or tax advisers where necessary.

We require processors to implement appropriate technical and organisational measures to protect your information. We do not sell personal data. If data is transferred outside the UK, we will ensure appropriate safeguards are in place so that your information remains protected to a standard required by law.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Customer service and booking records: retained for a period needed to manage the relationship and resolve disputes.
Financial and tax records: retained for the period required by applicable accounting and tax laws.
Communication records: retained as long as needed for operational, service, or legal reasons.
Enquiry data: retained for a limited period if no service is booked, unless needed for follow-up or legal protection.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. Retention periods may vary depending on the type of record and legal requirements.

7. Your Rights

As a data subject under UK GDPR, you have several rights regarding your personal information:

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete data.
Right to erasure: in certain circumstances, you may ask us to delete your data.
Right to restriction: you may request that we limit how we use your data in certain situations.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to data portability: you may request that we provide certain data in a structured, commonly used format.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

We may need to verify your identity before responding to a rights request. We will respond within the time limits required by law and, where applicable, explain any legal reason we cannot fully comply.

8. Data Security

We use appropriate safeguards to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff awareness, and limits on who can view customer information.

Although no system is completely secure, we work to reduce risks and regularly review our practices to help maintain confidentiality and integrity. We also expect our processors to apply suitable security measures.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

10. Your Responsibilities

When you provide personal data to us, please ensure it is accurate and up to date. If your contact details or service instructions change, letting us know helps us deliver services properly and keep records correct. This is especially important where access arrangements, appointment details, or billing information are involved.

11. Summary of Our Commitment

Carpet Cleaners Nottinghill processes personal data responsibly and only where there is a valid lawful basis. We collect only what we need, use it for clear service-related purposes, and keep it no longer than necessary. We also work with trusted processors under appropriate safeguards and respect your rights under data protection law.

By using our services, you acknowledge that this Privacy Policy applies to all Carpet Cleaners Nottinghill customers in the area. We are committed to protecting your privacy and maintaining the trust placed in us by our customers.