Privacy Policy - Carpet Cleaners Westhampstead

This Privacy Policy explains how Carpet Cleaners Westhampstead collects, uses, stores, shares, and protects personal data when providing services to customers in the Westhampstead area. It applies to all Carpet Cleaners Westhampstead customers in the area, including anyone who makes an enquiry, requests a quotation, books a service, receives cleaning services, or otherwise interacts with us in relation to carpet cleaning and related domestic or commercial services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We collect only the personal data that is necessary to provide our services, manage customer relationships, and meet legal obligations. The information we may collect includes:

Identity details such as your name and, where relevant, business name.
Contact details such as email address, telephone number, and service address.
Service information such as the type of cleaning requested, preferred dates, property details relevant to the job, and notes provided by you.
Payment information such as payment status and transaction records. We do not store full card details unless required through a secure payment provider.
Communication records including enquiries, complaints, feedback, and correspondence related to bookings or service delivery.
Technical data where you contact us online, such as device identifiers, IP address, and basic usage data needed for security and service performance.

We do not intentionally collect special category data unless you choose to provide it and it is necessary for a specific request, for example, access considerations or health-related precautions affecting service delivery. If such data is provided, it will be handled with additional care and only for the purpose for which it was supplied.

2. How We Use Your Data

We use personal data to operate our business effectively and to provide a reliable service. Typical uses include:

responding to enquiries and providing quotations;
booking, delivering, and managing cleaning appointments;
processing payments and maintaining financial records;
handling complaints, disputes, and service follow-up;
sending service-related updates, such as appointment confirmations or changes;
maintaining internal records and improving service quality;
meeting legal, accounting, and insurance obligations;
protecting against fraud, misuse, or security incidents.

We will not use your data for purposes that are incompatible with the reasons it was collected, unless we have a lawful basis to do so and you have been informed where required.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each type of processing. The main bases we rely on are:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes handling bookings, carrying out cleaning services, and managing payment or service administration.

Legal Obligation

We may process and retain certain information to comply with legal requirements, such as tax, accounting, insurance, or record-keeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include improving services, managing customer relationships, preventing fraud, and maintaining secure operations. We always assess whether the use of data is proportionate and expected in the context of our services.

Consent

In limited situations, we may rely on your consent, for example where explicit permission is needed for certain types of optional communication or the handling of particular information. Where consent is used, you may withdraw it at any time.

4. Sharing Your Information

We may share personal data with trusted third parties that help us run our business, but only where necessary and subject to appropriate safeguards. These third parties act as processors or, in some cases, independent controllers.

Processors may include:

IT and cloud service providers that support secure data storage, backup, and system maintenance;
payment service providers that process transactions securely;
accounting or bookkeeping providers who help with financial administration;
communication tools used to manage emails, scheduling, or customer records;
professional advisers such as insurers, legal advisers, or auditors where necessary.

We require processors to process personal data only on our instructions, to keep it secure, and to use it only for the services they provide to us. We do not sell personal data.

We may also disclose information if required to do so by law, regulation, court order, or to protect the rights, property, or safety of our business, staff, customers, or others.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including legal, accounting, and reporting requirements. Retention periods depend on the type of data and the reason for processing.

Booking and service records are kept for the duration needed to manage the customer relationship and resolve any follow-up issues.
Financial and tax records are retained for the period required by law.
Correspondence and complaint records are kept for a reasonable period to respond to queries and support dispute resolution.
Marketing-related consent records are retained until consent is withdrawn or the information is no longer needed.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

6. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, password protection, secure storage systems, limited staff access, and careful oversight of processor arrangements. While no system is completely risk-free, we work to keep your information safe and to reduce the likelihood of any security incident.

7. Your Rights

Depending on the circumstances and the legal basis for processing, you have a number of rights under GDPR. These include:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete information.
Right to erasure - to request deletion of your data in certain situations.
Right to restrict processing - to ask us to limit how we use your information in specific cases.
Right to data portability - to receive certain information in a structured, commonly used format where applicable.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.

We will respond to requests within the time limits required by law. In some cases, we may need to verify your identity before acting on a request, especially where the request concerns sensitive information or access to records.

8. International Transfers

If any processor stores or processes data outside the UK, we will ensure that suitable safeguards are in place, such as adequacy regulations or approved contractual protections. We take steps to ensure that international transfers are handled lawfully and that your personal data remains protected.

9. Automated Decision-Making

We do not use personal data for decisions based solely on automated processing that have legal or similarly significant effects on you. Any important service decisions are made by people using relevant information and professional judgement.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any revised version will apply from the date it is posted. We encourage customers to review this policy periodically so they remain informed about how their information is used.

11. Contact and Complaints

If you have questions about how your personal data is handled, or if you wish to exercise any of your rights, you should contact us using the appropriate customer service or business channels. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data.

This Privacy Policy is intended to provide a clear and lawful explanation of our data practices. Carpet Cleaners Westhampstead values privacy, transparency, and trust, and we will continue to handle personal data responsibly in support of our customers in the area.