Privacy Policy - Carpet Cleaners N7

This Privacy Policy explains how Carpet Cleaners N7 collects, uses, stores, shares, and protects personal data. It applies to all Carpet Cleaners N7 customers in the area, including current, past, and prospective customers who request services, make enquiries, or interact with us in any way. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Carpet Cleaners N7 is a carpet and upholstery cleaning service operating in the N7 area. For the purposes of data protection law, we act as the data controller for the personal data we collect and use in connection with our services. This means we determine why and how your personal data is processed.

2. Personal Data We Collect

We only collect data that is necessary for providing our services, managing our business, and meeting legal obligations. The types of personal data we may collect include:

Identity information: name, title, and any details you provide when making an enquiry or booking.
Contact information: telephone number, email address, postal address, and service location.
Service information: details about the cleaning service requested, property access instructions, preferred dates, and notes relevant to the job.
Payment information: billing details, payment confirmation, and limited transaction records. We do not store full card details where payment processing is handled by a third-party provider.
Communication records: emails, messages, call notes, complaints, and feedback.
Technical information: basic information generated when you interact with our digital systems, such as device type, browser type, or IP-related data, where applicable.

We do not intentionally collect special category data unless you choose to provide it and it is necessary for delivering a service, such as information relating to allergies, medical sensitivities, or access needs. Where this occurs, we handle it with additional care and only where permitted by law.

3. How We Use Your Data

We use personal data only for specific and legitimate purposes. These purposes include:

providing quotes and arranging appointments;
delivering carpet, upholstery, and related cleaning services;
communicating with you about bookings, updates, or changes;
processing payments and keeping financial records;
responding to questions, complaints, and service requests;
maintaining records of work completed;
improving service quality and customer experience;
meeting legal, tax, accounting, and regulatory obligations;
preventing fraud, misuse, and unauthorized access.

We will not use your personal data for purposes that are incompatible with those stated above unless we inform you and, where required, obtain consent or rely on another lawful basis.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each type of processing. Carpet Cleaners N7 relies on the following lawful bases:

Performance of a contract

We process your data when it is necessary to provide a quote, make a booking, carry out cleaning services, handle payments, or fulfil our obligations under a service agreement.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This includes managing our operations, improving services, handling internal administration, preventing fraud, and retaining business records.

Legal obligation

We may process and retain certain information to comply with legal obligations such as tax rules, accounting requirements, insurance obligations, and record-keeping duties.

Consent

Where required, we may ask for your consent before processing certain data, particularly for optional communications or any special category information you voluntarily share. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Personal Data

We may share personal data only when necessary and only with trusted parties who help us operate our business. These may include:

Payment processors that handle transactions securely;
IT and hosting providers that support our systems, storage, or communication tools;
Accountants or bookkeepers who assist with financial and tax matters;
Insurance providers where a claim or incident requires review;
Legal or regulatory authorities where disclosure is required by law;
Service partners or contractors who help deliver services on our behalf, where applicable.

All processors are required to safeguard your information and use it only in accordance with our instructions and applicable data protection law. We do not sell personal data.

6. Data Processors

Where we use third-party service providers to process personal data on our behalf, they act as data processors. We choose processors carefully and ensure they provide appropriate technical and organizational security measures. Typical processing tasks may include payment handling, communications management, secure data storage, or administrative support. Any processor must only process personal data for the specific task they are engaged to perform.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason it is held. For example:

booking and service records are kept for a reasonable period to manage customer service and resolve disputes;
financial and tax records are retained for the period required by law;
communication records may be retained to support customer service and quality control;
unused enquiry data may be deleted after a suitable period if no service is booked.

When data is no longer needed, we will securely delete, anonymize, or archive it as appropriate.

8. Data Security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, password protection, secure storage, limited access on a need-to-know basis, and procedures for handling incidents. While we take security seriously, no system is completely risk-free, and we cannot guarantee absolute security.

9. International Transfers

If personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it in line with applicable data protection law. Any such transfer will be carried out only where a suitable legal mechanism exists.

10. Your Rights

As a data subject, you have rights under GDPR in relation to your personal data. These rights may include:

Right of access: you can request a copy of the personal data we hold about you;
Right to rectification: you can ask us to correct inaccurate or incomplete data;
Right to erasure: you can request deletion of your data in certain circumstances;
Right to restrict processing: you can ask us to limit how we use your data in certain cases;
Right to data portability: you can request that certain data be provided in a structured, commonly used format;
Right to object: you can object to processing based on legitimate interests or direct marketing;
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time;
Right to lodge a complaint: you may raise concerns with the relevant data protection authority if you believe your rights have been infringed.

Some rights may not apply in every situation, as legal obligations or other lawful grounds may allow us to continue processing. We will assess each request carefully and respond in accordance with the law.

11. How We Handle Requests

We aim to respond to requests relating to your rights within one month, unless the request is complex or numerous, in which case the period may be extended as permitted by law. Before acting on a request, we may need to verify your identity to protect your data and ensure it is disclosed only to the correct person.

12. Children’s Data

Our services are intended for adults and property occupants arranging cleaning services. We do not knowingly collect personal data from children unless it is incidentally provided in connection with a service request, and only where necessary and lawful.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or processing practices. Any updated version will apply from the date it is published. We encourage customers in the N7 area to review this policy periodically so they remain informed about how their information is handled.

14. Summary of Our Commitment

Carpet Cleaners N7 is committed to processing personal data lawfully, transparently, and securely. We collect only what we need, keep it only as long as necessary, and use trusted processors where appropriate. We respect your rights and aim to provide a service that protects your privacy at every stage.

This Privacy Policy applies to all Carpet Cleaners N7 customers in area.