Privacy Policy - Carpet Cleaners Richmonduponthames

This Privacy Policy explains how Carpet Cleaners Richmonduponthames collects, uses, stores, shares, and protects personal data when providing cleaning services to customers in the Richmonduponthames area. It applies to all Carpet Cleaners Richmonduponthames customers in the area, including individuals who request quotes, make bookings, receive services at a residential or commercial address, or otherwise interact with us in connection with our cleaning services.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018. This policy is intended to explain what data we collect, why we collect it, the legal bases we rely on, how long we keep it, who may process it on our behalf, and what rights you have over your personal information.

1. Information We Collect

We collect only the personal data that is necessary to provide our services, manage customer relationships, comply with legal obligations, and improve our operations. The information we may collect includes:

Identity details such as your name and, where relevant, business name.
Contact details including your telephone number and email address.
Service address and any access notes needed to complete the cleaning appointment.
Booking and service information such as requested dates, service type, special instructions, and job history.
Payment information such as payment status, billing records, and transaction references. We do not store full card details unless required by a secure payment provider.
Communication records including emails, messages, call notes, and complaint or enquiry details.
Technical data where relevant, such as basic website usage information, device type, and IP address for security and service improvement purposes.
Any additional information you choose to provide to help us carry out the service safely and effectively.

We generally do not seek to collect special category data. However, if you voluntarily provide information that could reveal health conditions, access needs, allergies, or other sensitive details, we will only use it where necessary and with appropriate safeguards.

2. How We Use Your Data

We use personal data for a range of service-related and operational purposes. These include:

Responding to enquiries and providing quotations.
Scheduling, confirming, and delivering cleaning services.
Managing customer accounts, invoices, and payment administration.
Communicating about appointments, service changes, and follow-up matters.
Handling complaints, disputes, and customer support requests.
Maintaining internal records and service quality.
Preventing fraud, misuse, or unauthorised access.
Meeting legal, tax, accounting, and insurance obligations.
Improving our services, training staff, and ensuring operational efficiency.

We only process personal data for clear and legitimate purposes, and we avoid using it in ways that would be unexpected or unfair to customers.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing personal data. Depending on the context, we rely on one or more of the following legal bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes arranging cleaning appointments, delivering services at your property, sending invoices, and communicating about your booking.

Legal Obligation

We process certain information where required to comply with legal duties, including tax, accounting, regulatory, and insurance obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate interests and those interests are not overridden by your rights and freedoms. Examples include maintaining business records, preventing fraud, improving our services, managing internal administration, and protecting our premises, staff, and customers.

Consent

In limited cases, we may rely on your consent, particularly where it is required for certain optional communications or processing activities. Where consent is used, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act either as independent controllers or as processors acting on our instructions. We only share the minimum information necessary and ensure that appropriate contractual safeguards are in place.

Processors may include:

IT and cloud service providers used for data storage, email, scheduling, and secure system management.
Payment service providers that process transactions and help manage billing securely.
Accounting and bookkeeping providers who assist with financial records and tax compliance.
Customer communication tools used for appointment reminders, service updates, and support.
Professional advisers such as lawyers, insurers, or auditors when necessary for legal or business purposes.
Subcontracted cleaners or service partners where needed to fulfil a booking, subject to confidentiality and data protection obligations.

We may also disclose information where required by law, court order, or a public authority, or where necessary to protect our rights, customers, employees, or property.

We do not sell personal data. If any service provider processes data outside the UK, we take reasonable steps to ensure appropriate safeguards are used in line with applicable law.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, and insurance requirements. Retention periods may vary depending on the type of information and the reason it was collected.

In general, we retain:

Booking and service records for a period that allows us to manage follow-up queries, complaints, and service history.
Financial and invoice records for the period required by tax and accounting law.
Correspondence and complaint records for a reasonable period to resolve disputes and maintain proper business records.
Technical and security logs for a limited time, unless needed for investigation or legal reasons.

When data is no longer required, we will delete, anonymise, or securely dispose of it. We review retention regularly to ensure that we do not keep information longer than necessary.

6. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality expectations, and regular review of our processes.

Although no system can be guaranteed completely secure, we take data protection seriously and work to reduce risks to a reasonable and appropriate level.

7. Your Rights

As a data subject, you have a number of rights under data protection law. These rights may apply depending on the circumstances and the legal basis for processing. They include:

The right to be informed about how your data is used.
The right of access to obtain a copy of the personal data we hold about you.
The right to rectification to correct inaccurate or incomplete information.
The right to erasure, also known as the right to be forgotten, in certain situations.
The right to restrict processing in specific circumstances.
The right to data portability where processing is based on consent or contract and carried out by automated means.
The right to object to processing based on legitimate interests or direct marketing.
Rights related to automated decision-making, where applicable.

If you wish to exercise any of these rights, we will respond in accordance with legal requirements. In some cases, we may need to verify your identity before acting on your request. Please note that these rights are not absolute and may be subject to legal exceptions.

8. Marketing Communications

We will only send marketing communications where permitted by law. If you have given consent or where we are otherwise allowed to contact you under applicable regulations, you may receive occasional updates about services or offers. You can opt out of marketing at any time.

We do not use personal data for unnecessary profiling, and we keep promotional activity proportionate and relevant.

9. Children’s Data

Our services are intended for adult customers and business clients. We do not knowingly collect personal data from children except where it is incidental to providing a service at a household and only to the extent necessary for that purpose. If we become aware that we have collected data from a child without a lawful basis, we will take appropriate steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, service operations, or data processing practices. The latest version will apply from the date it is made available. We encourage customers in the Richmonduponthames area to review this policy periodically so they remain informed about how their information is handled.

11. Summary of Our Commitments

We aim to keep your personal data safe, use it only for clear and lawful purposes, and retain it only for as long as necessary. We process information to provide reliable cleaning services, manage our business responsibly, and meet our legal obligations. We also ensure that our processors are selected carefully and bound by appropriate data protection terms.

In short: your information is handled with care, used lawfully, retained only when needed, and protected by appropriate safeguards. This policy applies to all Carpet Cleaners Richmonduponthames customers in the area.