Privacy Policy - Carpetcleaning W1

This Privacy Policy explains how Carpetcleaning W1 collects, uses, stores, shares, and protects personal data relating to our customers and prospective customers in the W1 area. It applies to all Carpetcleaning W1 customers in the area, including individuals who enquire about our services, receive a quotation, book an appointment, or otherwise interact with us. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Carpetcleaning W1 acts as the data controller in relation to the personal data we collect and use for the provision of our carpet cleaning and related services. This means we determine the purposes and methods of processing your personal data.

We take privacy seriously and only process personal information that is necessary to provide our services, manage our business, and meet legal obligations. We also expect any third parties who process personal data on our behalf to meet appropriate security and confidentiality standards.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data: such as your name and any information needed to identify you as a customer or authorised contact.
• Contact data: such as your address, email address, and telephone number.
• Service details: information about the cleaning services requested, property access details, appointment preferences, and service instructions.
• Payment and transaction data: details necessary to process payments, issue invoices, manage refunds, and keep accounting records.
• Communication data: records of messages, emails, notes from calls, complaints, feedback, and service-related correspondence.
• Technical and usage data: limited information relating to how you interact with our digital systems, if applicable, such as device or browser details and usage patterns.
• Special categories of data: we do not usually seek to collect sensitive personal data. If such information is inadvertently provided, we will handle it only where legally permitted and necessary.

We generally collect personal data directly from you when you request a quote, make an enquiry, complete a booking, provide service instructions, or communicate with us. We may also receive data from third parties where necessary to deliver a service, for example from a property manager, landlord, tenant, or payment service provider acting on your behalf.

3. How We Use Your Data

We use personal data for the following purposes:

• to provide carpet cleaning and associated services;
• to respond to enquiries and prepare quotations;
• to arrange appointments and manage scheduling;
• to communicate with you about your booking, service requirements, or changes to our services;
• to process payments, refunds, and related financial records;
• to maintain internal business records and improve our service quality;
• to handle complaints, disputes, and customer support issues;
• to comply with legal, tax, accounting, and regulatory obligations;
• to protect our business, customers, and staff from fraud, misuse, or security risks.

We only process personal data where it is necessary for a legitimate purpose and where we have a valid lawful basis under data protection law.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the context, we rely on one or more of the following legal bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes handling enquiries, confirming bookings, delivering services, issuing invoices, and managing payments.

Legal obligation

We may process personal data to comply with legal and regulatory requirements, including tax, accounting, record-keeping, fraud prevention, and other obligations imposed by law.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms. This may include managing our business operations, improving our services, keeping appropriate records, resolving disputes, and securing our systems.

Consent

In limited cases, we may rely on your consent, for example where specific optional communications or uses require permission. Where consent is used, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

5. Data Sharing and Processors

We may share personal data with trusted third parties where necessary for the purposes described in this policy. These third parties may act as processors or, in some situations, as independent controllers. We only share data where there is a lawful basis to do so and only to the extent required.

Examples of processors and service providers may include:

• Payment processors that handle card or other payment transactions;
• Accounting and bookkeeping providers that support financial administration;
• IT and cloud service providers that store data securely or support business systems;
• Customer communication tools used to manage messages and scheduling;
• Professional advisers such as legal or financial advisers where necessary.

All processors are required to process personal data only on our instructions, to keep it confidential, and to implement appropriate security measures. We do not sell your personal data.

6. International Transfers

If personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place. These may include an adequacy decision, standard contractual clauses, or other lawful transfer mechanisms recognised under data protection law. We will take steps to ensure your information remains protected to a standard consistent with UK GDPR requirements.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or as long as required by law. The retention period depends on the type of data and the purpose of processing.

• Customer and service records are retained for a period necessary to complete the service, manage follow-up matters, and maintain business continuity.
• Financial and tax records are retained for the period required by applicable accounting and tax laws.
• Communication records may be retained for a reasonable period to resolve disputes, address complaints, and support service quality.
• Marketing or consent-based data, where applicable, is retained until you withdraw consent or we no longer need the data for the stated purpose.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer be linked to you.

8. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures may include access controls, secure storage, restricted permissions, staff confidentiality obligations, and procedures for managing incidents. While no system can be guaranteed to be completely secure, we take appropriate steps to reduce risk and safeguard the information we hold.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and applicable legal exemptions.

• Right of access: you may request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to rectification: you may ask us to correct inaccurate or incomplete information.
• Right to erasure: you may request deletion of your data in certain circumstances.
• Right to restriction: you may ask us to limit how we use your data in certain situations.
• Right to object: you may object to processing based on legitimate interests or direct marketing, where applicable.
• Right to data portability: you may request certain data in a structured, commonly used format where processing is based on consent or contract and carried out by automated means.
• Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

You also have the right to raise concerns with the UK data protection authority if you believe your data has been handled unlawfully. However, we encourage you to contact us first so that we can try to resolve the matter promptly and fairly.

10. Children’s Data

Our services are intended for adults and we do not knowingly collect personal data from children except where it is necessary and lawfully provided by a parent, guardian, or authorised adult in connection with our services. If we become aware that we have inadvertently collected children’s personal data without an appropriate lawful basis, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any revised version will apply from the date it is published or otherwise made available. We recommend that customers review this policy periodically so they remain informed about how we handle personal data.

12. Summary of Our Commitment

Carpetcleaning W1 is committed to handling customer information responsibly, securely, and lawfully. We collect only the data needed to provide our services, use it for clear and legitimate purposes, retain it only as long as necessary, and respect your rights under data protection law. This policy applies to all Carpetcleaning W1 customers in area and is designed to ensure transparency, accountability, and trust in every stage of our service relationship.