Carpet Cleaners SE17 Privacy Policy
This Privacy Policy explains how Carpet Cleaners SE17 collects, uses, stores and protects personal data for all customers and prospective customers in the SE17 area. It also explains your rights under the United Kingdom General Data Protection Regulation and related data protection laws.
By using our carpet cleaning and related services in the SE17 area, you acknowledge that you have read and understood this Privacy Policy. We are committed to handling your personal data lawfully, fairly and transparently.
Who this policy applies to
This Privacy Policy applies to private individuals and business customers who enquire about, book or receive carpet cleaning or related services from Carpet Cleaners SE17 within the SE17 postcode area. It also applies to users who contact us to request information, quotations or support regarding our services in this area.
Personal data we collect
We may collect and process the following categories of personal data, depending on how you interact with us:
Identification and contact details such as name, address, service address, billing address, and general contact details such as your preferred method of communication.
Service and booking details such as details of the property or premises where services are provided, details of the services requested, dates and times of appointments, photographs you choose to share to illustrate the work required, and notes relevant to the booking.
Payment related information such as records of payments made and payment method used. We do not store full card details when third party payment processors are used; those details are processed directly by the relevant payment processor.
Communication data such as emails, messages, and notes of telephone conversations relating to quotes, bookings, complaints, or feedback.
Technical and usage information where you interact with our online content, such as basic device and browser information and interaction data, to the extent this is necessary to operate and secure our online services.
How we collect personal data
We collect personal data directly from you when you contact us by telephone, contact form, or other communication method to request information, obtain a quote, or make a booking.
We may also collect data when you provide feedback, make a complaint, or ask to update your details. In limited cases, we may receive basic contact or referral details from third parties who recommend our services to you, where they have your permission to share those details.
Lawful bases for processing
We rely on one or more of the following lawful bases under the UK GDPR to process your personal data:
Contractual necessity where processing is necessary to provide a quotation, to enter into a contract with you, or to perform our contract with you. This includes arranging appointments, providing services, managing payments and communicating with you about your booking.
Legitimate interests where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. This includes managing and improving our services, keeping appropriate business records, preventing fraud, and responding to enquiries or complaints.
Legal obligation where we need to comply with laws and regulations, for example maintaining certain financial and tax records or responding to requests from regulatory authorities.
Consent where you choose to receive optional marketing communications or where we rely on your agreement for a specific processing activity that is not covered by another lawful basis. You can withdraw your consent at any time.
How we use your personal data
We use your personal data for the following purposes:
To provide quotations and respond to enquiries about our carpet cleaning and related services in the SE17 area.
To set up, manage and deliver your bookings, including confirming appointments, accessing the service address, and carrying out the requested work.
To manage billing and payments, including issuing invoices and processing refunds where appropriate.
To communicate with you about changes to your booking, service updates, delays, or follow up on work completed.
To handle feedback, complaints and disputes, and to improve the quality and safety of our services.
To maintain internal records, accounts and administrative systems, including for tax and audit purposes.
To protect our business and customers from fraud and misuse of our services.
To provide marketing communications about relevant services, only where you have given consent or where we are otherwise permitted by law and you have not opted out.
Data retention
We keep personal data only for as long as is reasonably necessary for the purposes described in this Privacy Policy and to comply with our legal and regulatory obligations.
Basic contact and booking details are generally retained for a period that allows us to manage repeat bookings, address queries about previous work and meet tax and accounting requirements. Financial transaction records are usually retained for the period required by taxation and accounting laws.
Marketing related data is kept for as long as you choose to receive such communications or until you ask us to delete it, provided that we do not need to keep some information for proof of your consent or objection.
When personal data is no longer required, we will securely delete or anonymise it.
Data processors and third parties
We may use carefully selected third parties to help us deliver our services and manage our business. These organisations act as data processors or independent controllers, depending on their role.
Data processors are third parties who process personal data on our behalf and according to our instructions. They may include payment processing providers, booking and scheduling tools, cloud storage and document management providers, and providers of customer relationship or communication systems.
We ensure that data processors who handle your personal data provide sufficient guarantees to implement appropriate technical and organisational measures to protect your data and process it only for the agreed purposes.
In some cases, third parties may act as independent data controllers, such as banks, payment service providers, insurers or professional advisers. In those cases, they will be responsible for explaining how they handle your data.
We will only share personal data with third parties where it is necessary for the purposes described in this Privacy Policy, where we have your consent, or where we are required to do so by law or regulatory authorities.
International transfers
Where any of our processors or service providers transfer personal data outside the United Kingdom or European Economic Area, we will take steps to ensure that appropriate safeguards are in place to protect your data, such as using standard contractual clauses or relying on other approved transfer mechanisms.
Data security
We take reasonable and proportionate technical and organisational measures to protect your personal data from accidental loss, unauthorised access, alteration or disclosure.
Measures may include controlling access to systems where your data is stored, using secure storage solutions, restricting access to staff and contractors who need the data to perform their role, and training relevant personnel on data protection responsibilities.
While we aim to protect your personal data, no data transmission or storage system can be guaranteed to be completely secure. If we become aware of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will inform you and the relevant supervisory authority as required by law.
Your data protection rights
Under the UK GDPR, you have a number of rights in relation to your personal data. These rights apply in most circumstances and may be subject to certain limitations and exemptions.
Right of access You can request confirmation that we process your personal data and ask for a copy of the information we hold about you.
Right to rectification You can ask us to correct or complete personal data that you believe is inaccurate or incomplete.
Right to erasure You can ask us to delete your personal data in certain situations, for example where it is no longer needed for the purpose for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction You can ask us to restrict the processing of your personal data in certain circumstances, such as while we are verifying its accuracy or considering an objection you have raised.
Right to object You can object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including for direct marketing. We will stop processing your data for direct marketing purposes if you object.
Right to data portability You can ask us to provide you or another controller with certain personal data in a structured, commonly used and machine readable format where the processing is based on consent or contract and carried out by automated means.
Right to withdraw consent Where we process personal data based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.
You also have the right to lodge a complaint with the Information Commissioners Office or another relevant supervisory authority if you have concerns about how we handle your personal data.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. Any changes will apply from the date they are published. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your privacy.
Contact regarding privacy
If you have any questions about this Privacy Policy or how Carpet Cleaners SE17 processes your personal data, or if you wish to exercise any of your data protection rights, you can contact us using the usual contact details you use for our services and clearly mark your request as relating to data protection or privacy.
