Carpet Cleaners NW3 Privacy Policy
This Privacy Policy explains how Carpet Cleaners NW3 collects, uses, stores and protects personal data of all customers in the NW3 area. It is intended to comply with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Who this Privacy Policy applies to
This Privacy Policy applies to all Carpet Cleaners NW3 customers and prospective customers located in the NW3 area who contact us, request a quotation, make a booking, receive our services, or otherwise interact with us in relation to our carpet cleaning and related services.
Personal data we collect
We collect and process different types of personal data in connection with our services. The specific information we collect may include the following:
Identification and contact details such as name, address, property access details, and other contact details you provide to us when making an enquiry or booking our services.
Service and booking information such as preferred dates and times, details of the property and areas to be cleaned, special instructions, previous service history, and any feedback you provide after a service.
Billing and payment information such as billing address and transaction details. Where payments are processed through a third-party payment processor, we do not receive or store your full card details, but we may receive confirmation of payment, partial card details, or other transaction identifiers from the payment provider.
Communication records such as emails, messages, or notes from telephone conversations with you, including enquiries, complaints, and any follow-up correspondence.
Technical and usage data such as your interactions with our website, basic device and browser information, and data collected by essential cookies or similar technologies used for security and basic functionality. This data is generally collected in an aggregated or pseudonymised form when possible.
How we collect personal data
We collect personal data directly from you when you contact us to request a quotation, make a booking, ask a question, or provide feedback. We may also collect information when you interact with our website, for example by submitting an online form or using online chat facilities, where available.
In some circumstances, we may receive limited personal data from third parties, such as online directories, comparison services or booking platforms, where you have chosen to request our services through their systems. In such cases, they will share with us the information necessary to arrange and carry out your booking.
Purposes and lawful bases for processing
We process personal data only where we have a valid lawful basis under the UK GDPR. The main purposes for which we process your data and their corresponding lawful bases include:
To provide quotations, manage bookings and deliver our carpet cleaning and related services. We process your identification, contact, and service information as necessary for the performance of a contract or to take steps at your request prior to entering into a contract.
To manage billing, process payments and handle accounting records. We process billing and payment information as necessary for the performance of a contract and to comply with our legal obligations, such as tax and accounting requirements.
To communicate with you about your booking, respond to enquiries, and handle feedback or complaints. This processing is necessary for the performance of a contract and in our legitimate interests to ensure good customer service and improve our operations.
To maintain and improve our services, including training, quality assurance, and internal reporting. Where possible, we will use anonymised or aggregated data. Where personal data is used, we rely on our legitimate interests in operating and developing our business in a way that does not override your rights and interests.
To comply with legal and regulatory obligations. We may need to process and retain certain information to meet our obligations under applicable laws, respond to lawful requests from public authorities, or establish, exercise or defend legal claims.
Where we rely on legitimate interests as a lawful basis, we carefully consider your privacy rights and take steps to minimise any impact on you. You have the right to object to processing based on legitimate interests as set out in the section on your rights below.
Data retention
We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide services, maintain records, comply with legal obligations, resolve disputes and enforce agreements.
In general, we retain basic customer and service records for a period that enables us to respond to any follow-up queries or issues after a service has been completed, and to comply with tax and accounting rules. After the relevant retention periods expire, we will securely delete or anonymise your personal data so that it can no longer be associated with you.
The specific retention period may vary depending on the type of data, the nature of our relationship with you, and any legal requirements that apply. Where we have legitimate business reasons to retain certain records for a longer period, we will ensure that access to that data is limited and that it is kept securely.
Data processors and third-party recipients
We may use carefully selected third parties to help us deliver our services and manage our business. These third parties may act as data processors on our behalf, processing your personal data only in accordance with our instructions and in compliance with data protection laws.
Examples of such processors may include providers of booking or scheduling tools, payment processing services, customer relationship management systems, email or communication platforms, IT support and hosting services, and professional advisers such as accountants or consultants where required for our operations.
We require all data processors to implement appropriate technical and organisational security measures, maintain confidentiality, and process personal data only as necessary to provide their services to us. We do not sell your personal data to third parties.
In some circumstances, we may also need to share personal data with external parties who act as independent controllers, such as public authorities, regulators, law enforcement agencies, or legal advisers, where we are legally required or where it is necessary to protect our rights or the rights of others.
International transfers
Where our use of service providers involves transferring personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your information. This may include using service providers located in countries that have been granted an adequacy decision, or putting in place standard contractual clauses or other recognised transfer mechanisms.
Security of your personal data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures may include access controls, use of secure systems, staff training, and regular review of our procedures.
While we take reasonable steps to safeguard your personal data, no system can be completely secure. You are encouraged to take your own precautions, such as not sharing sensitive information unnecessarily and notifying us promptly if you become aware of any suspected misuse of your data related to our services.
Your data protection rights
You have a number of rights in relation to your personal data under the UK GDPR. Subject to certain conditions and exceptions, you may have the right to:
Request access to the personal data we hold about you and obtain a copy of that data.
Request correction of any inaccurate or incomplete personal data.
Request erasure of your personal data where there is no longer a lawful basis for us to keep it, or where you have successfully exercised your right to object to processing.
Object to processing of your personal data where we are relying on legitimate interests, and you believe that your rights and interests override those interests.
Request restriction of processing in certain circumstances, for example while we verify the accuracy of your data or consider an objection you have raised.
Request the transfer of certain personal data to you or to another organisation in a structured, commonly used and machine-readable format, where the processing is based on consent or contract and carried out by automated means.
Where we rely on consent as a lawful basis for specific processing, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing that took place before the withdrawal.
To exercise any of these rights, you may contact us using the contact details provided on our website or through the usual communication channels you use with us. We may need to verify your identity before responding to your request and will respond within the time limits set by data protection law.
Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner’s Office, which is the UK supervisory authority for data protection.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. Any updates will be made available through our usual communication channels. We encourage you to review this policy periodically to stay informed about how we protect your personal data.
