Privacy Policy - Carpetcleaning Westhampstead

This Privacy Policy explains how Carpetcleaning Westhampstead collects, uses, stores, shares, and protects personal data. It applies to all Carpetcleaning Westhampstead customers in the area, including individuals who enquire about services, make bookings, receive quotes, or otherwise interact with us in connection with carpet cleaning and related services. We are committed to handling personal information lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We only collect personal data that is necessary for legitimate business purposes and service delivery. We also aim to keep information accurate, secure, and retained only for as long as needed. This policy is intended to help customers understand what data is processed, why it is processed, and what rights individuals have regarding their personal information.

1. Personal Data We Collect

We may collect and process several categories of personal data depending on how you interact with us and the services requested. This may include:

Identity information: name, title, and any relevant account or booking reference.
Contact information: address, email address, telephone number, and preferred contact details.
Service information: details about the cleaning service requested, property access notes, preferred dates, and service history.
Payment information: billing details and payment confirmation information. We do not intentionally store full card details where payment is processed through secure third-party systems.
Communication records: messages, enquiries, complaints, feedback, and correspondence related to our services.
Technical information: limited device and usage data if you engage with us electronically, such as IP address or browser-related information where applicable.

We generally do not seek to collect special category data unless it is strictly necessary and lawful. If such data is inadvertently provided, we will handle it with heightened care and only where there is a valid legal basis to do so.

2. How We Use Your Data

Your personal data may be used for the following purposes:

to respond to enquiries and provide quotations;
to manage bookings and deliver carpet cleaning services;
to process payments, invoices, and refunds where applicable;
to communicate about appointments, service changes, and follow-up matters;
to handle complaints, disputes, and customer support issues;
to maintain business records and service histories;
to improve service quality, training, operational efficiency, and internal administration;
to meet legal, regulatory, accounting, and tax obligations;
to prevent fraud, misuse, and unlawful activity.

We will only use personal information in ways that are compatible with the original purpose for which it was collected, unless we reasonably believe another lawful reason applies.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing personal data. Carpetcleaning Westhampstead relies on the following bases where appropriate:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes managing bookings, carrying out cleaning services, and handling billing or service communications.

Legal Obligation

We may process data to comply with legal requirements, such as tax, accounting, recordkeeping, or lawful requests from authorities.

Legitimate Interests

We may process data for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include managing our business, improving services, maintaining security, preventing fraud, and responding to customer issues. Where we rely on legitimate interests, we assess whether processing is necessary and proportionate.

Consent

In limited circumstances, we may rely on your consent, for example where it is required for certain communications or optional processing. Where consent is used, you may withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties, but only when necessary for the operation of our services, legal compliance, or legitimate business activities. These third parties act as processors or independent controllers depending on the context.

Examples of processors and service partners may include:

payment service providers that handle secure transaction processing;
IT and hosting providers that support our systems, storage, and security;
administrative and communication tools used for scheduling or customer management;
professional advisers such as accountants, legal advisers, or insurers;
subcontractors or operational partners assisting with service delivery where necessary.

Where a processor is engaged, we require appropriate contractual safeguards to ensure personal data is handled securely and only in accordance with our instructions. We do not sell personal data.

We may disclose information if required by law, to protect our rights and property, to prevent fraud or abuse, or to comply with lawful requests from regulators or public authorities.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes described in this policy, including legal, accounting, and reporting obligations. Retention periods depend on the type of information and the reason it is held.

Enquiry records: kept for a reasonable period to manage follow-up and customer service.
Booking and service records: retained for the duration needed to provide services and address any aftercare, complaints, or disputes.
Financial and tax records: retained for the period required by law.
Communication records: retained as needed for administration, service quality, and legal protection.

When personal data is no longer required, we will securely delete, anonymise, or archive it in line with our retention practices.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures are designed to reflect the nature of the data we hold and the risks associated with processing it.

Security controls may include restricted access, staff awareness, secure storage, and appropriate supplier due diligence. While we work to protect information, no system can be guaranteed to be completely secure.

7. Your Rights

Individuals have important rights over their personal data under data protection law. Subject to legal limitations, these rights may include:

Right of access: to request a copy of the personal data held about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of personal data in certain circumstances.
Right to restriction: to request limited processing in specific situations.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to request transfer of certain data in a structured format where applicable.
Right to withdraw consent: where processing is based on consent.

You also have the right to raise concerns about how your data is handled. If you believe your rights have been infringed, you may seek a review through the appropriate supervisory channel. We encourage customers to raise concerns so they can be addressed promptly and fairly.

8. International Transfers

Where any service provider processes data outside the United Kingdom, we will take reasonable steps to ensure appropriate protection is in place. This may include relying on adequacy regulations, standard contractual clauses, or other lawful safeguards where required.

9. Children's Data

Our services are intended for adults arranging cleaning services for homes or premises. We do not knowingly collect personal data directly from children. If we become aware that such data has been collected without appropriate authority, we will take steps to remove it where legally permitted.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or service arrangements. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their personal data is used.

11. Summary of Our Commitment

Carpetcleaning Westhampstead is committed to respecting privacy, limiting data collection to what is necessary, using lawful bases for processing, retaining records appropriately, and working only with trusted processors under suitable safeguards. We aim to process personal data in a transparent and responsible manner for all Carpetcleaning Westhampstead customers in the area.

This policy is designed to support lawful, fair, and secure data handling while recognising the rights of every individual whose personal data we process.