Carpet Cleaning West Hampstead Privacy Policy
This Privacy Policy explains how Carpet Cleaning West Hampstead collects, uses, stores and protects the personal data of its customers and prospective customers in the West Hampstead area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Carpet Cleaning West Hampstead customers and users of our services in the West Hampstead area, whether you contact us by telephone, online enquiry forms, written correspondence, or in person.
1. Data Controller
Carpet Cleaning West Hampstead acts as the data controller in respect of the personal data that we collect and process about you. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in accordance with applicable data protection laws.
2. Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The categories of data we may collect include:
Contact and identity information, such as your name, title, home or business address, and preferred contact details.
Communication information, such as details you provide in enquiries, messages and feedback, including telephone conversations where relevant notes may be recorded.
Service and booking information, such as details of the property where services are provided, access instructions you choose to share, type of carpets or upholstery, preferred dates and times, job history, quotations and invoices.
Payment-related information, such as payment method and transaction details. We do not store full card details if you pay by card; where card payments are taken, they are processed through secure payment processors.
Technical information, where applicable, such as basic device or browser details and general usage data when you visit our website or use online forms, to help us maintain and improve our services.
Any other information you voluntarily provide to us in connection with arranging, delivering or following up on our carpet cleaning and related services.
3. How We Collect Your Data
We collect personal data directly from you when you contact us to request information, obtain a quote, make a booking, or provide feedback. This can be via telephone, online forms, or written correspondence.
We may also obtain personal data from third parties where it is lawful to do so, for example from landlords, property managers or letting agents who arrange services on your behalf and provide contact details and property information to coordinate the cleaning service.
4. Purposes and Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection laws. The main purposes and lawful bases are:
To provide our services: We process your personal data to respond to enquiries, provide quotations, schedule appointments, deliver carpet and upholstery cleaning services, and manage payments and invoices. The lawful basis is performance of a contract or steps taken at your request prior to entering into a contract.
Customer service and communication: We use your data to communicate with you about bookings, changes, access arrangements, follow-up information, and to respond to any queries or complaints. The lawful basis is performance of a contract and our legitimate interests in ensuring effective customer support.
Business administration and record keeping: We maintain records of services provided, payments, and communications for accounting, tax and internal management purposes. The lawful basis is compliance with legal obligations and our legitimate interests in running an efficient business.
Marketing and service updates: We may occasionally send information about similar services or special offers that may be of interest to existing customers. The lawful basis is our legitimate interests in promoting our services, except where consent is required under electronic marketing rules. You can opt out of such communications at any time.
Legal and regulatory requirements: We may process personal data where needed to comply with legal obligations, respond to lawful requests from authorities, or establish, exercise or defend legal claims. The lawful basis is compliance with a legal obligation or our legitimate interests in protecting our rights.
5. Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, and to comply with legal, accounting or reporting requirements.
In general, customer and service records are retained for a period linked to limitation periods for legal claims and tax rules. After the relevant retention period has expired, personal data is securely deleted, anonymised or otherwise removed from our systems.
Where you withdraw consent for certain processing, or ask us to erase your data, we will comply where required by law, subject to retaining information that we must keep to meet our legal obligations or to establish, exercise or defend legal claims.
6. Data Processors and Third Parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors help us provide and manage our services and may include:
Payment processing providers who handle card or electronic payments securely.
IT and hosting providers who support our business systems, website and data storage.
Accountants or professional advisers who assist with financial and regulatory obligations.
Where we use processors, they are only permitted to process your personal data in accordance with our written instructions and are required to implement appropriate security measures.
In some circumstances, we may share personal data with independent controllers, such as insurers, legal advisers or public authorities, where it is necessary for legal, regulatory or contractual purposes. In such cases, those parties are responsible for their own compliance with data protection laws.
7. International Transfers
Where possible, we aim to keep your personal data within the United Kingdom or the European Economic Area. If, in limited cases, data is transferred to countries outside these areas, we will ensure that appropriate safeguards are in place, such as approved standard contractual clauses or other legally recognised protections, to ensure an adequate level of data protection.
8. Data Security
We take reasonable and appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include restricted access to systems, secure handling of payment information, and periodic review of our security practices.
However, no transmission of information over the internet can be guaranteed as completely secure. You are responsible for taking reasonable steps to protect your own information, such as using secure networks when submitting data online.
9. Your Data Protection Rights
As an individual whose personal data we process, you have a number of rights under data protection laws, subject to certain conditions and exemptions. These include:
Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data, together with information about how it is used.
Right to rectification: You can ask us to correct or complete personal data that is inaccurate or incomplete.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it.
Right to restriction of processing: You may ask us to restrict our use of your personal data in specific situations, such as while we verify its accuracy or consider an objection you have raised.
Right to object: You can object to processing that is based on our legitimate interests, including profiling, and to the use of your data for direct marketing. We will stop processing unless we have compelling legitimate grounds which override your interests, rights and freedoms or where processing is required for legal claims.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used and machine-readable format, or that we transmit it to another controller where technically feasible.
Right to withdraw consent: Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.
If you wish to exercise any of these rights, we may need to verify your identity to protect your information. We aim to respond to all valid requests within one month, or within any extended period permitted by law where requests are complex or numerous.
10. Complaints
If you have concerns about how we handle your personal data, you are encouraged to contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the UK supervisory authority, which is the Information Commissioner s Office, if you believe your data protection rights have been infringed.
11. Applicability to Customers in the West Hampstead Area
This Privacy Policy applies to all customers and prospective customers of Carpet Cleaning West Hampstead located in or receiving services in the West Hampstead area. By engaging our services or contacting us for information, you acknowledge that you have been informed of how we process your personal data in accordance with this Privacy Policy.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. Any changes will take effect when the revised policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.