Privacy Policy - Carpet Cleaners Camden

Carpet Cleaners Camden is committed to protecting the privacy of all customers, website visitors, and individuals who contact us for services in Camden and the surrounding area. This Privacy Policy explains how we collect, use, store, share, and protect personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Carpet Cleaners Camden customers in area, including prospective customers, existing clients, and anyone who interacts with our services.

1. Who We Are

For the purposes of data protection law, Carpet Cleaners Camden is the data controller for the personal data described in this policy. This means we determine why and how your personal data is processed. We take our responsibilities seriously and aim to keep your information safe, secure, and handled fairly at all times.

2. Information We Collect

We collect only the personal data that is necessary to provide our services, manage customer relationships, and meet our legal obligations. The information we may collect includes:

Identity information such as your name and title.
Contact details such as your address, email address, and telephone number.
Service details such as the type of cleaning requested, property information, appointment preferences, and service notes.
Billing and transaction information such as payment records, invoices, and payment status.
Communication records including emails, messages, call notes, and complaints or feedback you provide.
Technical information such as device, browser, and usage data if you interact with our digital systems.

We do not intentionally collect special category data unless it is strictly necessary and you provide it voluntarily. If any such information is ever processed, it will be handled with additional safeguards and only where permitted by law.

3. How We Use Your Personal Data

We use personal data for the following purposes:

To provide and manage cleaning services.
To arrange appointments, assess service requirements, and deliver quotations.
To process payments and maintain financial records.
To respond to enquiries, feedback, and complaints.
To maintain service quality, train staff, and improve our operations.
To comply with legal, tax, and accounting obligations.
To protect our business, staff, customers, and property against fraud or misuse.

We only use your information where we have a lawful basis to do so and only for purposes that are relevant, necessary, and proportionate.

4. Lawful Basis for Processing

Under UK GDPR, we must identify a lawful basis for every processing activity. The lawful bases we rely on may include:

Contract

We process your personal data when it is necessary to enter into or perform a contract with you. This includes providing requested services, confirming appointments, issuing invoices, and fulfilling service arrangements.

Legal Obligation

We may process your information where required to meet legal duties, including accounting, tax, record-keeping, fraud prevention, and regulatory compliance.

Legitimate Interests

We may process data for our legitimate interests, provided these do not override your rights and freedoms. Examples include improving service quality, managing customer relationships, handling operational planning, and maintaining business security.

Consent

In limited cases, we may rely on your consent, for example where you choose to receive certain communications or where voluntary information is provided. You can withdraw consent at any time, where consent is the lawful basis used.

5. Sharing Your Personal Data

We do not sell your personal data. We may share information only when necessary and only with trusted third parties who help us operate our business. These may include:

Service processors who support scheduling, administration, or communication systems.
Payment providers who handle secure transaction processing.
Accountants and professional advisers who assist with financial, tax, or legal obligations.
IT and system support providers who maintain our digital tools and data security.
Regulators, law enforcement, or public authorities where disclosure is required by law.

All processors are required to handle personal data securely, act only on our instructions, and comply with applicable data protection law. We take steps to ensure that any shared information is limited to what is necessary for the relevant purpose.

6. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent protective measures. We only transfer data where it is lawful and where suitable protections exist.

7. Data Retention

We keep personal data only for as long as it is needed for the purpose for which it was collected, or as required by law. Retention periods may vary depending on the type of information and the reason for processing. In general:

Customer service records are retained for a period necessary to manage the service relationship and resolve any disputes.
Financial and accounting records are retained for the period required by tax and accounting rules.
Communication records are retained for a reasonable period to support service history and customer care.
Where data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of safely.

Retention is reviewed regularly to ensure we do not keep information longer than necessary. We retain data based on legal necessity, operational need, and legitimate business requirements, and not indefinitely.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include restricted access, secure storage, staff confidentiality obligations, and regular review of our security procedures.

Although no method of transmission or storage can be guaranteed to be completely secure, we work to maintain a high standard of protection and to respond promptly to any suspected incident.

9. Your Rights

Under data protection law, you have important rights regarding your personal data. These rights may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain cases.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format, where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed. We encourage you to contact us first so we can try to resolve any issue fairly and promptly.

10. Marketing Communications

We will only send marketing communications where permitted by law. If you have opted in to receive updates or offers, you can change your preferences or object to marketing at any time. We will respect your choices and stop sending such communications where required.

11. Cookies and Similar Technologies

If our digital systems use cookies or similar technologies, they are only used for necessary functionality, analytics, or service improvement, where lawful. Any non-essential cookies will be handled in accordance with applicable consent requirements. You may be able to manage cookie settings through your browser or device preferences.

12. Children’s Data

Our services are intended for adults and business customers, and we do not knowingly collect personal data from children. If we become aware that a child’s data has been collected without appropriate permission, we will take steps to delete it promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or how we process data. Any updates will take effect when published in the revised version. We recommend reviewing this policy periodically to stay informed about how your information is protected.

14. Summary of Our Commitment

At Carpet Cleaners Camden, we respect your privacy and handle personal data with care, transparency, and accountability. We collect only what we need, use it for clear purposes, rely on lawful bases under UK GDPR, retain it only as long as necessary, and share it only with trusted processors or where the law requires it. Your privacy matters to us, and we aim to treat every customer fairly and lawfully.