Carpet Cleaners SE24 Privacy Policy
This Privacy Policy explains how Carpet Cleaners SE24 collects, uses, stores, and protects personal data relating to our customers and prospective customers in the SE24 area and surrounding locations. It also describes your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Carpet Cleaners SE24 customers in the area, including those who contact us to enquire about or book our services.
Who We Are and Scope of This Policy
Carpet Cleaners SE24 is a local carpet and upholstery cleaning service provider operating in the SE24 area and nearby districts. In this Privacy Policy, references to we, us and our mean Carpet Cleaners SE24. We act as the data controller for the personal data we collect and process about our customers and potential customers.
This Privacy Policy covers all personal data processed by Carpet Cleaners SE24 in connection with providing quotations, booking and delivering our cleaning services, and managing our customer relationships.
Types of Personal Data We Collect
We only collect personal data that is necessary for the purposes described in this Privacy Policy. The types of personal data we may collect include:
Identity and contact information, such as name, title or preferred form of address, and postal address for the property where services are required. Booking and communication information, such as the date and time of your enquiry or booking, details about the services requested, and records of our communications with you. Payment-related information, such as confirmation that a payment has been made, the method of payment used, and any necessary accounting records. We do not store full payment card numbers as these are processed securely by our chosen payment processors. Service and property information, such as room types, approximate sizes, and any relevant notes about access instructions or special cleaning requirements. Technical and usage information, where applicable, such as basic analytical information about how you interact with our website or online booking tools. This may include date and time of visit, pages viewed, and general device information.
How We Collect Personal Data
We may collect your personal data in the following ways:
When you contact us directly by phone, through online forms, or in person to request information, a quote, or to book a service. When you use or interact with our website or online booking tools. When you respond to marketing messages or promotions that we may lawfully send. When third parties, such as online directories or referral partners, lawfully share your contact details with us for the purpose of providing services to you.
Purposes and Lawful Bases for Processing
We process your personal data only where we have a lawful basis under the UK GDPR. The main purposes and lawful bases are:
To provide quotations and respond to enquiries. We process your identity and contact information, along with service-related information, to provide you with requested quotations and respond to your enquiries. The lawful basis for this processing is our legitimate interests in responding to potential customers and, where you request a quote as an individual, taking steps at your request prior to entering into a contract. To provide and manage our services. We process your personal data to confirm bookings, plan and deliver cleaning services, manage access to your property, and follow up after visits. The lawful basis is performance of a contract with you, and our legitimate interests in operating and improving our business. To process payments and maintain accounts. We process limited payment-related and transactional data for invoicing and account-keeping purposes. The lawful basis is performance of a contract and compliance with our legal obligations relating to tax and accounting. To communicate with you about your booking and services. We use your contact details to send booking confirmations, reminders, updates about your appointment, and follow-up messages. The lawful basis is performance of a contract and our legitimate interests in ensuring an efficient and reliable service. To improve and protect our services. We may use aggregated and anonymised data derived from your information to analyse performance, improve our services and ensure security. The lawful basis is our legitimate interests in developing and safeguarding our business. To send direct marketing, where permitted. We may send you information about similar services that we believe may be of interest to you. Where required, we will obtain your consent. In other cases, we rely on our legitimate interests in promoting our services, and you can opt out of such marketing at any time.
Data Processors and Third Parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are only permitted to process your personal data in accordance with our instructions and for the specified purposes, and they are required to implement appropriate security measures.
Categories of processors and third parties may include:
Payment processing providers that handle card and other payments securely. IT and cloud service providers that host our systems, store data, or provide communication and booking tools. Professional advisers such as accountants, for the purpose of complying with legal and financial obligations. We may also share personal data with law enforcement or regulatory authorities where required by law or to protect our legal rights. We do not sell your personal data to third parties.
International Transfers of Personal Data
Some of our service providers may operate outside the United Kingdom or the European Economic Area. Where personal data is transferred internationally, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent lawful mechanisms, to protect your data in line with UK GDPR requirements.
Data Retention
We keep your personal data only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy and to comply with legal, accounting, or reporting requirements.
Enquiry and quote information without a completed booking is typically retained for a limited period in order to respond to any follow-up queries. Customer and booking records are generally retained for a longer period in line with legal obligations relating to tax, contracts, and financial records. Marketing contact information is retained for as long as you remain subscribed or until you object or withdraw consent, whichever applies. When personal data is no longer required, we will securely delete or anonymise it.
Data Security
We take appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, disclosure, or destruction. These measures include access controls, secure storage solutions, and limiting the personal data we collect to what is strictly necessary.
While we strive to protect your personal data, no method of transmission or storage is completely secure. However, we continue to review and enhance our security measures in line with industry standards and legal requirements.
Your Data Protection Rights
Under the UK GDPR, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal limitations, but we will always respond to your requests in line with applicable law. Your rights include:
Right of access. You have the right to request a copy of the personal data we hold about you and to receive information about how we process it. Right to rectification. You have the right to ask us to correct or update any inaccurate or incomplete personal data. Right to erasure. In certain circumstances, you may ask us to delete your personal data, for example where it is no longer necessary for the purposes for which it was collected. Right to restriction. You may request that we restrict the processing of your personal data in specific situations, such as while we are verifying its accuracy. Right to data portability. Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your personal data in a commonly used format or ask us to transfer it to another controller where technically feasible. Right to object. You have the right to object to certain types of processing, including direct marketing and processing based on our legitimate interests, in which case we will stop processing unless we have compelling legitimate grounds. Rights in relation to automated decision making. We do not carry out automated decision making or profiling that produces legal or similarly significant effects about you.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights, or if you have questions about how we handle your personal data, you can contact us using the contact details provided on our website or through the usual communication channels you use with us.
You also have the right to lodge a complaint with the UK Information Commissioner's Office if you are unhappy with how we handle your personal data. We would, however, encourage you to contact us first so we can try to resolve any concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any significant changes will be made available through our usual communication channels or on our website. We recommend that you review this Privacy Policy periodically so that you remain informed about how we process your personal data.
