Privacy Policy – Carpet Cleaners N10

This Privacy Policy explains how Carpet Cleaners N10 collects, uses, stores, shares, and protects personal data relating to customers and prospective customers in the N10 area. It applies to all Carpet Cleaners N10 customers in the area, including anyone who makes an enquiry, requests a quotation, books a service, receives a service, or otherwise interacts with us.

We are committed to handling personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to give you clear information about what data we process, why we process it, the lawful bases we rely on, how long we keep it, who may process it on our behalf, and what rights you have.

1. Who we are

Carpet Cleaners N10 provides carpet cleaning and related cleaning services. In the context of data protection law, we act as the data controller for the personal data we collect and use about our customers, prospects, and other individuals whose information we process in connection with our services.

2. Personal data we collect

We only collect personal data that is relevant and necessary for providing our services, managing enquiries, handling bookings, administering accounts, and meeting legal obligations. The types of data we may collect include:

Identity information: name, title, and any relevant identification details needed for service arrangements.
Contact information: address, email address, phone number, and service location details.
Booking and service information: service type, appointment details, special instructions, access arrangements, and service history.
Payment-related information: payment status, transaction records, and billing details. We do not intentionally store full card details unless required by a secure payment processor.
Communication records: messages, calls, emails, quotes, complaints, feedback, and correspondence related to our services.
Technical information: limited device or usage data if you contact us through digital channels, such as IP address or browser data where relevant for security and performance.
Property and access information: details needed to deliver services safely and efficiently, such as property type, floor level, parking instructions, or access notes.

We generally do not seek to collect special category data. If such data is incidentally revealed to us, for example in a message about allergies, vulnerabilities, or health-related concerns, we will process it only where necessary and with appropriate safeguards.

3. How we collect personal data

We may collect personal data directly from you when you:

request a quote or make an enquiry;
book or receive a service;
communicate with us by phone, email, message, or in writing;
submit feedback, a complaint, or a review;
provide details for invoicing, scheduling, or service access.

We may also receive data from third parties where appropriate, such as payment service providers, referral partners, or platforms used to manage appointments. Where we receive personal data from another source, we will ensure that it is processed lawfully and fairly.

4. Why we use your data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to arrange and deliver cleaning services;
to manage bookings, scheduling, and customer records;
to process payments, invoices, and account administration;
to communicate service updates, confirmations, and aftercare information;
to deal with complaints, claims, and customer support;
to maintain business records, audit trails, and legal compliance;
to improve service quality, customer experience, and operational efficiency;
to protect against fraud, misuse, and security incidents;
to comply with applicable laws, regulations, and lawful requests.

5. Lawful basis for processing

Under GDPR, every use of personal data must have a lawful basis. Carpet Cleaners N10 relies on the following lawful bases where appropriate:

Contract

We process personal data where it is necessary to take steps at your request before entering into a contract or to perform a contract with you. This includes providing quotations, arranging services, carrying out cleaning work, managing bookings, and handling payment administration.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided your rights and interests do not override those interests. Examples include improving service delivery, managing customer records, preventing fraud, maintaining internal security, and handling limited marketing to existing customers where permitted by law. We always consider whether the processing is proportionate and limited to what is necessary.

Legal obligation

We may process personal data where needed to comply with legal or regulatory obligations, such as tax, accounting, record-keeping, consumer law, or responding to lawful requests from authorities.

Consent

In limited circumstances, we may rely on consent, for example where you have clearly opted in to receive certain communications. Where consent is used, you may withdraw it at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

Vital interests

In rare situations, we may process data where necessary to protect someone’s vital interests, such as in an emergency involving a customer, visitor, or staff member.

6. Data sharing and processors

We may share personal data only when necessary and only with trusted recipients who support our operations. These recipients may act as processors on our behalf or, in some cases, as independent controllers.

Examples of processors may include:

IT and cloud service providers: for secure storage, email, scheduling, and system hosting;
payment processors: to handle transactions securely;
accounting and bookkeeping providers: for invoicing, reporting, and tax compliance;
customer communication tools: for managing messages and service updates;
booking or administration software providers: to help manage appointments and records;
professional advisers: such as legal, financial, or insurance advisers where necessary;
public authorities or regulators: where required by law.

When processors are used, we require appropriate data processing terms and security measures. They may only process personal data in accordance with our instructions and for specified purposes. We do not sell personal data.

7. International transfers

Where any service provider stores or accesses data outside the UK, we take steps to ensure appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent legal mechanisms designed to protect your personal data.

8. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including meeting legal, accounting, tax, and record-keeping requirements. Retention periods depend on the type of information and the reason we hold it.

Customer and service records: kept for a reasonable period after service completion to manage warranties, disputes, and follow-up issues.
Financial and transaction records: kept for the period required by tax and accounting law.
Communication records: retained as long as needed to respond to queries, resolve disputes, and maintain business records.
Enquiry data: kept for a limited time if no booking follows, unless a longer retention period is needed for legal or business reasons.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

9. Security of your information

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, confidentiality procedures, and limiting access to data to those who need it for legitimate business purposes. While no system can be guaranteed completely secure, we take data protection seriously and continually review our safeguards.

10. Your rights under GDPR

You have a number of rights in relation to the personal data we hold about you. These rights may be subject to legal conditions or exemptions, but we will always consider your request carefully.

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: in certain cases, you may ask us to delete your personal data.
Right to restriction: you may ask us to limit how we use your data in certain circumstances.
Right to data portability: where applicable, you may request that data you provided to us be transferred in a structured, commonly used format.
Right to object: you may object to processing based on legitimate interests or to certain direct marketing activities.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with GDPR timeframes and legal requirements.

11. Children’s data

Our services are aimed at adults and household customers. We do not knowingly collect personal data from children unless it is necessary in connection with a service request or lawful business purpose and with appropriate safeguards.

12. Complaints and supervision

If you have concerns about how your data has been handled, you may contact us to raise the issue. You also have the right to complain to the relevant data protection supervisory authority if you believe your data protection rights have been infringed. We encourage you to raise any concerns with us first so that we can try to resolve them promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, services, or data processing practices. Any revised version will apply from the date it is published or otherwise made available. We encourage you to review it periodically.

Summary: Carpet Cleaners N10 processes customer data lawfully, securely, and transparently for service delivery, retention, sharing with processors, and GDPR rights, applying to all customers in the N10 area.