Privacy Policy - Carpet Cleaners Belsizepark

This Privacy Policy explains how Carpet Cleaners Belsizepark collects, uses, stores, shares, and protects personal data when providing cleaning services. It applies to all Carpet Cleaners Belsizepark customers in the area, including prospective customers, current customers, and anyone who communicates with us in connection with our services. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who This Policy Covers

This policy applies to all customers of Carpet Cleaners Belsizepark in the local area, including individuals who request quotations, make bookings, receive services, or otherwise interact with us. It also applies to data collected from household members, property managers, tenants, landlords, and other persons involved in arranging a service where relevant to our work.

Important: If you provide us with someone else’s personal data, you confirm that you have the authority to do so and that you have informed that person about the processing described in this policy.

2. Personal Data We Collect

We only collect personal data that is necessary for the delivery and management of our services. The types of data we may collect include:

Identity data: name, title, and any relevant business or household role.
Contact data: address, email address, telephone number, and other communication details.
Service data: booking details, service preferences, property access notes, instructions, and information about the type of cleaning requested.
Payment data: payment status, billing records, and transaction-related information. We do not store card details unless necessary through secure payment arrangements.
Correspondence data: messages, feedback, complaints, and records of communication.
Technical data: limited information such as device or browser data when submitted through electronic systems, if applicable.

We do not intentionally collect special category data unless it is absolutely necessary and you choose to provide it. Special category data includes information about health, religion, political beliefs, or similar sensitive matters. If such data is inadvertently shared with us, we will only process it where there is a lawful basis and appropriate safeguards.

3. How We Use Personal Data

We use personal data to manage enquiries, provide quotations, arrange appointments, deliver carpet cleaning services, process payments, maintain records, and respond to questions or complaints. We may also use personal data to improve our services, maintain internal administration, and comply with legal and accounting obligations.

Where relevant, we may use the information you provide to confirm property access, identify the correct service area, assess service needs, and ensure that the cleaning work is performed safely and efficiently. We only use your data for the purposes for which it was collected, or for compatible purposes that you would reasonably expect.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each processing activity. Carpet Cleaners Belsizepark relies on the following lawful bases:

Contract: to provide quotes, accept bookings, carry out cleaning services, and manage payments.
Legal obligation: to retain certain records for tax, accounting, insurance, or regulatory purposes.
Legitimate interests: to manage our business efficiently, respond to enquiries, prevent fraud, improve service quality, and maintain records, provided these interests do not override your rights and freedoms.
Consent: where you have given clear permission for specific optional processing, such as receiving marketing messages where such communication is offered.

When we rely on consent, you may withdraw that consent at any time. This will not affect processing already carried out before consent was withdrawn.

5. Data Sharing and Processors

We may share personal data with trusted third parties only where necessary and only in accordance with data protection law. These third parties may act as data processors, meaning they process personal data on our behalf and under our instructions.

Examples of processors may include:

booking and scheduling systems;
secure payment service providers;
cloud storage and IT support providers;
accounting and bookkeeping services;
customer communication and email management tools.

We require processors to protect personal data with appropriate security measures and to use it only for the purposes we specify. We may also disclose personal data to professional advisers, insurers, or public authorities where legally required or where necessary to protect our rights, property, customers, or others.

We do not sell personal data. Any sharing is limited, controlled, and based on necessity and legal compliance.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, and reporting obligations. Retention periods depend on the type of information and the reason for holding it.

Customer and service records: retained for a reasonable period after the last service to handle follow-up questions, disputes, and service history.
Financial and accounting records: retained for the period required by applicable law.
Communication records: retained for as long as needed to manage the matter, resolve issues, or demonstrate compliance.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. We review retention on a regular basis to ensure data is not kept longer than necessary.

7. Security of Your Data

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, limiting access to authorised personnel, and the use of reputable service providers with data protection safeguards.

While no system can guarantee complete security, we work to keep personal data protected and to minimise risk. If a personal data breach occurs and we are legally required to do so, we will notify the relevant authorities and affected individuals without undue delay.

8. Your Rights Under GDPR

You have rights in relation to your personal data. Subject to legal limits, these may include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of data in certain circumstances.
Right to restrict processing: to ask us to limit how we use your data in some situations.
Right to data portability: to receive certain data in a structured, commonly used format where applicable.
Right to object: to object to processing based on legitimate interests or direct marketing, where applicable.
Right to withdraw consent: where processing relies on consent.

If you wish to exercise any of these rights, we will review your request and respond within the timeframe required by law. We may need to verify your identity before acting on a request. Your rights are important, and we will not charge a fee unless the request is unfounded, excessive, or repetitive.

9. Children’s Data

Our services are directed to adults and property-related arrangements. We do not knowingly collect personal data from children except where it is incidentally provided as part of a customer record and only where necessary for service delivery or legal compliance. If we become aware that we have collected data inappropriately, we will take steps to delete it where required.

10. International Transfers

Where any processor stores or accesses data outside the UK, we will ensure that appropriate safeguards are in place so that personal data remains protected to a standard required by law. Such safeguards may include adequacy regulations or approved contractual protections.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any revised policy will apply from the date it is made available. We encourage customers to review it periodically so they remain informed about how their data is used.

12. Summary of Our Approach

Carpet Cleaners Belsizepark handles personal data with care, only collecting what is necessary for service delivery and administration. We rely on lawful bases such as contract, legal obligation, legitimate interests, and consent where appropriate. We retain data only as long as needed, use trusted processors under clear instructions, and respect your rights under GDPR. This policy applies to all Carpet Cleaners Belsizepark customers in area and is designed to support a transparent and responsible approach to privacy.

In short: we aim to keep your data secure, use it fairly, and respect your privacy at every stage of our service.