Privacy Policy - Carpetcleaning Edgware

This Privacy Policy explains how Carpetcleaning Edgware collects, uses, stores, and protects personal data in connection with our carpet cleaning services. It applies to all Carpetcleaning Edgware customers in the area, including residential and commercial clients who use our services, request quotations, make bookings, or otherwise interact with us. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

By engaging our services, you acknowledge that we may process your personal data as described in this Policy. We only collect information that is necessary for delivering our services, managing our business, and meeting our legal obligations. We do not sell personal data.

1. Data We Collect

We may collect and process the following categories of personal data:

Identity details such as your name or business name.
Contact details such as telephone number, email address, and service address.
Booking information including service preferences, appointment dates, and special instructions.
Payment information necessary to process invoices, receipts, and transactions.
Communication records including emails, call notes, messages, complaints, and feedback.
Service and property details relevant to the cleaning work requested, such as carpet type, stain description, room layout, or access requirements.
Technical data if you interact with us electronically, such as device type, browser data, and basic usage logs.

In some cases, we may also receive information from third parties, such as introducers, payment providers, or business partners acting on your behalf. Where this occurs, we will treat the information in accordance with this Policy.

2. How We Use Your Data

We use personal data for the following purposes:

To provide carpet cleaning and related services.
To prepare quotations, confirm bookings, and manage appointments.
To process payments and maintain accounting records.
To respond to enquiries, complaints, and requests.
To improve our services, processes, and customer experience.
To maintain business records and comply with legal, tax, and regulatory obligations.
To protect our business, staff, and customers from fraud, misuse, or unlawful activity.

We only use personal data for legitimate service-related purposes and do not use it in ways that are incompatible with the original reason for collection.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Depending on the context, we rely on the following lawful bases:

Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes arranging cleaning services, confirming bookings, taking payment, and delivering the agreed work.

Legal Obligation

We may process data to comply with legal obligations, including accounting, tax record-keeping, and responses to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where your rights do not override those interests. This may include managing customer relationships, handling service issues, improving service quality, and preventing fraud. We carefully assess such processing to ensure it is proportionate.

Consent

In limited situations, we may ask for your consent, for example where it is required for certain optional communications or specific uses of data. Where consent is relied upon, you may withdraw it at any time.

4. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods vary depending on the type of record and the reason for holding it.

Service records are kept for a reasonable period to manage warranties, follow-up queries, and service history.
Financial and tax records are kept for the period required by law.
Communication records are retained as long as needed to resolve matters or maintain accurate business documentation.
Website or technical logs, if applicable, are retained for a limited period for security and performance purposes.

When personal data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

5. Processors and Third Parties

We may share personal data with carefully selected third-party service providers who process data on our behalf. These parties act as processors and are only permitted to use the data under our instructions and for the purposes we specify.

Examples of processors may include:

Payment processing providers.
Accounting and bookkeeping services.
IT support, data storage, and security providers.
Communication platforms used to manage emails, messages, or booking updates.
Professional advisers such as accountants or legal advisers where necessary.

We may also disclose data where required by law, by a court order, or to protect our legal rights. Where data is shared, we take reasonable steps to ensure appropriate safeguards are in place.

We do not allow processors to use your personal data for their own purposes. They may only process it on our instructions and must keep it secure.

6. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include restricted access, password protection, secure storage, staff confidentiality obligations, and regular review of our handling procedures.

Although we take data security seriously, no system can be guaranteed to be completely secure. If a personal data incident occurs, we will act promptly to assess the situation and take appropriate steps in line with applicable law.

7. Your Rights

Under data protection law, you have several rights regarding your personal data. Subject to legal limits, you may have the right to:

Access your personal data and receive a copy of the information we hold about you.
Rectification of inaccurate or incomplete data.
Erasure of your data in certain circumstances.
Restriction of processing in certain situations.
Object to processing based on legitimate interests.
Data portability for data you provided to us, where applicable.
Withdraw consent at any time where processing is based on consent.

You also have the right to raise concerns about how we handle your personal data. If you believe your rights have been infringed, you may complain to the UK Information Commissioner’s Office.

We will respond to valid rights requests without undue delay and within the legal time limits.

8. Children’s Data

Our services are intended for adults and business clients. We do not knowingly collect personal data from children unless it is necessary in the context of a service arrangement and provided by an adult customer. If we become aware that we have collected child data inappropriately, we will take steps to delete it where lawful and appropriate.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will take effect when published or otherwise communicated to customers. We encourage you to review this Policy periodically so that you remain informed about how your data is used.

10. Summary of Our Commitment

Carpetcleaning Edgware is committed to respecting your privacy and protecting your personal data. We collect only what is necessary, use it for clear and lawful purposes, retain it for appropriate periods, and share it only with trusted processors or where required by law. We also recognise and support your rights over your personal data.

This Privacy Policy applies to all Carpetcleaning Edgware customers in the area and is designed to ensure transparent, responsible, and lawful data processing in every service interaction.