Carpet Cleaning Edgware Privacy Policy
This Privacy Policy explains how Carpet Cleaning Edgware collects, uses, stores, and protects personal data relating to customers in the Edgware area. It also sets out your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Carpet Cleaning Edgware customers located in the Edgware area and to all individuals who contact us to enquire about or use our carpet cleaning and related services. It covers personal data collected through telephone calls, written correspondence, online forms, and in-person interactions.
Who We Are
Carpet Cleaning Edgware is a carpet and upholstery cleaning service provider operating in the Edgware area. For the purposes of data protection law, Carpet Cleaning Edgware is the controller of your personal data, meaning we determine how and why your data is processed.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The categories of data we may collect include:
Identification and contact details such as name, billing address, service address, and any other contact details you choose to provide.
Service-related information such as property type, access instructions, details of areas to be cleaned, photographs you choose to share in relation to the service, booking dates and times, and records of the services requested or provided.
Payment-related information such as payment method, transaction details, and billing information. We do not store full card details when third-party payment processors are used.
Communication data such as emails, messages, notes from phone calls, feedback, reviews, and any other correspondence you send to us.
Technical and usage information where applicable, such as the date and time you contact us, and basic technical information generated when you visit our online pages, to the extent required to respond to your request and maintain our services.
How We Collect Your Data
We collect personal data directly from you when you contact us to make an enquiry, request a quote, or book a service. This may be done over the phone, through online forms, or in writing. We also collect data when you provide information to our staff during a visit to your property.
Additionally, we may receive limited personal data indirectly from third parties, such as payment providers or booking platforms, where this is necessary to confirm your booking, process payment, or manage your service request.
Lawful Basis for Processing
We only process your personal data where we have a lawful basis under data protection law. The main lawful bases we rely on are:
Performance of a contract: We process your personal data to provide our services, manage your booking, communicate with you about your appointment, and handle any changes or queries relating to your contract with us.
Legal obligations: We may process and retain certain data to comply with legal requirements, such as tax and accounting rules or obligations to law enforcement authorities.
Legitimate interests: We may process your data where it is necessary for our legitimate business interests, such as managing our operations, improving services, preventing fraud, ensuring the security of our systems and staff, and responding to enquiries or complaints. Where we rely on legitimate interests, we consider and balance any potential impact on your rights and freedoms.
Consent: In limited cases, we may rely on your consent, for example, where we send certain forms of direct marketing communications. Where we rely on consent, you have the right to withdraw that consent at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage carpet cleaning and related services, including confirming appointments, accessing the property, and carrying out the work requested.
To respond to your enquiries, provide quotes, and manage your requests for information.
To process payments, issue invoices, and maintain appropriate financial records.
To communicate with you about changes to bookings, service updates, or important information affecting your service.
To maintain internal records, including service history, so that we can manage repeat bookings and understand your requirements.
To improve our services, including training staff, monitoring service quality, and reviewing feedback.
To comply with applicable laws, regulations, and legal processes, and to protect our rights, property, and safety, as well as those of our customers and staff.
Data Sharing and Processors
We do not sell your personal data. We may share your information with carefully selected third parties where this is necessary for the purposes described in this Privacy Policy.
In particular, we may share your data with:
Service providers and processors who assist us in delivering our services, such as payment processors, accountants, IT and system support providers, and, where applicable, booking platforms. These providers act on our instructions and are contractually required to safeguard your data.
Professional advisers such as accountants or legal advisers where necessary for legitimate business purposes or to comply with legal obligations.
Authorities or law enforcement agencies where we are legally required to do so, or where it is necessary to protect our rights or the rights of others.
When we use processors, we ensure that appropriate data processing agreements are in place to protect your personal data and to ensure compliance with applicable data protection laws.
International Data Transfers
Where any of our service providers or systems are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data. This may include using standard contractual clauses or other legally recognised transfer mechanisms, in accordance with data protection law.
Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected and to meet our legal and regulatory obligations.
In general, we keep customer records, including contact and service information, for a period that enables us to manage ongoing relationships, address queries, and maintain accurate business records. Financial records, including invoices and transaction details, may be kept for longer periods as required by tax and accounting laws.
When personal data is no longer needed, we will securely delete or anonymise it so that you can no longer be identified.
Security of Your Personal Data
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include restricting access to personal data to staff and processors who need the information to perform their duties and ensuring that they are subject to confidentiality obligations.
While we take reasonable steps to protect your information, no system can be completely secure. We encourage you to contact us immediately if you suspect any unauthorised use of your personal data in connection with our services.
Your Data Protection Rights
As a data subject under the UK GDPR and related laws, you have certain rights in relation to your personal data. Subject to certain conditions and exemptions, these rights include:
Right of access: You can request confirmation of whether we process your personal data and request a copy of the data we hold about you.
Right to rectification: You can ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure: You can request that we delete your personal data where there is no compelling reason for us to continue processing it, for example where the data is no longer needed for the original purpose.
Right to restriction of processing: You can ask us to restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to our use of it.
Right to data portability: In some cases, you can request that we provide your personal data in a structured, commonly used, and machine-readable format, or ask us to transmit it to another controller where this is technically feasible.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests, including any profiling based on those interests. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is required for legal claims.
Right to withdraw consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.
Exercising Your Rights
If you wish to exercise any of the rights described in this Privacy Policy, or if you have questions about how your personal data is handled, you can contact us using the details provided in our general contact information on our website or service materials. To help us respond efficiently, please clearly state your request and provide sufficient information to identify yourself and the data concerned.
Complaints
If you are concerned about how we handle your personal data, we encourage you to contact us first so we can try to resolve your concern. You also have the right to lodge a complaint with the Information Commissioner's Office or another relevant supervisory authority in your place of residence or work.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices. Any updates will be made available through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.