Privacy Policy - Carpetcleaning W4

Carpetcleaning W4 is committed to protecting the privacy and personal data of all customers in the W4 area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our carpet cleaning services, request a quote, make a booking, or otherwise interact with us. It applies to all Carpetcleaning W4 customers in the area.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We aim to handle data lawfully, fairly, transparently, and securely, and to keep it only for as long as necessary for the purposes described below.

1. Personal Data We Collect

We collect only the data needed to provide our services effectively and to manage our relationship with you. Depending on how you use our services, we may collect the following categories of personal data:

Identity details: name, title, and any preferences you provide.
Contact details: address, email address, telephone number, and service location within the W4 area.
Service details: information about the carpets, upholstery, or related cleaning tasks requested, including room details, fabric type, stains, and access requirements.
Transaction information: booking records, quotes, invoices, payment status, and service history.
Communication records: emails, messages, notes from calls, feedback, complaints, and customer service interactions.
Technical data: limited website or device information where relevant, such as IP address, browser type, and general usage data if you contact us or submit an enquiry online.

We do not seek to collect special category data unless there is a clear and lawful reason to do so, and only where you provide it voluntarily or it is necessary for a specific service issue. We ask that you avoid sharing unnecessary sensitive information.

2. How We Use Your Personal Data

We use personal data for the following purposes:

to provide carpet cleaning and related services;
to prepare quotations and confirm bookings;
to arrange visits and manage service delivery;
to process payments and maintain business records;
to communicate with you about your booking, service updates, or customer support matters;
to handle complaints, refunds, or service follow-up;
to improve our services, training, and operational efficiency;
to comply with legal, tax, accounting, and insurance obligations;
to prevent fraud, misuse, or unlawful activity;
to maintain internal quality and service standards.

We only use your data in ways that are compatible with the purpose for which it was collected, or where we have a valid legal reason to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. Carpetcleaning W4 relies on the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes managing quotations, bookings, service delivery, billing, and customer support.

Legal Obligation

We process data where required to comply with legal and regulatory obligations, including tax recordkeeping, accounting requirements, consumer law, and legitimate business compliance measures.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. These interests may include responding to enquiries, improving services, maintaining records, securing our operations, and managing customer relationships. When relying on legitimate interests, we consider whether the processing is necessary and whether it has a reasonable impact on you.

Consent

In limited cases, we may rely on your consent, such as for optional marketing communications or certain non-essential activities. Where consent is used, you can withdraw it at any time. Withdrawal of consent does not affect processing already carried out before the withdrawal.

4. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. Retention periods vary depending on the type of data and the reason it was collected.

Customer and booking records: retained for a reasonable period after service completion to manage follow-up queries, complaints, and service history.
Financial and tax records: retained for the period required by law.
Correspondence and service communications: retained for as long as needed to resolve issues and maintain accurate business records.
Marketing data: retained until you opt out, withdraw consent, or it is no longer relevant.

When data is no longer required, we delete it securely or anonymise it so that it can no longer identify you.

5. Sharing Personal Data and Processors

We may share personal data with trusted third parties where necessary to operate our business and provide services. These third parties act as processors or independent controllers depending on the service they provide. We only share the minimum information necessary and require appropriate safeguards.

Examples of processors may include:

Payment service providers: to process card or electronic payments securely;
IT and cloud service providers: to store, host, and protect business data;
Accounting and bookkeeping providers: to manage invoices, tax records, and financial administration;
Customer communication tools: to send booking confirmations or service-related messages;
Professional advisers: such as legal or insurance advisers where required for business protection and compliance.

We may also disclose data where required by law, court order, regulatory request, or to protect our rights, property, staff, customers, or the public. We do not sell personal data.

6. International Transfers

If any processor stores or accesses data outside the United Kingdom, we ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent legal protections. We take reasonable steps to make sure your data remains protected to a standard consistent with UK GDPR.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our procedures.

While no system is completely secure, we work to keep data safe and to limit access to those who need it for legitimate business purposes. If a personal data breach occurs and is likely to result in a risk to your rights and freedoms, we will take the steps required by law, which may include notifying the relevant authority and affected individuals.

8. Your Rights

As a data subject under UK GDPR, you have several rights in relation to your personal data. These rights may be subject to legal limitations or exemptions, but we will always assess requests carefully.

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: in certain circumstances, you can request that we delete your personal data.
Right to restrict processing: you can ask us to limit how we use your data in certain situations.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you can request certain data in a structured, commonly used format where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully. We encourage you to raise concerns with us first so we can attempt to resolve the issue promptly.

9. Children’s Data

Our services are intended for adult customers and business-related household arrangements. We do not knowingly collect personal data from children unless it is incidentally provided in the course of a household service and is necessary for the service to proceed safely and appropriately. If we become aware that we have collected data from a child without a lawful basis, we will take appropriate steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updated version will apply from the date it is published. We encourage you to review it periodically so that you remain informed about how we use personal data.

11. Summary of Our Commitment

Carpetcleaning W4 values your privacy and treats your personal data responsibly. We collect only what we need, use it for clear and lawful purposes, keep it only for as long as necessary, and share it only with trusted processors or where legally required. You remain in control of your personal data through the rights described above, and we are committed to handling every customer’s information with care, transparency, and respect.