Privacy Policy - Carpetcleaning N22

This Privacy Policy explains how Carpetcleaning N22 collects, uses, stores, and protects personal data. It applies to all Carpetcleaning N22 customers in the area, including anyone who requests a quote, books a service, receives a service, or interacts with us in relation to carpet cleaning, upholstery cleaning, stain treatment, or related cleaning services. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to customers, prospective customers, household occupants, business clients, and any authorised representatives who provide information to Carpetcleaning N22. It also applies to people whose data we may receive indirectly, such as a person whose name appears on a booking, delivery instruction, access note, or payment record.

2. The personal data we collect

We only collect data that is necessary for providing our services, managing customer relationships, operating our business, and meeting legal obligations. The categories of information we may collect include:

Identity data such as name and title.
Contact data such as address, email address, and telephone number.
Service data such as property details, cleaning requirements, access instructions, appointment history, and notes about services performed.
Payment and transaction data such as payment status, invoice details, and billing records.
Communication data such as enquiries, complaints, reviews, and correspondence.
Technical data such as limited website or device information if you interact with our digital systems, where applicable.
Special category data only where absolutely necessary and with appropriate safeguards, for example if you voluntarily provide information that may reveal health-related access needs or sensitivities relevant to service delivery.

We do not intentionally collect more data than we need. If we receive unnecessary or sensitive information, we will only retain it where there is a valid reason to do so and where permitted by law.

3. How we use personal data

Carpetcleaning N22 uses personal data for the following purposes:

To provide quotations and respond to enquiries.
To schedule, deliver, and manage cleaning services.
To communicate about appointments, updates, and service-related issues.
To issue invoices, process payments, and maintain financial records.
To handle complaints, queries, and customer support requests.
To improve our services, quality standards, and operational efficiency.
To comply with legal, accounting, tax, and insurance obligations.
To protect our business, staff, and customers from fraud, misuse, or unlawful activity.

We will not use personal data for purposes that are incompatible with the reasons it was collected.

4. Lawful basis for processing

We process personal data only when we have a lawful basis under UK GDPR. Depending on the situation, the lawful basis may be one or more of the following:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes managing bookings, delivering cleaning services, confirming appointments, and handling payment arrangements.

Legal obligation

We may process and retain certain data when required by law, including tax, accounting, record-keeping, and regulatory obligations.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include improving services, maintaining customer records, preventing fraud, and managing internal administration.

Consent

In limited circumstances, we may rely on your consent, for example where you voluntarily provide optional information or where consent is required by law. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Vital interests and public interest

These bases are unlikely to apply in ordinary service provision, but may be relevant in rare circumstances where necessary to protect a person’s vital interests or where processing is required for a task in the public interest.

5. Sharing data and processors

We may share personal data with trusted third parties who act as processors on our behalf. These providers only process data in accordance with our instructions and are required to protect it appropriately. Examples may include:

Payment and accounting providers.
Appointment scheduling or administrative software providers.
IT support, cloud storage, and secure data hosting providers.
Customer communication tools, where used.
Professional advisers such as accountants, insurers, or legal advisers.

We may also disclose information where necessary to comply with legal obligations, enforce our terms, protect rights and safety, or respond to lawful requests from public authorities. We do not sell personal data.

6. Data retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including any period needed to satisfy legal, tax, accounting, insurance, or dispute-resolution requirements. Retention periods may vary depending on the type of data and the reason for processing.

Customer and service records are generally retained for a reasonable period after the end of the customer relationship.
Financial and invoicing records are kept for the period required by law.
Complaint or dispute records may be retained until the matter is fully resolved and any limitation period has expired.

When data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe manner.

7. Data security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include restricted access, secure storage, password protection, staff confidentiality obligations, and careful selection of processors. While no system can be guaranteed completely secure, we work to reduce risks to an appropriate level.

8. International transfers

If any processor or service provider stores or accesses personal data outside the UK, we will ensure that suitable safeguards are in place in accordance with applicable data protection law. Such safeguards may include adequacy regulations, standard contractual clauses, or equivalent legal protections.

9. Your rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to ask us to delete your data in certain circumstances.
Right to restriction – to request limits on how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent.

These rights are not absolute. In some cases, legal obligations or legitimate grounds may allow us to continue processing or retaining data even after a request is made.

10. Children’s data

Our services are intended for adults and business or household customers arranging cleaning services. We do not knowingly collect personal data from children except where necessary and proportionate in a service context, such as when a child’s presence is indirectly relevant to household access or safety. If we become aware that we have collected data from a child without appropriate basis, we will take reasonable steps to delete it.

11. Automated decision-making

We do not use personal data for automated decision-making that produces legal or similarly significant effects. If this changes in the future, we will update this policy and ensure that appropriate safeguards are in place.

12. Complaints

If you are concerned about how your personal data is handled, you have the right to raise a complaint with the relevant data protection authority in the UK. You may also seek to resolve issues through our internal procedures where available. We encourage data subjects to raise concerns promptly so we can review and address them appropriately.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or business practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review it periodically.

14. Summary of our commitment

Carpetcleaning N22 respects your privacy and handles personal data responsibly. We collect only what we need, use it for clear and lawful purposes, retain it for appropriate periods, and share it only with trusted processors or where required by law. This policy applies to all Carpetcleaning N22 customers in area, and we aim to keep personal information secure, accurate, and used in a way that respects your rights.