Carpet Cleaning N8 Privacy Policy
This Privacy Policy explains how Carpet Cleaning N8 collects, uses, stores, and protects personal data of customers and prospective customers in the N8 area, and sets out your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Carpet Cleaning N8 customers and service users within the N8 area, including individuals making enquiries, booking services, or otherwise interacting with us.
Data Controller
Carpet Cleaning N8 is the data controller in respect of the personal data that we collect and process about you in connection with our carpet cleaning and related services. As data controller, we are responsible for deciding how and why your personal information is used, and for ensuring that your data is handled in accordance with applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details, such as your name, address, service address, and any other contact details you choose to provide.
Booking and service information, such as preferred appointment dates and times, details about the property areas requiring cleaning, access instructions, and notes relating to your service needs.
Billing and payment data, such as information required to process your payment and fulfil our contractual obligations. Where we use third-party payment processors, they may collect and process your payment card details on our behalf. We do not retain full card details ourselves.
Communication data, such as details of enquiries, complaints, feedback, and any correspondence you send to us or that we send to you in relation to services.
Technical and usage data, where applicable, such as information about how you interact with our website or digital platforms, including basic analytics data. This may involve the use of cookies or similar technologies, in accordance with applicable law.
Marketing preferences, such as your choices regarding receiving marketing communications from us and your communication preferences.
How We Collect Your Data
We collect personal data directly from you when you contact us to request a quote, book a service, or ask a question, and when you communicate with us by telephone, text, in person, or via online forms.
We may also generate information about you during the delivery of our services, for example notes or records relating to your booking, property access, or service outcomes.
Where appropriate and lawful, we may receive limited personal data about you from third parties, for example from referral partners or platforms you used to find our services.
Lawful Basis for Processing
We only process your personal data when we have a lawful basis to do so under the UK GDPR. Depending on the context, we may rely on one or more of the following bases:
Performance of a contract: We process your data where it is necessary to enter into or perform a contract with you, for example to provide carpet cleaning services, issue invoices, and manage bookings.
Compliance with legal obligations: We may process your data to comply with legal and regulatory requirements, such as tax, accounting, and record-keeping obligations.
Legitimate interests: We may process your data where it is necessary for our legitimate business interests, and where those interests are not overridden by your rights and freedoms. This includes activities such as managing our relationship with you, improving our services, preventing fraud, and maintaining business records.
Consent: In some cases, we may rely on your consent, for example for certain types of marketing communications where consent is required. When we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide and manage our carpet cleaning and related services, including confirming bookings, visiting your property, and carrying out requested work.
To respond to your enquiries, customer service requests, and feedback, and to communicate with you about any issues relating to our services.
To process payments, issue invoices and receipts, and maintain our financial and service records.
To manage our business operations, including scheduling, workforce management, and service quality monitoring.
To send you important information about changes to our terms, policies, or services.
To conduct lawful direct marketing where appropriate, for example to inform you about promotions or new services, in line with your communication preferences and applicable legal requirements.
To comply with legal obligations, resolve disputes, and enforce our agreements.
Data Retention
We will retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements.
In general, we keep core customer and transaction records for a period aligned with statutory limitation periods and tax and accounting rules. Service-related records and communications may be retained for a similar period in case of queries, complaints, or legal claims.
When personal data is no longer required for the purposes for which it was collected, and there is no legal or legitimate business reason to continue to store it, we will securely delete, anonymise, or otherwise remove it from our systems.
Data Processors and Sharing of Data
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged to perform specific tasks in support of our services and are contractually required to handle your data securely and only in accordance with our instructions and applicable data protection laws.
Examples of such processors may include payment processing providers, cloud storage or customer management systems, IT support providers, and service management tools.
We may also share data with professional advisers, such as accountants or legal advisers, where necessary for legitimate business or legal reasons, and with public authorities or regulators where we are legally required to do so.
We do not sell your personal data. We also do not permit our processors to use your data for their own independent purposes.
International Data Transfers
If we transfer your personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data, such as using standard contractual clauses or transferring to countries that have been deemed to provide an adequate level of protection by the relevant authorities. Where required, we will provide you with additional information about such transfers upon request.
Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include restricting access to personal data to those personnel and processors who need it for the purposes described in this Privacy Policy.
While we strive to protect your data, no system can be completely secure. You should take your own precautions when sending information to us, particularly via public or unsecured networks.
Your Rights Under Data Protection Law
Under the UK GDPR, you have certain rights in relation to your personal data. These rights apply in various circumstances and may be subject to legal limitations. Your rights include:
Right of access: You can request a copy of the personal data we hold about you, along with information about how we process it.
Right to rectification: You can ask us to correct or complete any inaccurate or incomplete personal data.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected.
Right to restrict processing: You may ask us to restrict the way we use your personal data in certain situations, such as while we consider a request to rectify it.
Right to data portability: In some cases, you can request that we provide your personal data in a structured, commonly used, and machine-readable format, or that we transmit it to another controller.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests as the lawful basis, including for direct marketing. We will stop processing your data unless we have compelling legitimate grounds to continue or where processing is required for legal reasons.
Right to withdraw consent: Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
Exercising Your Rights
If you wish to exercise any of your rights, or if you have questions or concerns about how we handle your personal data, you can contact us using the contact details provided on our website or other official communications. We may need to verify your identity before responding to your request. We aim to respond to all legitimate requests within one month, or within any extended period permitted by law where requests are complex or numerous.
Complaints
If you are not satisfied with our response or believe that we are processing your personal data in a way that does not comply with data protection laws, you have the right to lodge a complaint with the Information Commissioner s Office or the relevant supervisory authority in your country of residence or work. We would, however, appreciate the opportunity to address your concerns before you contact a supervisory authority, and encourage you to contact us first.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any updates will be effective when published. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
