Carpet Cleanes N1 Customer Privacy Policy
This Privacy Policy explains how Carpet Cleanes N1 collects, uses, stores and protects personal data relating to our customers in the local N1 area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Carpet Cleanes N1 customers in the N1 area who use our carpet cleaning and related services, whether contacting us by phone, through online forms, or in any other way. It covers personal data provided directly by you as well as data generated when we provide our services.
Data Controller
For the purposes of data protection law, Carpet Cleanes N1 acts as the data controller for the personal data we collect about our customers. This means we determine the purposes and means of processing that personal data and are responsible for ensuring that it is handled in compliance with applicable data protection legislation.
Types of Personal Data We Collect
We collect and process the following categories of personal data, to the extent necessary for the purposes set out in this Privacy Policy:
Identity and contact details, such as full name, home or business address, billing address, and general contact information you choose to provide.
Service information, such as details of the property areas to be cleaned, access instructions, preferred dates and times for appointments, and records of services provided.
Transaction and payment information, including basic information needed to process payments and issue invoices, such as payment method and payment status. We do not store full card details when payments are processed through secure third-party providers.
Communication records, including emails, messages and notes of telephone conversations in relation to bookings, customer service queries, feedback or complaints.
Technical data, such as basic information about how you use our website or online forms, including date and time of access and pages visited, where this is necessary for the operation and security of our online services.
Lawful Bases for Processing Personal Data
We will only process your personal data where we have a lawful basis to do so. Depending on the specific situation, we rely on one or more of the following lawful bases:
Performance of a contract: We process personal data to enter into and perform our contract with you, including arranging appointments, providing cleaning services, managing payments and handling customer service queries.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests, provided these are not overridden by your rights and interests. These interests include managing and improving our services, keeping records of services provided, preventing fraud, and ensuring the security of our systems and staff.
Legal obligations: We process personal data where necessary to comply with legal and regulatory requirements, such as tax and accounting obligations or responding to lawful requests from public authorities.
Consent: In limited circumstances, we may rely on your consent to process certain personal data, for example for specific optional communications. Where we rely on consent, you have the right to withdraw it at any time.
How We Use Personal Data
We use the personal data we collect for the following purposes:
To manage bookings and provide cleaning services, including confirming appointments, accessing your property as instructed, and recording details of work carried out.
To manage our relationship with you, including responding to your queries, handling complaints, and notifying you of important changes to our services or this Privacy Policy.
To process payments and maintain financial records, including issuing invoices, confirming receipt of payment, and maintaining appropriate business and accounting records.
To improve and develop our services, including monitoring service quality and using customer feedback to refine our processes and offerings.
To maintain safety and security, including verifying customer details when necessary and protecting our staff and equipment during on-site visits.
To comply with legal and regulatory requirements, including retaining certain records for statutory periods and responding to lawful requests from regulatory bodies or law enforcement.
Data Processors and Third-Party Service Providers
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors only process your personal data in accordance with our instructions and for the purposes described in this Privacy Policy.
Such processors may include payment processing providers for handling card and electronic payments, accounting and bookkeeping service providers for financial record-keeping, and information technology and hosting providers for secure storage of our records and operation of our digital systems.
Where we use third-party service providers, we require them to implement appropriate technical and organisational measures to protect your personal data and to comply with applicable data protection laws. We do not sell your personal data to third parties.
Data Retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected, and to comply with our legal and regulatory obligations.
In general, we retain basic customer and service records for a period that allows us to manage ongoing relationships, respond to queries about past work, and meet tax and accounting requirements. After the relevant retention period has expired, we will delete or securely anonymise your personal data.
The specific retention periods may vary depending on the type of data and the nature of our interactions with you. In all cases, we assess the amount, nature and sensitivity of the personal data and the potential risk of harm from unauthorised use or disclosure when determining appropriate retention periods.
Data Security
We implement appropriate technical and organisational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures include limiting access to personal data to those employees, contractors and service providers who need it to perform their duties, using secure methods for storing and transmitting data, and maintaining reasonable safeguards for physical and digital records.
While we take reasonable steps to protect your personal data, no method of transmission or storage can be guaranteed to be completely secure. You are encouraged to take care when providing personal data and to notify us promptly if you suspect any misuse.
International Transfers
Our primary processing activities are carried out within the United Kingdom. If we ever need to transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other legally recognised transfer mechanisms, to protect your personal data in accordance with data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
Right of access: You have the right to request confirmation as to whether we process your personal data and to receive a copy of that data, together with certain additional information.
Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in specific situations, such as while we are verifying the accuracy of the data or considering an objection.
Right to object: You have the right to object to processing of your personal data that is based on our legitimate interests, on grounds relating to your particular situation. We will stop processing the data unless we can demonstrate compelling legitimate grounds which override your interests and rights.
Right to data portability: Where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller.
Right to withdraw consent: Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the contact details you already have for Carpet Cleanes N1, such as those provided on our service materials or website.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your rights have been infringed. We encourage you to contact us first so that we have the opportunity to address your concerns directly.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. When we make changes, we will revise the date of the most recent update and, where appropriate, notify you of significant changes through our usual communication channels.
Your continued use of our services after any changes to this Privacy Policy have been notified will be taken as acceptance of those changes. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data.
