Privacy Policy - Carpetcleaning Tufnellpark

This Privacy Policy explains how Carpetcleaning Tufnellpark collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all Carpetcleaning Tufnellpark customers in the area, including prospective customers, current customers, and anyone who interacts with us in connection with our services. We are committed to handling personal information in a lawful, fair, and transparent way, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning Tufnellpark provides residential and commercial carpet cleaning services, along with related upholstery and stain treatment services where requested. For the purposes of data protection law, Carpetcleaning Tufnellpark is the data controller for the personal data we collect and use in connection with our services. This means we determine the purposes and means of processing your personal data.

2. Personal Data We Collect

We collect only the information necessary to deliver our services, manage customer relationships, and meet legal obligations. The types of personal data we may collect include:

• Identity data: name, title, and, where relevant, business name.
• Contact data: address, email address, and telephone number.
• Service data: details of the cleaning services requested, property access notes, special instructions, and service history.
• Payment data: payment status, transaction references, invoicing details, and basic billing information.
• Communication data: messages, queries, complaints, feedback, and correspondence.
• Technical data: limited website or device information if you contact us electronically, such as IP address or browser type, where applicable.
• Special category data: we do not usually seek to collect sensitive personal data. However, if you volunteer information about allergies, medical conditions, or access needs, we will only process it where necessary and with appropriate safeguards.

We do not intentionally collect more data than is needed. We also do not knowingly collect personal information from children without the involvement of a parent, guardian, or responsible adult.

3. How We Use Personal Data

We use personal data for the following purposes:

• To provide carpet cleaning and related services.
• To arrange appointments, confirm bookings, and manage service delivery.
• To prepare quotations, invoices, and receipts.
• To respond to enquiries and customer support requests.
• To maintain service records and quality assurance.
• To handle complaints, disputes, or refund requests.
• To comply with legal, accounting, and regulatory requirements.
• To protect our business, customers, and staff from fraud, misuse, or security risks.

We will only use your data for the purposes for which it was collected, unless we reasonably need to use it for a compatible purpose. If we need to use your data for a new purpose, we will ensure we have a lawful basis to do so.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each processing activity. Carpetcleaning Tufnellpark relies on the following lawful bases:

Contract

We process personal data when it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes booking services, delivering cleaning work, and issuing invoices.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include managing customer relationships, improving our services, keeping records, and protecting against misuse or fraud.

Legal Obligation

We may process and retain certain data where needed to comply with tax, accounting, consumer protection, and other legal obligations.

Consent

In limited cases, we may rely on your consent, for example where you voluntarily provide information that is not essential to the service. Where consent is used, you may withdraw it at any time.

Where special category data is involved, we will only process it if a valid condition under data protection law applies and additional protection is in place.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties who help us run our business. These third parties act as processors when they process personal data on our behalf and under our instructions. Examples may include:

• Booking and scheduling providers.
• Payment processing services.
• Accounting and invoicing software providers.
• IT and cloud storage providers.
• Customer communication or email service providers.
• Professional advisers, such as accountants or legal advisers, where necessary.

We require processors to keep your data secure, use it only for the agreed purpose, and comply with data protection law. We do not sell personal data. We may also disclose data where required by law, court order, or lawful request from a public authority.

6. International Transfers

If any processor stores or accesses data outside the UK, we will ensure appropriate safeguards are in place, such as an adequacy decision or approved contractual protections, so that your data remains protected to the standard required by law.

7. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, tax, and reporting requirements. Retention periods depend on the type of data and the reason for holding it.

• Customer service records: kept for a reasonable period to manage service history, disputes, and follow-up issues.
• Invoice and payment records: kept for the period required by accounting and tax law.
• Communication records: kept long enough to respond to enquiries and resolve complaints.
• Consent-based information: kept until consent is withdrawn or the data is no longer needed.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. Retention is reviewed regularly to ensure we do not keep data longer than necessary.

8. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, encryption where appropriate, and staff training. While no system can be guaranteed completely secure, we work to maintain a level of protection appropriate to the risk.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions or exemptions. They include:

• Right of access: you can ask for a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct inaccurate or incomplete data.
• Right to erasure: in certain cases, you can ask us to delete your data.
• Right to restriction: you can ask us to limit how we use your data in certain circumstances.
• Right to object: you can object to processing based on legitimate interests or direct marketing, where applicable.
• Right to data portability: you can ask for certain data to be provided in a structured, commonly used format.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you are concerned about how your data has been handled. We encourage you to raise concerns with us first so we can try to resolve them promptly and fairly.

10. Marketing

We do not use personal data for unsolicited marketing unless we have a lawful basis to do so. Where consent is required, we will obtain it before sending marketing communications. You can opt out of marketing at any time. Opting out of marketing will not affect service-related communications that are necessary to deliver or manage a booking.

11. Cookies and Similar Technologies

If we use a website or online booking tools that place cookies or similar technologies on your device, these may be used for functionality, performance, and security. Where required, we will provide notice and obtain consent for non-essential cookies. Any such technology will be used in a way that is proportionate and privacy-conscious.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal duties, or data handling practices. The latest version will apply from the date it is published or otherwise communicated. We recommend reviewing it periodically so you remain informed about how we protect your personal information.

13. Summary of Our Approach

Carpetcleaning Tufnellpark only collects data that is relevant and necessary, uses it for clear and lawful purposes, stores it for limited periods, and shares it only with trusted processors or where legally required. We respect your privacy rights and aim to maintain transparency in all customer interactions. This policy applies to all Carpetcleaning Tufnellpark customers in area and forms part of our commitment to responsible data protection.