Privacy Policy - Carpetcleaning SE4

This Privacy Policy explains how Carpetcleaning SE4 collects, uses, stores, and protects personal data relating to all customers in the SE4 area. It applies to every customer, prospective customer, and website visitor who engages with our services in the area. We are committed to handling personal information lawfully, fairly, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to all Carpetcleaning SE4 customers in the area, including household customers, business customers, and anyone who requests information about our services, receives a quotation, books a service, or communicates with us for service-related reasons. By using our services, you acknowledge that your data will be processed in line with this Privacy Policy.

2. Information we collect

We collect only the personal data that is necessary for providing carpet cleaning and related services, managing our customer relationships, and meeting legal and operational obligations.

Information you provide directly

Identity details such as your name.
Contact details such as your address, telephone number, and email address.
Service information including property access details, cleaning preferences, service instructions, and appointment requirements.
Payment-related information where relevant for invoicing, receipts, or account administration.
Communication records such as enquiries, complaints, feedback, or other correspondence.

Information collected automatically

If you interact with our digital systems, we may collect limited technical data such as device information, browser type, approximate location, and usage patterns. This information is used to improve service functionality, maintain security, and understand how our services are used. Where possible, this data is aggregated or pseudonymised.

Information from third parties

In some cases, we may receive information from third parties such as property managers, landlords, payment processors, or referral partners where this is necessary to arrange or deliver services. We only receive data that is relevant to the service and process it in line with this policy.

3. How we use your personal data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To schedule, deliver, and manage carpet cleaning services.
To confirm bookings and service arrangements.
To process payments, refunds, or invoicing matters.
To maintain accurate business records.
To deal with complaints, service issues, or requests after a service has been completed.
To comply with legal, accounting, and tax obligations.
To protect our business, staff, and customers from fraud, misuse, or security incidents.

We only use your personal data for purposes that are compatible with the reasons it was collected. We do not sell personal data and we do not use it for unrelated purposes without a lawful basis.

4. Lawful basis for processing

Under GDPR, we must have a lawful basis for each processing activity. Carpetcleaning SE4 relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging a booking, providing a quotation at your request, carrying out cleaning services, confirming appointments, and issuing invoices or receipts.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This includes service administration, customer support, record keeping, fraud prevention, and improving our operations. We always consider whether our interests are proportionate and whether the processing is necessary.

Legal obligation

We may process and retain certain information where required to comply with legal obligations, including accounting, tax, and regulatory requirements. This may include keeping records of transactions and communications for statutory purposes.

Consent

Where consent is required, for example for certain marketing communications or optional communications, we will ask for it clearly and separately. You may withdraw consent at any time, and this will not affect the lawfulness of any processing carried out before withdrawal.

5. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, and operational requirements. Retention periods vary depending on the type of information and the reason it is held.

Customer and service records are generally kept for as long as needed to manage the service relationship and resolve any issues.
Financial and transaction records are kept for the period required by law and standard accounting practice.
Communication records may be retained for a reasonable period to support customer service, quality control, and dispute resolution.
Technical data is retained only as long as needed for security, system maintenance, or analytical purposes.

When data is no longer required, it is securely deleted, anonymised, or destroyed. We take retention seriously and regularly review stored information to ensure we are not keeping it longer than necessary.

6. Data sharing and processors

We may share personal data with trusted third parties who help us operate our services. These parties act as data processors or, in some cases, independent controllers. We only share the minimum information necessary and require appropriate safeguards.

Examples of processors

IT and cloud service providers who store or support our systems.
Payment service providers who process payments securely.
Scheduling, invoicing, or customer management software providers.
Professional advisers such as accountants or legal advisers where necessary.
Delivery or logistics providers where service fulfilment requires their involvement.

All processors are expected to handle data securely, only act on our instructions where applicable, and protect personal data in line with GDPR requirements. We do not allow processors to use your information for their own unrelated purposes.

7. International transfers

If personal data is transferred outside the UK or European Economic Area, we will ensure appropriate safeguards are in place, such as approved contractual protections or other lawful transfer mechanisms. These measures are designed to maintain a level of protection equivalent to UK GDPR standards.

8. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, secure storage, staff training, and privacy-aware internal procedures. While no system can be guaranteed completely secure, we work to maintain a high standard of protection.

9. Your rights

You have rights under data protection law in relation to your personal data. Subject to legal limits and verification of identity, you may exercise the following rights:

Right of access to obtain a copy of the personal data we hold about you.
Right to rectification to correct inaccurate or incomplete data.
Right to erasure to request deletion of your data in certain circumstances.
Right to restriction to limit how we use your data in certain situations.
Right to data portability to receive certain information in a structured, commonly used format.
Right to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent where processing relies on consent.

If you believe your rights have been infringed, you also have the right to complain to the relevant data protection authority. We encourage customers to raise concerns so we can address them promptly and transparently.

10. Children’s data

Our services are intended for adults. We do not knowingly collect personal data from children without appropriate authorisation. If we become aware that we have collected data from a child unlawfully, we will take steps to delete it as soon as reasonably possible.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or operational practices. Any updated version will apply from the date it is published. We recommend reviewing this policy periodically to remain informed about how your data is handled.

12. Summary of our commitment

Carpetcleaning SE4 is committed to protecting your personal information and using it only where there is a clear lawful basis. We collect limited data, keep it only as long as necessary, use trusted processors under appropriate safeguards, and respect your rights as a data subject. This Privacy Policy applies to all Carpetcleaning SE4 customers in area and is designed to ensure fair, transparent, and lawful data processing at every stage of our service.