Privacy Policy - Carpetcleaning W1W

This Privacy Policy explains how Carpetcleaning W1W collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all Carpetcleaning W1W customers in the area, including prospective customers, existing clients, property managers, and anyone who communicates with us in connection with our services. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning W1W is a service provider offering carpet and fabric cleaning services for residential and commercial premises in the W1W area. For the purposes of data protection law, we act as the data controller for the personal data we collect and process in connection with our business operations. This means we decide how and why your personal data is used.

2. Information We Collect

We collect only the personal data necessary to deliver our services, manage customer relationships, and comply with legal obligations. Depending on your interaction with us, the information may include:

Identity data: name, title, and business name if applicable.
Contact data: address, email address, phone number, and other communication details.
Service data: property details, cleaning requirements, appointment preferences, and notes relevant to service delivery.
Payment data: billing information and transaction records. We do not store full card details unless required by our payment processor.
Technical data: limited data such as device information, browser type, and log data if you interact with our digital systems.
Communication data: messages, enquiries, feedback, complaints, and correspondence.
Special category data: generally not collected. If you voluntarily provide information that could reveal health conditions, allergies, or access needs, we will only process it where necessary and with appropriate safeguards.

We do not intentionally collect more personal data than is required for our legitimate business purposes. If you choose not to provide certain information, we may be unable to complete your booking or deliver some services effectively.

3. How We Use Your Data

We use personal data for the following purposes:

to provide quotations, confirm bookings, and deliver cleaning services;
to communicate about appointments, service updates, and customer support;
to issue invoices, process payments, and manage refunds where applicable;
to maintain service records and business administration;
to improve service quality, staff training, and operational efficiency;
to handle complaints, disputes, and service follow-up;
to comply with legal, accounting, tax, and regulatory obligations;
to protect our business, staff, and customers from fraud, misuse, or security incidents.

We will only use your personal data for the purposes for which it was collected, unless we reasonably believe we need to use it for a compatible purpose permitted by law.

4. Lawful Basis for Processing

Under data protection law, we must have a valid lawful basis to process personal data. Carpetcleaning W1W relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes managing quotes, bookings, service delivery, invoicing, and customer support.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. Examples include managing client records, improving services, preventing fraud, and maintaining secure business operations.

Legal Obligation

We may process and retain certain data to comply with legal duties, including tax, accounting, record-keeping, and regulatory requirements.

Consent

In limited circumstances, we may rely on your consent, for example where you voluntarily provide sensitive information or agree to optional communications. You can withdraw consent at any time where consent is the basis for processing.

5. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as processors when they process data on our instructions and are required to protect it appropriately. Examples may include:

Payment processors: to handle card or electronic payments securely;
Booking and scheduling systems: to manage appointments and service planning;
IT and cloud service providers: to store data and maintain business systems;
Accountants and payroll providers: to support financial administration and legal compliance;
Customer communication tools: to send service-related messages;
Professional advisers and insurers: where required for legal, insurance, or dispute purposes.

We only share the minimum information necessary and ensure processors are bound by written agreements requiring confidentiality, security, and compliance with data protection law. We do not sell your personal data.

6. International Transfers

If any processor or service provider stores or accesses data outside the UK, we will ensure appropriate safeguards are in place, such as adequacy regulations or approved contractual protections. These measures are designed to keep your personal data protected to a standard required under UK law.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods depend on the type of data and the reason for processing.

Customer and service records: retained for the period needed to manage services and resolve queries.
Financial and tax records: retained for the period required by law.
Communication records: retained as needed to manage ongoing customer relationships and disputes.
Technical logs: retained for a limited period for security and operational purposes.

When data is no longer required, we will securely delete, anonymise, or archive it in line with our retention procedures. We review retention needs regularly to avoid keeping data longer than necessary.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and supplier vetting. While no system can be guaranteed to be completely secure, we take reasonable steps to reduce risk and protect your information.

9. Your Rights

As a data subject, you have rights in relation to your personal data. Subject to legal limitations, these rights may include:

Right of access: to request a copy of the personal data we hold about you;
Right to rectification: to ask us to correct inaccurate or incomplete data;
Right to erasure: to request deletion of data in certain circumstances;
Right to restrict processing: to ask us to limit how we use your data;
Right to data portability: to receive certain data in a structured, commonly used format;
Right to object: to object to processing based on legitimate interests or direct marketing;
Right to withdraw consent: where we rely on consent, you may withdraw it at any time;
Right to complain: to raise concerns with the UK Information Commissioner’s Office (ICO).

We may need to verify your identity before responding to a rights request. We will respond within the time limits required by law and will explain if any exception applies.

10. Children’s Data

Our services are not directed to children, and we do not knowingly collect personal data from individuals under the age of 18 except where it is incidentally provided by an adult customer in connection with a property or service booking. If we become aware that we have collected data unlawfully from a child, we will take appropriate steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

12. Summary of Our Commitment

Carpetcleaning W1W respects your privacy and is committed to responsible data handling. We collect only relevant information, use it for clearly defined purposes, rely on lawful bases under UK GDPR, work with trusted processors under written agreements, and keep data only as long as needed. We also recognise your rights and aim to handle all requests promptly and transparently. This policy applies to all Carpetcleaning W1W customers in the area and forms part of our commitment to lawful, fair, and secure service provision.

Last reviewed: This Privacy Policy should be reviewed regularly to ensure it remains accurate and compliant.