Privacy Policy - Carpet Cleaners TW9

This Privacy Policy explains how Carpet Cleaners TW9 collects, uses, stores, shares, and protects personal data relating to its customers and website users in the TW9 area. It applies to all Carpet Cleaners TW9 customers in the area, including residential and commercial clients who request cleaning services, make enquiries, receive quotations, or otherwise interact with our business. We are committed to handling personal data in a lawful, fair, transparent, and secure manner in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Carpet Cleaners TW9 acts as the data controller for the personal information described in this policy. This means we decide why and how your personal data is processed. We take data protection seriously and only process personal data where we have a valid legal basis to do so. We aim to keep our practices clear, proportionate, and limited to what is necessary for providing our services and managing our business effectively.

2. Personal Data We Collect

We may collect and process the following types of personal data:

Identity data: name, title, and, where relevant, business name.
Contact data: address, email address, telephone number, and service location details.
Service data: information about the cleaning services requested, property type, stain or fabric details, and service preferences.
Payment data: payment confirmation, billing records, and transaction details. We do not usually store full card details where a third-party payment provider is used.
Communication data: messages, enquiries, feedback, complaints, and records of correspondence.
Technical data: basic device, browser, and usage information collected when you interact with our online services, if applicable.
Marketing preferences: your choices regarding receiving promotional or service-related messages.

We only collect data that is relevant and necessary for the purposes described in this policy. We do not intentionally collect special category data unless it is strictly required and you have provided it voluntarily, or we are otherwise legally permitted to process it.

3. How We Use Your Data

We use personal data for the following purposes:

to provide quotations and deliver carpet cleaning services;
to manage bookings, appointments, and customer requests;
to communicate with you before, during, and after a service;
to process payments, refunds, and billing administration;
to keep records for accounting, tax, and operational purposes;
to respond to queries, complaints, and service issues;
to improve our services, training, and business performance;
to comply with legal obligations and resolve disputes;
to send marketing communications where permitted and appropriate.

We will always seek to use your data in a way that is consistent with the reason it was collected. If we need to use it for a new purpose, we will only do so where the law allows it.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Carpet Cleaners TW9 relies on the following lawful bases:

Contract: when processing is necessary to provide a quote, arrange a booking, deliver cleaning services, or handle payment.
Legitimate interests: when we need to manage and improve our business, maintain service records, prevent fraud, or respond to customer enquiries, provided our interests are not overridden by your rights and freedoms.
Legal obligation: when we must keep records or disclose data to comply with tax, accounting, consumer, or other legal requirements.
Consent: for certain marketing activities or optional communications where consent is required by law. You may withdraw consent at any time.

Where we rely on legitimate interests, we carefully consider whether the processing is necessary and whether it affects your privacy in a way that would be unreasonable. Where consent is used, it will be freely given, specific, informed, and unambiguous.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties who assist us in operating our business. These third parties act as data processors or, in some cases, independent controllers. We only share the minimum amount of data needed and only where appropriate safeguards are in place.

Typical processors may include:

IT and hosting providers that store or support our systems;
payment processors that handle transactions securely;
email or communication service providers;
booking, scheduling, or customer management software providers;
accountants or bookkeeping services acting on our behalf;
professional advisers, such as legal or compliance advisers, where necessary.

We require processors to act only on our instructions, keep personal data secure, and comply with applicable data protection requirements. We do not sell your personal data. We may disclose information if required by law, by a court order, or to prevent fraud, protect rights, or enforce our agreements.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or reporting obligations. Retention periods vary depending on the nature of the data and the reason it was collected.

Customer service records: retained for a reasonable period after service completion to manage follow-up, complaints, or warranty-related issues.
Financial and tax records: retained for the period required by law.
Marketing data: retained until you opt out, unsubscribe, or the data is no longer needed.
Enquiry records: retained only as long as needed to respond and maintain business records.

When data is no longer required, we will securely delete, anonymise, or archive it in a way that prevents unauthorised access or further unnecessary use. Retention is reviewed periodically to ensure we do not keep information longer than needed.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and the use of reputable service providers.

While we take reasonable steps to safeguard your data, no system can be guaranteed to be completely secure. If a personal data breach occurs and we are legally required to do so, we will notify the appropriate authorities and affected individuals without undue delay.

8. Your Rights Under GDPR

You have several rights in relation to your personal data. Subject to legal conditions and exemptions, these may include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to correct inaccurate or incomplete information.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restrict processing: to ask us to limit how we use your data in certain situations.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to receive certain information in a structured, commonly used format.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the time limits required by law. We may need to verify your identity before acting on a request. In some cases, we may retain certain data where legally permitted or required.

9. International Transfers

If any personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it. This may include the use of approved contractual protections or transfers to countries recognised as providing adequate protection. We only make such transfers where necessary and where the relevant legal requirements are satisfied.

10. Marketing Preferences

We may send service updates or marketing messages where the law allows us to do so. If you have given consent, or if we are otherwise permitted to contact you, you can opt out at any time. You can also tell us that you do not wish to receive marketing communications, and we will respect that choice. We will never use your personal data for marketing in a way that is unfair or intrusive.

11. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children in connection with carpet cleaning services. If we become aware that we have inadvertently collected such data, we will take reasonable steps to delete it promptly unless we are required to retain it by law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our internal practices. Any revised version will apply from the date it is published. We encourage customers in the TW9 area to review this policy periodically so they remain informed about how their personal data is handled.

13. Summary of Our Commitment

Carpet Cleaners TW9 is committed to processing personal data in a lawful, transparent, and respectful manner. We collect only what we need, use it for clear and legitimate purposes, keep it no longer than necessary, and protect it with appropriate safeguards. We also respect your rights and aim to make it easy for you to understand how your information is used. This policy applies to all Carpet Cleaners TW9 customers in area and reflects our commitment to privacy, accountability, and compliance with GDPR principles.