Privacy Policy - Carpetcleaning Ruislip

This Privacy Policy explains how Carpetcleaning Ruislip collects, uses, stores, shares, and protects personal data. It applies to all Carpetcleaning Ruislip customers in the area, including private households, landlords, tenants, and business clients who use our carpet cleaning and related cleaning services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Carpetcleaning Ruislip acts as the data controller for the personal information we collect when customers enquire about, book, receive, or pay for our services. This means we decide how and why your personal data is processed. We only collect information that is relevant and necessary for providing our services, improving our operations, meeting legal duties, and protecting our legitimate business interests.

2. Information We Collect

We may collect and process the following categories of personal data:

Identity details such as your name and, where relevant, your business name.
Contact details such as your address, email address, and telephone number.
Service details including the type of cleaning requested, property access information, preferred appointment times, and service notes.
Payment information such as billing details and payment confirmations. We do not store card security codes.
Communication records including emails, messages, call notes, complaint details, and any feedback you provide.
Technical information if you interact with our digital systems, such as IP address, browser type, and basic usage data.
Special category data only where you voluntarily provide it and only if it is necessary, for example if we need to know about allergies, mobility requirements, or health-related access considerations to carry out the service safely.

We aim to keep data collection to the minimum necessary. We do not intentionally collect unnecessary or intrusive information.

3. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To schedule, manage, and deliver cleaning services.
To communicate about appointments, access arrangements, and service updates.
To process payments, invoices, and refunds where applicable.
To maintain business records and customer histories.
To handle complaints, disputes, or follow-up requests.
To improve our service quality, staff training, and operational efficiency.
To comply with legal, accounting, and tax obligations.
To prevent fraud, misuse, or unauthorised access.

We only use your information for the purposes for which it was collected, unless we reasonably determine that another compatible purpose applies under data protection law.

4. Lawful Basis for Processing

We process personal data only when we have a valid lawful basis under the UK GDPR. Depending on the context, we rely on one or more of the following:

Contract

We process your data where it is necessary to enter into or perform a contract with you. This includes handling bookings, arranging access, completing services, and issuing invoices.

Legal Obligation

We may need to process and retain information to comply with accounting rules, tax laws, health and safety obligations, and other legal requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Examples include business administration, improving services, preventing fraud, and maintaining records of customer interactions.

Consent

Where we rely on your consent, such as for certain optional communications or the processing of special category data that is not otherwise required, you may withdraw consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We do not sell your personal data. We may share it only where necessary and appropriate for running our business and delivering our services. Third parties may act as processors on our behalf and must follow our instructions and protect your data appropriately.

Examples of processors or service providers may include:

Payment processing providers.
Accounting and bookkeeping software providers.
Booking, scheduling, and customer management systems.
IT support and secure data storage providers.
Communications providers used for email or messaging.

We may also disclose information to professional advisers, insurers, regulators, or public authorities where required by law or necessary to defend legal claims. Any sharing is limited to what is necessary for the relevant purpose.

6. International Transfers

If any processor stores or accesses your data outside the United Kingdom, we take reasonable steps to ensure that appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent legal protections designed to keep your information secure and compliant with applicable law.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, and to meet legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the reason for processing.

Customer booking and service records: retained for a reasonable period to manage service history and resolve disputes.
Financial and tax records: retained for the period required by law.
Communication records: retained where needed to manage customer support, complaints, or legal obligations.
Marketing preferences: retained until you opt out or withdraw consent, where applicable.

When personal data is no longer required, we will securely delete it or anonymise it so that it can no longer identify you.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, unauthorised access, accidental disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our procedures. While no system can be guaranteed to be completely secure, we work continuously to maintain a high standard of protection.

9. Your Rights

Under data protection law, you have the following rights in relation to your personal data, subject to certain legal limits:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete information.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to ask us to limit processing in certain cases.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO) if you believe your data rights have been breached.

10. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children unless it is provided by an adult customer as part of a service arrangement and only when necessary for the provision of that service. If we become aware that we have collected data from a child without a valid reason, we will take appropriate steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal duties, or operational needs. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how we handle personal data.

12. Contacting Us About Privacy

If you have questions about this Privacy Policy, your personal data, or how Carpetcleaning Ruislip handles information, you may request further details through our usual business communication channels. We will aim to respond promptly and deal with your request in a fair, transparent, and lawful manner.

Summary of our approach: we collect only what we need, use it for clear and lawful purposes, keep it secure, retain it only as long as necessary, and respect your rights under data protection law.