Privacy Policy - Carpet Cleaners E9

This Privacy Policy explains how Carpet Cleaners E9 collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all Carpet Cleaners E9 customers in the E9 area, including anyone who requests a quotation, books a service, receives a visit, or communicates with us in connection with our services. We are committed to handling personal data in a lawful, fair, transparent, and secure manner in accordance with the UK GDPR and the Data Protection Act 2018.

1. Data We Collect

We only collect personal data that is necessary for operating our services, managing customer relationships, and meeting legal obligations. The information we may collect includes:

Identity details such as your name and title.
Contact details such as your phone number, email address, and service address.
Booking information such as appointment dates, requested services, notes about the job, and access instructions.
Payment information such as payment status, transaction references, and billing records. We do not retain full card details where a secure payment processor handles them.
Service and communication records such as emails, call notes, complaint history, and customer preferences.
Technical data where applicable, such as device or browser information if you interact with our digital systems.
Before-and-after service records including photographs only where they are needed for quality control, evidence of work completed, or handling a complaint, and only when appropriate and lawful.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it, or unless another lawful basis applies. If such information is shared with us incidentally, we will treat it with extra care and limit its use to what is required.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotes, schedule services, and complete cleaning work.
To manage customer accounts, booking records, and service history.
To communicate about appointments, changes, follow-up queries, or service issues.
To process payments, issue invoices, and manage refunds or disputes.
To improve service quality, train staff, and monitor customer satisfaction.
To maintain security, prevent fraud, and protect our business and customers.
To comply with legal, tax, accounting, and insurance obligations.

We will never use your personal data in a way that is incompatible with the purposes for which it was collected unless we have a valid legal basis and, where required, your consent.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Carpet Cleaners E9 relies on the following bases depending on the situation:

Performance of a Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes managing bookings, carrying out cleaning services, sending confirmations, and handling payment arrangements.

Legal Obligation

We may process and retain certain data where required by law, such as for accounting, tax compliance, record-keeping, fraud prevention, or responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include service administration, customer support, quality assurance, business record keeping, and protecting against misuse or fraud.

Consent

In limited cases, we may rely on your consent, for example where it is required for optional marketing communications or certain types of non-essential data use. When consent is used, you may withdraw it at any time.

4. Sharing Your Information and Processors

We do not sell personal data. We may share data only when necessary and with appropriate safeguards. Some third parties act as processors, meaning they handle data on our instructions and under a contract that requires them to protect it.

Examples of processors or service providers may include:

Payment processors that securely handle transactions.
Scheduling or booking platforms used to manage appointments and service records.
IT and cloud storage providers that help us store data securely.
Email and communication providers used for sending service-related messages.
Accounting and invoicing providers used for financial administration.
Professional advisers such as accountants, insurers, or legal advisers, where necessary.

We may also share personal data with authorities, regulators, or courts when required by law, or where necessary to protect our rights, property, staff, or customers.

Where a processor is engaged, they must only act on our instructions, keep data confidential, and implement suitable technical and organisational security measures. We conduct reasonable checks before appointing processors and expect them to comply with applicable data protection obligations.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law. Retention periods may depend on the type of data and the reason for holding it.

Customer and booking records: retained for the duration of the relationship and for a reasonable period afterward to manage queries, complaints, or repeat service requests.
Invoice and tax records: retained for the period required by tax and accounting laws.
Communication records: retained as long as needed to respond to enquiries, resolve disputes, and maintain business records.
Photographs and service evidence: retained only as long as needed for quality control, complaint handling, or proof of work.

When data is no longer needed, we will delete it securely or anonymise it so it can no longer identify you.

6. Data Security

We use appropriate safeguards to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These safeguards may include access controls, password protection, encryption where appropriate, staff confidentiality duties, and secure storage practices.

Although no system can be completely secure, we take reasonable steps to reduce risks and limit data access to personnel who need it for legitimate business purposes only.

7. Your Rights

As a data subject, you have several rights under GDPR. Subject to legal limits and verification of identity, you may exercise the following rights:

Right of access to request a copy of the personal data we hold about you.
Right to rectification to correct inaccurate or incomplete data.
Right to erasure to request deletion of your data in certain circumstances.
Right to restriction to limit how we use your data in certain cases.
Right to object to processing based on legitimate interests or direct marketing.
Right to data portability to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent where processing is based on consent.

If you believe your rights have been infringed, you also have the right to lodge a complaint with the UK Information Commissioner’s Office. We encourage customers to raise any concerns directly so we can address them promptly.

8. Marketing Communications

If we send optional marketing communications, we will do so only where permitted by law. You may opt out at any time. We will continue to send essential service-related messages that are necessary for bookings, billing, or customer support, as these are not marketing messages.

9. Children’s Data

Our services are aimed at adult customers and property occupiers. We do not knowingly collect personal data from children except where it is incidental to providing a household service and only to the extent necessary. If we become aware that we have collected data unlawfully, we will take appropriate steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. The most recent version will apply to your use of our services. We encourage customers to review this policy periodically so they remain informed about how their information is used.

11. Summary of Key Points

Carpet Cleaners E9 collects only the information needed to manage bookings, perform cleaning services, process payments, and meet legal duties. We process data on lawful bases including contract performance, legal obligation, legitimate interests, and consent where relevant. We share data only with trusted processors and other third parties when necessary, retain it only for as long as needed, and respect your GDPR rights at all times.

This Privacy Policy applies to all Carpet Cleaners E9 customers in the E9 area.