Privacy Policy - Carpetcleaning Twickenham

This Privacy Policy explains how Carpetcleaning Twickenham collects, uses, stores, shares, and protects personal data in connection with the services we provide. It applies to all Carpetcleaning Twickenham customers in the area, including individuals who enquire about our services, receive quotations, book appointments, or otherwise interact with us. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning Twickenham provides professional carpet cleaning and related domestic and commercial cleaning services. For the purposes of data protection law, we act as the data controller for the personal data we collect and use when delivering our services, managing bookings, and operating our business.

We only collect personal data that is necessary for the purposes described in this policy. We take privacy seriously and aim to ensure that all customers understand how their information is used.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity information: name, title, and any relevant account or booking reference.
Contact details: address, email address, telephone number, and preferred communication method.
Service information: details about the cleaning service requested, property type, access arrangements, and notes about areas requiring attention.
Payment information: billing details and transaction records. We do not store full card details unless necessary for payment processing through a secure provider.
Correspondence: messages, complaints, feedback, and records of communications with us.
Technical information: limited information collected when you interact with our digital systems, such as device identifiers, browser type, and basic usage data, where applicable.
Marketing preferences: whether you have opted in or out of receiving service updates or promotional communications.

We do not intentionally collect special category data unless it is strictly necessary and we have a lawful basis to do so. If you choose to share such information with us, we will treat it with appropriate care and confidentiality.

3. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To schedule, manage, and complete bookings.
To deliver cleaning services safely and effectively.
To process payments and maintain accounting records.
To communicate about appointments, service changes, or follow-up matters.
To deal with complaints, disputes, or service issues.
To maintain accurate internal business records.
To comply with legal obligations, including tax and accounting requirements.
To improve our services, processes, and customer experience.

We will only use personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose and that use is permitted by law.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Carpetcleaning Twickenham relies on the following lawful bases:

Contract: where processing is necessary to take steps at your request before entering into a contract or to perform our obligations under a service agreement.
Legal obligation: where we must process data to meet legal requirements, such as tax, accounting, and record-keeping duties.
Legitimate interests: where processing is necessary for our legitimate business interests and your rights do not override those interests. This may include managing operations, improving services, preventing fraud, and handling customer enquiries.
Consent: where we rely on your explicit permission, for example for certain types of marketing communications. You may withdraw consent at any time.

When we rely on legitimate interests, we balance our interests against your rights and freedoms to ensure your data remains protected.

5. Sharing Your Data and Processors

We do not sell personal data. However, we may share information with trusted third parties where necessary to operate our business and provide services. These third parties act as processors or independent controllers depending on the context.

Examples of processors may include:

Payment processors: to handle secure transactions.
Booking and scheduling providers: to manage appointments and service planning.
IT and hosting providers: to store, secure, and maintain business systems.
Email and communication providers: to send administrative communications.
Professional advisers: such as accountants or legal advisers, where necessary for compliance and business administration.

Where we use processors, we ensure there are appropriate data processing agreements in place requiring them to protect personal data, act only on our instructions, and use suitable technical and organisational security measures.

We may also disclose personal data if required by law, court order, or regulatory authority, or where disclosure is necessary to protect our rights, property, staff, customers, or the public.

6. Data Retention

We keep personal data only for as long as is necessary for the purposes for which it was collected, including for legal, accounting, or reporting obligations. Retention periods vary depending on the type of data and the purpose for which it is used.

Customer and booking records: kept for as long as needed to provide services and manage any follow-up matters.
Financial and tax records: retained for the period required by law.
Communications and complaint records: retained for a reasonable period to resolve issues and support our business records.
Marketing preferences: retained until you withdraw consent or object, where applicable.

When personal data is no longer required, we will securely delete it, anonymise it, or otherwise dispose of it safely.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss, or destruction. These measures may include restricted access controls, secure systems, password protection, and internal procedures designed to safeguard information.

Although no system can be guaranteed to be completely secure, we regularly review our procedures to reduce risks and maintain a high standard of data protection.

8. International Transfers

If personal data is transferred outside the UK, we will only do so where appropriate safeguards are in place and where the transfer complies with applicable data protection laws. Such safeguards may include adequacy regulations or standard contractual protections.

9. Your Rights

As a data subject, you have rights under UK GDPR in relation to your personal data. These rights may include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete information.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restrict processing: to ask us to limit how we use your data in certain situations.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to request transfer of certain data in a structured, commonly used format.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise your rights, you may make a request in accordance with our internal procedures. We may need to verify your identity before responding. We will respond within the timeframe required by law.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been breached.

10. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is necessary for a lawful service arrangement and provided by an appropriate adult or guardian. If we become aware that we have collected such data improperly, we will take steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

12. Our Commitment to Privacy

At Carpetcleaning Twickenham, we recognise the importance of protecting personal data and respecting privacy. We are committed to processing information responsibly, limiting access to those who need it, and using data only for legitimate and lawful purposes.

This policy applies to all Carpetcleaning Twickenham customers in area and should be read alongside any specific terms that apply to a particular service or arrangement. By using our services or engaging with us, you acknowledge that your personal data may be processed as described in this Privacy Policy.