Privacy Policy - Carpet Cleaners Paddington

This Privacy Policy explains how Carpet Cleaners Paddington collects, uses, stores, shares, and protects personal data relating to all customers in the Paddington area. It applies to all Carpet Cleaners Paddington customers in area, including individuals who request quotations, book services, receive cleaning services, make payments, or otherwise interact with us in connection with our carpet cleaning services.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only process personal data when we have a valid legal basis to do so and we take appropriate technical and organisational measures to protect the information we hold.

1. Personal Data We Collect

We collect only the information necessary to provide and manage our services. The type of data we may collect includes:

Identity details such as your name and, where relevant, the name of a business or property manager.
Contact details such as your address, email address, and telephone number.
Service details such as the type of cleaning requested, property access information, service preferences, and appointment notes.
Transaction information such as payment confirmations, invoices, refunds, and related records.
Communication records such as messages, enquiries, complaints, and feedback.
Technical data in limited cases, such as basic device or usage information if you contact us electronically.
Special instructions that may be relevant to the service, such as access arrangements or cleaning sensitivities.

We do not intentionally collect more personal data than needed for the purpose of delivering a carpet cleaning service. We do not require unnecessary information to be provided.

2. How We Use Personal Data

We use personal data for the following purposes:

To provide quotations and manage bookings.
To carry out carpet cleaning and related services.
To communicate with customers about appointments, service updates, or changes.
To process payments and issue invoices or receipts.
To respond to queries, complaints, or service-related requests.
To maintain internal records and service history.
To improve the quality and efficiency of our services.
To comply with legal, accounting, insurance, or regulatory obligations.
To defend or establish legal claims where necessary.

We do not use personal data for unrelated purposes unless we are allowed to do so by law and have informed you where necessary.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Depending on the circumstances, we rely on one or more of the following legal bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes arranging services, completing cleaning work, taking payment, and handling service-related communications.

Legal obligation

We may process personal data where necessary to comply with legal obligations, such as accounting, tax, record-keeping, fraud prevention, or responding to lawful requests from authorities.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include improving service quality, maintaining internal records, handling customer queries, and protecting our business from misuse or claims.

Consent

In limited situations, we may rely on your consent, for example if it is required for a specific optional communication or preference. Where consent is used, you may withdraw it at any time.

4. Data Sharing and Processors

We may share personal data only when necessary and only with trusted third parties acting as processors or independent controllers under applicable law. These may include:

Payment processors that handle card or electronic transactions securely.
IT and system providers that support email, storage, scheduling, or record management.
Accountants or bookkeepers who assist with financial and tax obligations.
Insurance providers where needed for claims or risk management.
Professional advisers such as lawyers or consultants where necessary.
Public authorities if required by law or lawful request.

Where a third party processes personal data on our behalf, they are required to act only on our instructions, apply appropriate security measures, and keep the data confidential. We do not sell personal data.

5. International Transfers

Where a processor or service provider stores or accesses data outside the United Kingdom, we take steps to ensure that appropriate safeguards are in place. These may include approved contractual protections and other measures required by data protection law.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations. Retention periods may vary depending on the type of information and the nature of the service.

Booking and service records are normally retained for a period that allows us to manage customer history, disputes, and operational needs.
Financial and tax records are retained for the period required by law.
Correspondence and complaint records are kept for as long as needed to resolve the matter and to maintain reasonable business records.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify an individual.

7. Data Security

We use appropriate safeguards to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These safeguards may include access controls, secure storage, staff confidentiality obligations, and limited access to information on a need-to-know basis.

While no method of storage or transmission is completely risk-free, we take reasonable steps to reduce security risks and protect the information in our care.

8. Your Rights Under GDPR

Depending on the circumstances, you may have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data where there is no good reason for us to continue processing it.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – to request transfer of certain data to you or another controller, where legally applicable.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

You also have the right to raise concerns with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

9. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is necessary in connection with a customer request and appropriate lawful grounds exist. If we become aware that we have collected data unlawfully, we will take steps to delete it.

10. Automated Decision-Making

We do not use personal data for automated decision-making that produces legal or similarly significant effects. If this changes in the future, we will update this policy and provide appropriate information where required.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or service arrangements. Any updated version will apply from the date it is published. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

12. Summary of Key Principles

In simple terms, Carpet Cleaners Paddington collects only the personal data needed to provide cleaning services, uses it for clear and lawful purposes, stores it securely, shares it only where necessary with trusted processors, and keeps it only for as long as required. We respect the rights of every customer in the Paddington area and aim to process personal data responsibly, transparently, and in line with GDPR requirements.