Privacy Policy - Carpetcleaning Brent

This Privacy Policy explains how Carpetcleaning Brent collects, uses, stores, shares, and protects personal data relating to our customers and prospective customers. It applies to all Carpetcleaning Brent customers in the area, including anyone who contacts us, requests a quotation, books a service, receives a service, or otherwise interacts with us in connection with our carpet cleaning services.

We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only collect data that is necessary for legitimate business purposes and keep it only for as long as required.

1. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity details such as name and title.
Contact details such as phone number, email address, and service address.
Booking and service information including requested services, appointment times, access notes, and special instructions.
Payment and billing information where needed for invoicing, payment processing, or accounting.
Communication records including messages, complaints, feedback, and service-related correspondence.
Technical data such as basic website or device information if you use an online enquiry form or digital service channel.
Usage and preference data that helps us understand customer needs and improve service delivery.

We do not intentionally collect special category data unless it is strictly necessary and you choose to provide it, for example where it affects access arrangements or service safety. If such information is received, we will handle it with appropriate care and only where permitted by law.

2. How We Collect Personal Data

We may collect data in several ways, including when you:

request a quote or estimate;
make an enquiry or communicate with us;
book or receive a carpet cleaning service;
complete a form, send a message, or provide feedback;
make a payment or receive an invoice;
interact with our business through phone, email, messaging, or online channels.

We may also receive information from third parties where necessary for service delivery, such as referral partners, payment providers, or business administration systems.

3. Lawful Basis for Processing

We process personal data only where we have a valid lawful basis under data protection law. Depending on the activity, our lawful bases include:

Contract - to take steps at your request before entering into a contract, and to perform services you have booked.
Legal obligation - to comply with tax, accounting, record-keeping, and regulatory requirements.
Legitimate interests - to manage our business effectively, respond to enquiries, improve services, maintain records, and handle customer relationships, provided your rights do not override those interests.
Consent - where we rely on your clear consent for specific activities, such as certain marketing communications. You may withdraw consent at any time.
Vital interests - only in rare cases where processing is necessary to protect someone’s life.

Where we rely on legitimate interests, we carefully consider whether the processing is necessary and whether it has a reasonable impact on your privacy.

4. How We Use Personal Data

We use personal data for the following purposes:

to provide carpet cleaning and related services;
to manage bookings, service delivery, and customer support;
to issue quotations, invoices, receipts, and payment confirmations;
to maintain accurate business, tax, and accounting records;
to respond to questions, concerns, complaints, or disputes;
to improve our service quality, reliability, and customer experience;
to protect our business, staff, and customers from fraud, misuse, or security risks;
to comply with legal and regulatory duties.

We do not use your personal data for unrelated purposes unless the law allows us to do so or you have been informed and, where necessary, given consent.

5. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors or independent controllers, but only where necessary and only to the extent required for legitimate business operations. These may include:

Payment processors to handle card or electronic payments securely.
Accounting and bookkeeping providers to support financial administration and compliance.
IT and cloud service providers to store data, manage systems, and support secure business operations.
Customer communications platforms used to send service updates or respond to enquiries.
Subcontractors or operational partners where needed to deliver services on our behalf.
Professional advisers such as legal, insurance, or compliance advisers.
Public authorities where disclosure is required by law or necessary to protect rights, property, or safety.

All processors are required to handle data under written instructions, maintain appropriate security measures, and process personal data only for the agreed purpose. We do not sell personal data.

6. International Transfers

Where any processor stores or accesses data outside the United Kingdom, we take steps to ensure an appropriate level of protection. This may include using approved contractual safeguards and checking that the receiving organisation can protect personal data to standards required by law.

7. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, including to satisfy legal, accounting, insurance, or reporting obligations. Retention periods depend on the type of data and the reason for processing.

Customer and service records are typically kept for the duration of the business relationship and for a reasonable period afterward.
Financial and tax records are retained for the periods required by law.
Communications and complaint records may be kept for longer where needed to resolve issues or defend legal claims.
Marketing data is retained until you opt out or withdraw consent, where applicable.

When data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention procedures.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and careful management of external service providers.

However, no system can be guaranteed completely secure. We therefore continually review our safeguards and take steps to reduce privacy risks.

9. Your Rights

Under data protection law, you have the following rights in relation to your personal data:

Right of access - to request a copy of the data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete information.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restriction - to ask us to limit processing in specific cases.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to receive certain information in a structured, commonly used format where applicable.
Right to withdraw consent - where processing is based on consent, you can withdraw it at any time.

These rights are not absolute and may be subject to legal exceptions. If you exercise any of these rights, we may need to confirm your identity before responding.

10. Marketing Preferences

We may send service-related messages where necessary to fulfil a booking or manage our relationship with you. For optional marketing communications, we will only contact you where permitted by law. You can opt out of marketing at any time. If you do so, we will respect your preference and update our records accordingly.

11. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children except where it is incidental to a service arrangement and legally permitted. If we become aware that we have collected data from a child without appropriate authority, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practice, or service arrangements. Any revised version will apply from the date it is posted or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

13. Summary of Our Commitment

We respect your privacy and are committed to using personal data responsibly, transparently, and securely. For all Carpetcleaning Brent customers in the area, we process data only when we have a lawful reason to do so, we keep it no longer than necessary, and we protect it with appropriate safeguards. We also ensure that our processors are held to suitable data protection standards and that your rights are respected at every stage.

By using our services, you acknowledge that you have read and understood this Privacy Policy.