Privacy Policy for Carpet Cleaners Kingston

This Privacy Policy explains how Carpet Cleaners Kingston collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all Carpet Cleaners Kingston customers in the area, including residential and commercial clients, whether enquiries are made by phone, email, online forms, or in person. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Important notice: By using our services, making an enquiry, or otherwise interacting with Carpet Cleaners Kingston, you acknowledge that your personal data may be processed as described in this policy.

1. Information We Collect

We collect only the personal data necessary to provide our services effectively, manage business operations, and meet legal obligations. The categories of information we may collect include:

Identity information such as your name and, where relevant, business or property name.
Contact information such as postal address, billing address, email address, and telephone number.
Service information such as details about the property, room sizes, carpet condition, stain types, and service preferences.
Transaction information such as service history, invoices, payment status, and records of payments made or due.
Communication records such as messages, complaints, feedback, and notes from phone or email correspondence.
Technical information if you interact with any digital systems we use, such as IP address, browser type, and usage data.

We do not intentionally collect special category data unless it is strictly necessary and you provide it to us, for example if you share information relevant to a cleaning concern or access requirement. Where such data is processed, we do so only when a lawful basis applies and appropriate safeguards are in place.

2. How We Use Personal Data

We use personal data for the following purposes:

To provide carpet cleaning and related services.
To assess service requirements and prepare quotations.
To schedule and manage appointments.
To process payments and manage invoices.
To respond to queries, complaints, and customer requests.
To maintain internal records and service histories.
To improve service quality, training, and operational efficiency.
To comply with legal, tax, accounting, and regulatory requirements.

We will only use your personal data for the purposes for which it was collected, unless we reasonably believe that another compatible purpose is required or permitted by law.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Carpet Cleaners Kingston relies on the following lawful bases:

Performance of a Contract

We process data when it is necessary to provide requested services, manage bookings, issue invoices, and fulfil our obligations to you. This includes arranging appointments, carrying out cleaning work, and handling related customer administration.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining records, improving our services, preventing fraud, managing customer relationships, and ensuring the security of our operations. We always consider the impact on your privacy before relying on this basis.

Legal Obligation

We may process and retain certain information to comply with legal obligations, including accounting, tax, insurance, and record-keeping requirements.

Consent

Where we rely on your consent, such as for optional marketing communications or for handling particularly sensitive information in limited circumstances, you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

4. Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as processors or independent controllers depending on the service they provide. We require processors to handle data securely, only on our instructions where applicable, and in compliance with data protection law.

Examples of processors and service providers may include:

Payment processors that handle card or electronic transactions.
IT and cloud service providers that support data storage, communication systems, and business software.
Accounting and bookkeeping providers that assist with financial administration.
Scheduling or customer management providers that help organise appointments and service records.
Professional advisers such as legal, insurance, or financial advisers where required.

We may also disclose personal data where required by law, court order, or government authority, or where necessary to protect our rights, property, staff, customers, or the public.

We do not sell your personal data.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting obligations. Retention periods depend on the type of information and the reason for processing.

Customer service records are generally retained for the duration of the business relationship and for a reasonable period afterwards for administration and dispute handling.
Financial and tax records are retained for the period required by applicable law.
Communication records may be kept for as long as needed to resolve queries, manage complaints, or demonstrate service history.
Marketing preferences are retained until you opt out or withdraw consent, where relevant.

When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in a safe and appropriate manner.

6. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of data handling practices.

Although we take reasonable precautions, no system is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will act in accordance with legal requirements, including notification where necessary.

7. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These rights may be subject to legal limitations and exemptions. They include:

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – in certain circumstances, you may ask us to delete your data.
Right to restriction – you may request that we limit how we use your data in certain cases.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to data portability – you may request transfer of certain data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

If you wish to exercise any of these rights, we will assess your request in accordance with applicable law and respond within the required timeframe. We may need to verify your identity before fulfilling a request.

8. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it. This may include the use of standard contractual clauses or other legally approved transfer mechanisms. We only allow international transfers where there is a lawful basis and adequate protection.

9. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where necessary for service delivery arranged by an adult customer. If we become aware that we have collected data unlawfully from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or the way we process personal data. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

11. Additional Information

This policy is intended to provide clear information about our data practices and your rights. If any part of this policy is found to be inconsistent with applicable data protection law, the legal requirements will take precedence. Our commitment is to process personal data responsibly, securely, and only where necessary.

Summary of commitments:

We collect only relevant personal data.
We process data lawfully and transparently.
We share data only with trusted processors or where required by law.
We retain data only as long as necessary.
We respect and support your privacy rights.

This Privacy Policy applies to all Carpet Cleaners Kingston customers in the area.