Privacy Policy - Carpetcleaning Croydon

Carpetcleaning Croydon is committed to protecting the privacy and personal data of all customers in the Croydon area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our carpet cleaning services. It applies to all Carpetcleaning Croydon customers in the area, including residential and commercial clients, and it is designed to meet the requirements of the UK GDPR and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Carpetcleaning Croydon acts as the data controller in relation to the personal information we collect and process for the delivery of our services. This means we decide why and how your data is used. In limited cases, we may also use third-party data processors to help us provide services, manage administration, or maintain our systems.

2. Information We Collect

We only collect personal data that is necessary for us to provide, manage, and improve our services. The types of information we may collect include:

Identity details such as your name and title.
Contact details such as your telephone number, email address, and service address.
Service information such as the type of carpet cleaning requested, appointment details, job notes, and preferences.
Payment information such as billing details and payment confirmation records.
Communication records including messages, complaints, enquiries, and service feedback.
Technical data such as limited website or device information if you submit a form or interact with online booking tools.
Usage and operational data such as service history, estimates, and invoices.

We do not intentionally collect special category data unless it is required for a specific lawful reason and you have provided it voluntarily. If such data is ever needed, we will handle it with additional safeguards and only where permitted by law.

3. How We Use Your Information

We use your personal data for the following purposes:

To provide carpet cleaning, stain removal, and related services.
To arrange appointments and manage bookings.
To prepare quotations, invoices, and service records.
To communicate with you about your enquiry, job status, or customer support requests.
To improve our services, processes, and customer experience.
To keep internal records for accounting, audit, and business administration.
To comply with legal obligations, including tax and record-keeping requirements.
To handle complaints, disputes, and insurance-related matters where necessary.

We will only use your personal data for the purpose for which it was collected, unless we reasonably believe that we need to use it for another compatible purpose and the law allows us to do so.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process your personal data. Carpetcleaning Croydon relies on the following lawful bases:

Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes booking services, delivering cleaning work, issuing invoices, and managing customer support.

Legal Obligation

We may process data when we must comply with legal requirements, such as maintaining business records, meeting tax obligations, or responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided that your rights and freedoms do not override those interests. Examples include managing customer records, improving service quality, preventing fraud, and keeping our operations secure.

Consent

In some situations, we may ask for your consent, especially for optional communications or non-essential processing. Where we rely on consent, you can withdraw it at any time.

5. How We Share Personal Data

We do not sell your personal information. We may share it only when necessary and only with trusted third parties who help us operate our business. These may include:

Payment providers who process transactions securely.
IT and software providers who support booking, communication, storage, or accounting systems.
Professional advisers such as accountants, insurers, or legal advisers where needed.
Subcontractors or service partners involved in delivering a job where operational support is required.
Public authorities where disclosure is required by law or necessary to protect legal rights.

All processors and third parties are required to handle personal data securely, use it only for authorised purposes, and comply with data protection law. We take reasonable steps to ensure they offer appropriate safeguards.

6. International Transfers

Where any service provider stores or accesses data outside the UK, we will ensure appropriate safeguards are in place. These may include adequacy regulations, contractual protections, or other lawful transfer mechanisms permitted under UK GDPR.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods may vary depending on the type of information and the nature of the service provided.

Customer records are generally kept for the duration needed to manage the service relationship and maintain business records.
Invoices and financial records are retained for the period required by tax and accounting law.
Communication records may be kept for a reasonable time to handle follow-up, complaints, or service issues.
Marketing or consent-based data will be kept until you withdraw consent or ask us to stop using it.

When data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a safe manner.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful selection of processors.

While no system can be guaranteed 100% secure, we continually review our practices to reduce risk and maintain a high level of protection.

9. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may apply in whole or in part depending on the legal basis for processing and the circumstances of your request.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can ask us to delete your data in certain circumstances.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request a copy of certain data in a reusable format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you believe your data rights have not been respected, you also have the right to lodge a complaint with the Information Commissioner’s Office or another relevant supervisory authority.

10. Cookies and Similar Technologies

If our online systems use cookies or similar technologies, they are used only where necessary for functionality, security, analytics, or improving user experience. Any non-essential cookies should be managed in line with applicable consent rules. You can usually control cookies through your browser settings.

11. Children’s Data

Our services are intended for adults and businesses. We do not knowingly collect personal data from children except where it is unavoidably provided as part of a customer request and is necessary to complete the service. Where this occurs, we apply appropriate care and legal safeguards.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal duties, or data protection practices. The latest version will apply from the date it is published or communicated. We encourage customers to review this policy periodically.

13. Summary of Key Principles

In line with GDPR principles, Carpetcleaning Croydon aims to ensure that personal data is:

Processed lawfully, fairly, and transparently.
Collected for specified, legitimate purposes.
Limited to what is necessary.
Accurate and kept up to date where relevant.
Stored only for as long as needed.
Protected with suitable security measures.

By using our services, you acknowledge that your information may be processed in accordance with this Privacy Policy. We are committed to respecting your privacy and handling your personal data responsibly for every Carpetcleaning Croydon customer in the area.