Privacy Policy
Carpet Cleaning Croydon Privacy Policy
This Privacy Policy explains how Carpet Cleaning Croydon collects, uses, stores and protects personal data relating to our customers and prospective customers in our service area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This policy applies to all Carpet Cleaning Croydon customers in our area, including individuals and businesses who contact us, request a quote, make a booking or use our carpet cleaning and related services.
Who We Are and Scope of This Policy
Carpet Cleaning Croydon is a carpet and upholstery cleaning service provider operating in the Croydon area and surrounding neighbourhoods. For the purposes of data protection law, Carpet Cleaning Croydon is the controller of your personal data. This means we determine why and how your personal data is processed when you interact with our services.
This Privacy Policy covers personal data we collect directly from you, personal data provided to us by third parties acting on your behalf, and personal data generated when we provide services at your home or business premises.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you, depending on how you engage with us and which services you use:
Identification and contact details such as your name, address, service address, and other basic contact details you choose to provide when contacting us or making a booking.
Service and booking information such as details of the services requested, descriptions of the areas or items to be cleaned, preferred dates and times, access instructions, and notes relevant to performing the service safely and effectively.
Payment and billing data such as billing address and limited payment-related information necessary to process your payment. Full payment card details are typically handled by secure payment processors acting on our behalf and are not stored by us beyond what is necessary for evidence of payment.
Communication records such as information contained in messages, enquiries, complaints or feedback you send to us by any channel, and any responses we provide.
Technical and usage data such as basic technical information you provide when completing online forms, and information supplied by you about how you heard about our services.
Lawful Basis for Processing Your Data
We will only process your personal data when we have a lawful basis to do so under data protection law. Depending on the circumstances, we may rely on one or more of the following lawful bases:
Performance of a contract: We process personal data to provide our services to you, including handling bookings, performing cleaning services, taking payment and communicating with you about your service.
Legitimate interests: We may process personal data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and interests. This includes managing our business operations, responding to enquiries, improving our services and maintaining appropriate records.
Legal obligations: We may process personal data where necessary to comply with legal and regulatory obligations, such as tax reporting, accounting, and responding to lawful requests from authorities.
Consent: In certain limited situations, we may rely on your consent, for example, for some forms of optional marketing communication. Where we rely on consent, you may withdraw it at any time by contacting us using the details provided in this policy.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To respond to your enquiries, provide quotes and give information about our services that you request.
To set up, confirm and manage your bookings, including arranging suitable dates and times and confirming access details.
To deliver carpet cleaning and related services at the agreed location and in line with your instructions.
To process payments, issue invoices and receipts and maintain financial records necessary for accounting and tax purposes.
To communicate with you regarding changes to appointments, service updates, queries or complaints and any aftercare advice related to our services.
To manage our business operations, including internal record-keeping, service quality monitoring and staff training.
To send you occasional information about services that may be relevant to you, where permitted by law and where you have not objected to such communications.
Sharing Your Personal Data and Use of Processors
We do not sell your personal data. We may share your personal data with trusted third parties in the following limited circumstances:
Service providers and processors: We may engage third-party companies to provide services on our behalf, such as payment processing, appointment scheduling tools, secure data storage, or administrative support. These organisations act as processors and may only process your personal data in accordance with our instructions and for the purposes described in this policy.
Professional advisers: We may share personal data with professional advisers such as accountants or legal advisers where necessary for their professional services.
Authorities and regulators: We may disclose personal data where required to comply with applicable laws, regulations or lawful requests from public authorities, or to protect our rights, property or safety and that of our customers or others.
Whenever we use processors, we take steps to ensure that appropriate contractual and technical safeguards are in place to protect your personal data.
Data Retention and Storage
We keep your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements.
In general, we apply the following retention principles:
Contact, booking and service data: Retained for a period necessary to manage your current and recent bookings and to deal with any questions or complaints. This will normally be for up to six years after the end of our relationship, in line with limitation periods for legal claims.
Financial and transaction records: Retained for the period required by tax and accounting laws, which may be up to six years or longer if required by law.
Marketing-related information: Retained until you opt out or object to receiving marketing communications, or until we cease such marketing.
When personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be associated with you.
International Transfers
Where we use third-party service providers that store or process personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your data in accordance with data protection laws. This may include using providers located in countries that have been granted adequacy decisions or entering into contracts that incorporate standard data protection clauses.
Data Security
We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, disclosure or destruction. These measures may include restricted access to personal data on a need-to-know basis, secure storage methods, and staff awareness of data protection obligations. However, no system can be completely secure, and you should take care when providing personal data, especially over the internet or by unsecured channels.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these include:
Right of access: You have the right to request confirmation as to whether we process your personal data and to request a copy of the personal data we hold about you.
Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to erasure: You may have the right to request deletion of your personal data where there is no good reason for us to continue processing it, for example where it is no longer necessary for the purposes for which it was collected.
Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while we verify its accuracy or consider an objection you have raised.
Right to object: You have the right to object to our processing of your personal data where we rely on legitimate interests as the lawful basis, including for direct marketing. We will stop such processing unless we have compelling legitimate grounds to continue or where it is required for legal claims.
Right to data portability: In some cases, you may request that we provide you or a third party with the personal data you have given us in a structured, commonly used and machine-readable format, where the processing is based on consent or contract and carried out by automated means.
If you wish to exercise any of these rights, please contact us using the contact details provided in this policy. We may need to verify your identity before responding to your request. There is usually no fee for exercising your rights, unless your request is unfounded or excessive.
Marketing Communications
We may from time to time send you information about our services that we believe may be of interest to you, where we are permitted to do so. You can ask us to stop sending marketing messages at any time by following any opt-out instructions included in the communication or by contacting us. Even if you opt out of marketing, we may still need to send you service-related communications such as booking confirmations or important information about services you have requested.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or services. Any changes will take effect when the updated policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
How to Contact Us and Complain
If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise your data protection rights, you can contact Carpet Cleaning Croydon using the standard contact channels published for our business.
You also have the right to lodge a complaint with the UK Information Commissioner's Office if you are concerned about the way we process your personal data. We would, however, appreciate the opportunity to address your concerns directly before you approach the supervisory authority.