Privacy Policy - Carpetcleaning W1S

Carpetcleaning W1S is committed to protecting the privacy and personal data of all customers in the W1S area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when providing our carpet cleaning and related services. It applies to all Carpetcleaning W1S customers in the area, including individuals who enquire about our services, receive quotations, book appointments, or otherwise interact with us.

We process personal data in accordance with the UK GDPR and the Data Protection Act 2018. This policy is intended to help you understand what data we hold, why we hold it, and what rights you have over it.

1. Information We Collect

We collect only the personal data necessary to provide our services effectively, manage customer relationships, and meet legal and business obligations. The information we may collect includes:

Identity information such as your name and, where relevant, business name.
Contact information such as address, email address, and telephone number.
Service details such as the type of cleaning requested, property access notes, preferred dates, and special instructions.
Billing and payment records such as payment status, invoices, and transaction references.
Communication records such as emails, messages, and notes from phone calls or service interactions.
Technical information if you visit any digital platform linked to our services, including device and usage data collected through standard analytics tools, where applicable.

We do not seek to collect unnecessary or excessive personal information. Where we need to collect data for a specific purpose, we will aim to make that purpose clear at the point of collection.

2. How We Use Personal Data

We use personal data only for legitimate business purposes connected with our services. These include:

responding to enquiries and providing quotations;
booking, managing, and delivering carpet cleaning services;
processing payments and maintaining financial records;
communicating with you about appointments, service updates, or follow-up matters;
handling complaints, feedback, or service-related disputes;
maintaining internal records and improving service quality;
complying with legal and regulatory obligations;
preventing fraud, misuse, or unlawful activity.

We may also use data in an aggregated or anonymised form for reporting, service improvement, and operational analysis. In such cases, the information will not identify you personally.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Carpetcleaning W1S relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes arranging a quotation, confirming an appointment, and delivering cleaning services.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include managing customer records, improving our services, handling routine communications, and protecting our business against fraud or misuse. We always assess these interests carefully to ensure they are proportionate.

Legal Obligation

We process certain information where required to comply with law, such as tax rules, accounting obligations, and record-keeping requirements.

Consent

In limited situations, we may rely on your consent, for example if we ever request permission to send certain optional communications. Where consent is used, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing Data with Processors and Other Third Parties

We may share personal data with trusted processors and service providers who act on our behalf. These parties may only process your data under our instructions and are required to keep it secure and confidential.

Examples of processors may include:

payment processing providers;
accounting and bookkeeping services;
IT, cloud storage, and software providers;
administrative support services;
customer communication and scheduling tools;
professional advisers, such as accountants or legal advisers, where necessary.

We may also disclose personal data where required by law, court order, or a lawful request from a public authority. If a business transfer, restructuring, or similar event occurs, data may be transferred to a relevant successor or partner subject to appropriate safeguards.

We do not sell your personal data. Any sharing is limited to what is necessary, proportionate, and supported by appropriate contractual and security protections.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. Retention periods depend on the type of information and the reason for processing.

Customer and service records are generally retained for the duration of the service relationship and for a reasonable period afterwards to manage queries, complaints, or follow-up issues.
Financial and invoicing records are retained in line with tax, accounting, and legal obligations.
Communication records may be retained for as long as needed to document service history and resolve disputes.
Technical data is retained only for the period necessary for operational, security, or analytical purposes.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices. We do not keep data indefinitely unless there is a valid legal or operational reason to do so.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures are designed to reflect the nature of the data we process and the risks involved.

Security measures may include access controls, secure storage, staff confidentiality obligations, password protection, regular system updates, and limitation of access to individuals who need the data for their work. While no system can be guaranteed completely secure, we work to maintain a high standard of protection.

7. International Transfers

Where any processor or service used by us stores or accesses data outside the UK, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent protections required by law. We only permit such transfers where we are satisfied that your personal data will remain protected.

8. Your Rights

As a data subject under the UK GDPR, you have rights relating to your personal data. Subject to legal limitations, these may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to request that we limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing where applicable.
Right to data portability – to receive certain data in a structured, commonly used format where legally applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable data protection laws. In some cases, we may need to verify your identity before acting on your request.

9. Marketing Preferences

If we ever send marketing communications, we will do so only where permitted by law. You may object to direct marketing at any time. Where marketing is based on consent, you can withdraw that consent whenever you choose. We will respect your preferences and ensure that unsubscribed or opted-out details are not used for that purpose.

10. Children’s Data

Our services are intended for adults, property owners, tenants, landlords, businesses, and authorised representatives. We do not knowingly collect personal data from children for marketing or service purposes. If we become aware that we have received information from a child without appropriate authority, we will take reasonable steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our internal practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

12. Summary of Our Commitment

At Carpetcleaning W1S, we value trust, transparency, and accountability. We process personal information fairly, lawfully, and securely; we limit processing to what is necessary; and we safeguard your rights at every stage. This policy applies to all Carpetcleaning W1S customers in area, and it reflects our commitment to responsible data handling in every service we provide.

By using our services, you acknowledge that you have read this Privacy Policy and understand how your personal data may be used in connection with Carpetcleaning W1S.