Privacy Policy - Carpet Cleaners Maidavale

Carpet Cleaners Maidavale is committed to protecting the privacy and personal data of all customers in the Maidavale area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when we provide cleaning services, handle enquiries, and manage customer accounts. It applies to all Carpet Cleaners Maidavale customers in the area, including residential and commercial clients, prospective customers, and individuals who communicate with us in connection with our services.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We aim to be transparent about what information we collect and why, and to ensure that your information is handled lawfully, fairly, and securely.

1. Information We Collect

We collect only the information necessary to provide and manage our services properly. Depending on how you interact with us, we may collect the following types of personal data:

Identity information such as your name and title.
Contact information such as your address, email address, and telephone number.
Service information such as property access details, cleaning preferences, appointment times, and instructions relevant to the service.
Billing and transaction details such as payment status, invoices, and records of services purchased.
Communication records including messages, enquiries, complaints, and feedback.
Technical information such as basic website or device data if you contact us online, where applicable.

We do not intentionally collect special category data unless it is necessary and you provide it voluntarily, or unless a legal or operational need makes it necessary to process such information. If we ever need to process sensitive information, we will do so only where permitted by law and with appropriate safeguards.

2. How We Use Your Data

We use personal data for purposes connected with delivering our services and managing our business. These purposes include:

responding to enquiries and providing quotations;
booking, confirming, and carrying out cleaning services;
managing customer relationships and service records;
handling payments, invoices, refunds, and account administration;
communicating about appointments, changes, or service-related issues;
recording complaints, resolving disputes, and improving service quality;
meeting legal, tax, accounting, and regulatory obligations;
protecting against fraud, misuse, or unlawful activity;
maintaining internal business records and performance reporting.

We only use your personal data for the purposes for which it was collected, unless we reasonably determine that we need to use it for a compatible purpose or another lawful reason.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal data. Depending on the situation, we rely on one or more of the following bases:

Contract

We process your data where it is necessary to enter into or perform a contract with you. This includes arranging appointments, providing cleaning services, issuing invoices, and managing service delivery.

Legal Obligation

We may process personal data to comply with legal requirements, such as keeping tax and accounting records, responding to lawful requests, or maintaining appropriate business documentation.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include managing our operations, improving services, handling customer communications, and preventing fraud or misuse. We always consider whether the processing is necessary and proportionate.

Consent

In limited situations, we may rely on your consent, for example where you choose to receive certain types of marketing communication or provide information that is not strictly necessary for service delivery. Where consent is used, you may withdraw it at any time.

4. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason it is held.

In general:

customer service and booking records are retained for a reasonable period after the service has been completed;
billing and financial records are kept for the period required by tax and accounting laws;
complaints and correspondence are retained for as long as needed to resolve matters and maintain records;
data no longer needed is securely deleted, anonymised, or archived where appropriate.

We regularly review the data we hold to ensure it is not kept longer than necessary. When retention is no longer justified, we dispose of personal data securely.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties where necessary to operate our business and provide services. These third parties act as processors or, in some cases, separate controllers. We only share the minimum information required and only where appropriate safeguards are in place.

Examples of processors may include:

payment service providers that help process transactions;
accounting or bookkeeping providers that support financial administration;
IT and cloud storage providers that host data securely;
customer management or scheduling tools used to organise service bookings;
professional advisers where necessary for legal, tax, or compliance matters.

Where processors handle personal data on our behalf, they are required to act only on our instructions, apply appropriate security measures, and comply with data protection law. We do not sell your personal data.

6. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, limiting access to authorised personnel, and careful management of records.

While no system can be guaranteed completely secure, we work to protect your data using measures appropriate to the nature of the information we process and the risks involved. We also encourage staff and any relevant partners to follow confidentiality and data protection requirements.

7. Your Rights

As a data subject under GDPR, you have a number of rights in relation to your personal data. These rights include:

The right to be informed about how your data is collected and used.
The right of access to request a copy of the personal data we hold about you.
The right to rectification to correct inaccurate or incomplete information.
The right to erasure in certain circumstances, also known as the right to be forgotten.
The right to restrict processing in certain situations where you want us to limit use of your data.
The right to data portability where applicable, allowing you to receive certain data in a structured format.
The right to object to processing based on legitimate interests or direct marketing.
Rights relating to automated decision-making, where such processing applies, although we do not generally rely on fully automated decisions that produce legal or similarly significant effects.

If you wish to exercise any of these rights, we will consider your request in line with applicable law. Some rights may be limited by legal obligations or by the need to retain certain information for legitimate business or compliance reasons.

8. Marketing and Communication Preferences

We may occasionally send service-related communications that are necessary for appointments, invoicing, or customer support. These messages are not marketing and may still be sent when required to perform our services or comply with legal obligations.

If we send marketing communications, we will do so only where permitted by law, and you may opt out at any time. You can also ask us to stop using your data for marketing purposes, and we will respect that request where applicable.

9. Data Transfers

If personal data is transferred outside the UK or the European Economic Area, we will ensure that appropriate safeguards are in place. These may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms recognised by data protection law. Our goal is to make sure your information remains protected wherever it is processed.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or the way we process personal data. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers in the Maidavale area to review this policy periodically so they remain aware of how their data is handled.

11. Our Commitment to Fair Processing

We believe privacy should be handled with care, clarity, and respect. Carpet Cleaners Maidavale will always aim to process personal data in a way that is lawful, transparent, and limited to what is necessary. We are committed to ensuring that the information entrusted to us is used responsibly and kept only for the time needed.

By using our services, making an enquiry, or otherwise interacting with us, you acknowledge that we may process your personal data as described in this Privacy Policy and in accordance with applicable data protection laws.