Carpet Cleaners Maida Vale Privacy Policy

This Privacy Policy explains how Carpet Cleaners Maida Vale collects, uses, stores and protects personal data relating to our customers and prospective customers in the Maida Vale area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy applies to all Carpet Cleaners Maida Vale customers and prospective customers located in the Maida Vale area who contact us, request a quotation, make a booking, receive our services or otherwise interact with us in relation to our carpet cleaning and related services. It also applies to individuals who act on behalf of business customers where we provide services to those businesses.

Types of Personal Data We Collect

We may collect and process the following categories of personal data when you contact us or use our services:

Identification data such as your name and, where relevant, the name of your business or organisation. Contact details such as your address, service address, billing address, and town or postcode, together with any other location details you provide for the provision of services. Communication details such as your preferred contact method and the content of any communications you send to us, including enquiries, feedback, complaints or reviews. Service and booking information such as details of the services you request, date and time of appointments, access instructions, property type, and any relevant notes about the condition of the carpets or premises that are necessary for the service. Payment and transaction data such as information about payments made for our services, the amount paid, date of payment and payment method. We do not store full card details where card payments are processed through a secure third-party provider. Technical and usage information where relevant, such as information about how you reached us online, basic device or browser information, and any data you voluntarily submit through online forms. Other information you choose to provide that is relevant to arranging or delivering our services.

Lawful Basis for Processing Personal Data

We only process your personal data when we have a lawful basis to do so. Depending on the circumstances, we may rely on the following grounds:

Contractual necessity. We process personal data to enter into and perform a contract with you. This includes taking steps at your request before a contract is made, such as providing a quotation, confirming a booking and delivering carpet cleaning services. Legal obligation. We may process personal data to comply with our legal and regulatory obligations, such as record-keeping, accounting and taxation requirements. Legitimate interests. We may process personal data where it is necessary for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. This may include managing our business operations, improving our services, responding to enquiries and protecting our rights. Consent. In limited circumstances, we may rely on your consent, for example where we send certain types of marketing communications by electronic means, where this is required by law. When we rely on consent, you are free to withdraw it at any time.

How We Use Your Personal Data

We may use the personal data we collect for the following purposes:

To provide and manage carpet cleaning and related services, including handling bookings, scheduling appointments, attending your premises and carrying out the work requested. To communicate with you regarding quotations, bookings, service updates, changes to appointments, invoicing, payments and customer support. To manage our relationship with you, including handling enquiries, feedback, reviews or complaints. To maintain accurate records of transactions, payments and service history for accounting, tax and business management purposes. To improve our services, processes and customer experience, including by reviewing patterns of enquiries or feedback. To protect our business, staff and customers, including the prevention and detection of fraud or other unlawful activity, and to exercise or defend legal claims where necessary. To comply with applicable laws and regulatory requirements.

Data Retention and Storage

We retain your personal data only for as long as is necessary for the purposes for which it was collected, and to meet any legal, accounting or reporting requirements. In general, we may retain records relating to services and transactions for a period that reflects statutory limitation periods and tax regulations. After the relevant retention period has expired, we will securely delete, anonymise or otherwise remove your personal data from our systems, unless we are required or permitted by law to retain it for longer. We take reasonable steps to store and process personal data securely and to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Data Processors and Third Parties

We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are only permitted to process personal data in accordance with our instructions and for the purposes described in this Privacy Policy. They are required to implement appropriate technical and organisational measures to protect personal data.

Examples of such processors include providers of customer management or scheduling systems used to manage bookings and customer records, payment processors who handle card or electronic payments on our behalf, information technology and cloud service providers who host or support our systems, communication service providers used to send service notifications or appointment reminders, and professional advisers such as accountants where access to limited data may be necessary for compliance and business management.

Where personal data is transferred to processors outside the United Kingdom or European Economic Area, we will take steps to ensure that appropriate safeguards are in place to protect your data in accordance with data protection law, such as using approved contractual clauses or ensuring an adequate level of protection in the destination country.

Your Data Protection Rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to certain legal conditions and exemptions. Your main rights include:

Right of access. You can request confirmation of whether we process your personal data and ask for a copy of the data we hold about you. Right to rectification. You can ask us to correct or complete any inaccurate or incomplete personal data we hold about you. Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Right to restriction of processing. You may request that we restrict the processing of your personal data in specific situations, such as where you contest the accuracy of the data or object to our use of it. Right to object. You have the right to object at any time to the processing of your personal data where we rely on legitimate interests as our lawful basis, including any related profiling. We will stop processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims. Right to data portability. Where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format, and to transmit it to another controller where technically feasible. Right to withdraw consent. Where we rely on your consent to process your personal data, you may withdraw this consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

How to Exercise Your Rights

If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the details provided on our website or other correspondence. To help us respond efficiently, please provide enough information for us to identify you and the data to which your request relates. We may need to verify your identity before fulfilling certain requests, particularly where disclosure of personal data is involved, in order to protect your privacy and security.

Complaints and Supervisory Authority

If you are concerned about how we handle your personal data, we encourage you to contact us first so that we can try to resolve your concerns. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom if you believe that your data protection rights have been infringed. Information on how to contact the supervisory authority and submit a complaint is available from official government and regulator resources.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or regulatory guidance. Any updated version will apply to all personal data from the date on which it is published. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data.