Privacy Policy - Carpetcleaning Crystalpalace

This Privacy Policy explains how Carpetcleaning Crystalpalace collects, uses, stores, shares, and protects personal data in connection with our carpet cleaning services. It applies to all Carpetcleaning Crystalpalace customers in the area, including individuals who enquire about our services, make a booking, receive a quote, or otherwise interact with us. We are committed to handling personal information in a fair, lawful, transparent, and secure manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning Crystalpalace provides professional carpet cleaning services for domestic and commercial customers. In this Privacy Policy, “we,” “us,” and “our” refer to Carpetcleaning Crystalpalace. We act as the data controller for the personal data we collect and use in delivering our services and managing our business operations.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing customer relationships, and meeting legal obligations. The types of information we may collect include:

• Identity details such as your name.
• Contact details such as your address, email address, and telephone number.
• Service details such as property access information, cleaning preferences, carpet type, stain information, and service instructions.
• Booking and transaction information such as appointment history, payment status, invoices, and records of services provided.
• Communication records including enquiries, messages, complaints, feedback, and notes relating to customer service.
• Technical information if you contact us through digital systems, such as device details, IP address, or basic usage data where required for security and performance.

We do not intentionally collect special category data unless it is strictly necessary and you have chosen to provide it for a specific reason. If such information is ever received, we will only use it where permitted by law and with appropriate safeguards.

3. How We Collect Data

We may collect personal data in several ways:

• Directly from you when you request a quote, make a booking, or communicate with us.
• During the provision of our services, including on-site visits and follow-up arrangements.
• From payment-related records and administrative processes.
• From third parties where necessary, such as booking platforms, payment processors, or subcontracted service providers acting on our behalf.

We aim to ensure that the information we hold is accurate and up to date. If your details change, you should let us know so we can maintain correct records.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for every processing activity. We rely on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes managing bookings, delivering carpet cleaning services, processing payments, and handling service-related communications.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include maintaining service records, improving our operations, preventing fraud, and responding to enquiries or complaints. We always assess whether this basis is appropriate and proportionate.

Legal Obligation

We process certain information to comply with legal and regulatory requirements, such as tax, accounting, and record-keeping obligations.

Consent

In limited cases, we may rely on your consent, for example if you agree to receive marketing messages or provide optional information. Where consent is used, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

5. How We Use Your Data

We use personal data for the following purposes:

• To provide quotations and respond to enquiries.
• To schedule, deliver, and manage carpet cleaning services.
• To process payments and maintain financial records.
• To communicate with you about appointments, changes, or service issues.
• To handle complaints, resolve disputes, and improve customer service.
• To maintain business records and meet legal obligations.
• To protect our operations, property, staff, and customers.

We do not sell personal data. We only use your information in ways that are necessary, relevant, and consistent with the purposes explained in this policy.

6. Sharing Your Data and Processors

We may share personal data with trusted third parties where this is necessary for service delivery, legal compliance, or business operations. These third parties act as processors when they process data on our behalf and according to our instructions.

Examples of processors may include:

• Payment processors that handle card or online payment transactions.
• IT and cloud service providers that store or support secure business records.
• Booking and scheduling systems used to manage appointments.
• Administrative service providers who assist with record keeping, invoicing, or communications.

We require processors to take appropriate security measures and to process personal data only in line with our instructions and data protection law. We may also disclose information to professional advisers, insurers, regulators, law enforcement, or courts where required or permitted by law.

If personal data is transferred outside the UK, we will ensure appropriate safeguards are in place so that your information remains protected to the required legal standard.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. Retention periods may vary depending on the type of data and the reason we hold it.

In general:

• Customer and booking records are retained for the duration needed to manage the service relationship and address any disputes or follow-up matters.
• Financial and invoicing records are typically retained for the period required by tax and accounting laws.
• Correspondence and complaint records may be retained for a reasonable period to support service management and legal defence.
• Consent records may be kept to demonstrate compliance with data protection requirements.

When personal data is no longer needed, we will securely delete, anonymise, or otherwise dispose of it in a safe and lawful way.

8. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limiting access to those who need it for legitimate business purposes.

Although we take reasonable steps to safeguard information, no method of transmission or storage is completely secure. In the event of a personal data breach, we will respond in line with applicable law and notify affected individuals and regulators where legally required.

9. Your Rights

Under data protection law, you have a number of rights regarding your personal data. Subject to legal conditions and exemptions, these include:

• The right of access – to request a copy of the personal data we hold about you.
• The right to rectification – to ask us to correct inaccurate or incomplete information.
• The right to erasure – to request deletion of your data in certain circumstances.
• The right to restriction – to ask us to limit how we use your data in certain situations.
• The right to object – to object to processing based on legitimate interests or direct marketing.
• The right to data portability – to request transfer of certain data to you or another provider, where applicable.
• The right to withdraw consent – where we rely on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed. We encourage you to raise concerns with us first so we can try to resolve the issue promptly.

10. Children’s Data

Our services are intended for adult customers and business representatives. We do not knowingly collect personal data from children unless it is necessary for a specific service request and lawfully provided by an appropriate adult. If we learn that we have collected data from a child inappropriately, we will take reasonable steps to delete it.

11. Marketing Preferences

We may send service-related communications where necessary for booking administration or customer support. We will only send marketing communications where permitted by law, and in some cases only where you have given consent. You can opt out of marketing at any time, and we will respect your preferences.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service arrangements. Any updates will take effect when published in the revised version. We recommend reviewing this policy periodically so you remain informed about how we protect your data.

13. Summary of Key Principles

In summary, Carpetcleaning Crystalpalace processes personal data only when necessary, uses it fairly and lawfully, protects it with appropriate safeguards, and retains it for no longer than required. We are committed to respecting your privacy and ensuring that all Carpetcleaning Crystalpalace customers in the area can trust us to handle their information responsibly.

By using our services, making an enquiry, or booking with Carpetcleaning Crystalpalace, you acknowledge that you have read and understood this Privacy Policy.