Privacy Policy - Carpet Cleaning Crystal Palace

This Privacy Policy explains how Carpet Cleaning Crystal Palace collects, uses, stores, shares, and protects personal data when providing services to customers in the Crystal Palace area. It applies to all Carpet Cleaning Crystal Palace customers in the area, including individuals who request quotations, make bookings, receive cleaning services, or communicate with us in any way. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpet Cleaning Crystal Palace acts as a data controller for the personal data we process in connection with our carpet cleaning services. This means we decide how and why your personal data is used. We only collect the information necessary to deliver our services effectively, respond to enquiries, manage bookings, maintain service records, and meet our legal obligations.

2. Information We Collect

We may collect and process the following categories of personal data:

Identity details such as your name and title.
Contact details such as your address, email address, and telephone number.
Service details including carpet cleaning requirements, property access notes, appointment times, and service preferences.
Billing and payment information where needed to process invoices, payments, refunds, or account records.
Communication records including emails, call notes, messages, and service feedback.
Technical data such as basic website or device usage data if you interact with our online services, where applicable.
Special instructions you provide regarding stains, materials, allergies, pets, or accessibility requirements.

We do not intentionally collect special category data unless you choose to provide it and it is relevant to delivering the service safely or appropriately. If such information is provided, we will process it only when lawful and necessary.

3. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To schedule, confirm, and carry out carpet cleaning appointments.
To manage customer records and service history.
To process payments, invoices, and accounting records.
To communicate with you about your booking or service updates.
To handle complaints, queries, and aftercare requests.
To improve our services, training, and operational efficiency.
To comply with legal, tax, and regulatory requirements.

We only use your data for the purposes for which it was collected, unless we reasonably believe another compatible purpose applies and we have a lawful basis to do so.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each use of your personal data. Depending on the context, Carpet Cleaning Crystal Palace relies on one or more of the following:

a) Contract

We process your personal data when it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes arranging carpet cleaning services, confirming appointments, and completing services you have booked.

b) Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This may include managing customer relationships, improving our services, maintaining records, preventing misuse, and ensuring the efficient running of our business.

c) Legal Obligation

We may process and retain certain information to comply with legal obligations, such as accounting, tax, insurance, or record-keeping requirements.

d) Consent

In some situations, we may ask for your consent, for example where it is needed for optional communications or for processing specific information not covered by another lawful basis. Where consent is used, you may withdraw it at any time.

5. Sharing Your Information

We do not sell your personal data. However, we may share it with trusted third parties, known as processors, who help us deliver our services. These may include:

Payment processors who handle card or bank transactions securely.
Booking or administrative systems used to manage appointments and customer records.
Accounting or bookkeeping providers who assist with invoicing and financial compliance.
IT and cloud service providers who store or support our business systems.
Communication service providers who help us send service-related messages.

All processors are required to handle your data securely, act only on our instructions, and comply with GDPR standards. We may also disclose personal data where necessary to legal, tax, regulatory, or enforcement authorities, or to protect our rights, property, customers, or staff.

6. International Transfers

If any processor stores or accesses personal data outside the United Kingdom, we will ensure appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent protections required by law.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Retention periods depend on the type of information and the purpose of processing.

Quotation and enquiry data may be retained for a limited period to support follow-up communication and service administration.
Customer and booking records may be retained for the duration of the service relationship and afterwards for business, warranty, or dispute-handling purposes.
Financial records are kept for the period required by tax and accounting laws.
Complaint or claim records may be kept longer where needed to resolve issues or defend legal claims.

When data is no longer required, we will delete it securely or anonymise it so it can no longer identify you.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, encryption where appropriate, staff confidentiality obligations, and regular review of our data handling practices. While no system can be guaranteed completely secure, we take data protection seriously and aim to maintain a high standard of protection.

9. Your Rights

As a data subject under GDPR, you have a number of rights in relation to your personal data. These rights may be subject to conditions or legal exemptions, depending on the circumstances:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain cases.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law and within the required timeframes. We may need to verify your identity before acting on your request.

10. Children’s Data

Our carpet cleaning services are intended for adult customers and property occupants. We do not knowingly collect personal data from children unless it is incidentally provided by a parent, guardian, or authorised adult in connection with a service request. If we become aware that we have collected a child’s personal data without proper authorisation, we will take steps to delete it where appropriate.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service operations. Any updated version will apply from the date it is published or communicated. We encourage customers in the Crystal Palace area to review this policy periodically so they remain informed about how their data is handled.

12. Summary of Our Commitment

Carpet Cleaning Crystal Palace respects your privacy and is committed to protecting the personal information you share with us. We process data lawfully, keep it only for as long as necessary, use reliable processors under clear safeguards, and support your rights under GDPR. By using our services, you can expect your information to be handled with care, transparency, and professionalism.