Carpet Cleaning Streatham Privacy Policy
This Privacy Policy explains how Carpet Cleaning Streatham collects, uses, stores, and protects personal information relating to our customers and prospective customers in the Streatham area. It is intended to meet the requirements of the UK General Data Protection Regulation and related data protection laws.
By using our carpet cleaning and associated services, you acknowledge that you have read and understood this Privacy Policy and that it applies to the personal data we process about you.
Who this Privacy Policy applies to
This Privacy Policy applies to private individuals and business customers who request, use, or enquire about carpet cleaning or related services from Carpet Cleaning Streatham within the Streatham area. It also applies to individuals who communicate with us in relation to our services, such as by telephone, online contact forms, or written correspondence.
What personal data we collect
We only collect personal data that is relevant to providing and managing our services. Depending on your interactions with us, we may collect the following categories of data:
Identity and contact details: name, title, service address, billing address, and preferred contact method.
Communication details: information contained in enquiries, messages, or feedback you send to us, including the date, time, and content of communications.
Service details: information about the property or premises where services are provided, such as type of flooring, areas to be cleaned, access instructions, and any relevant notes you provide about the condition of the property.
Transactional and billing information: records of services requested and carried out, prices, payment status, and basic invoicing information that may be linked to you as a customer.
Technical and usage information: limited technical information that may be collected when you visit our website, such as IP address, browser type, and pages visited, where this is necessary for security and basic site operation.
We do not intentionally collect special categories of personal data, such as health, biometric, or other sensitive information, and we ask you not to provide such information unless it is strictly necessary for the safe provision of our services and you choose to share it.
How we obtain your personal data
We may obtain your personal data in the following ways:
Directly from you when you contact us to request a quote, make a booking, or ask a question about our services.
During the provision of services at your property when we take notes about the work requested or performed.
From publicly available sources where this is relevant for verifying business information, such as the name and address of a business customer.
Automatically through basic technical logs when you visit our website, sufficient to ensure the security and functioning of the website.
Lawful bases for processing your personal data
We rely on one or more of the following lawful bases under data protection law to process your personal data:
Contract: We process your personal data where it is necessary to enter into and perform a contract with you, including taking steps at your request before entering into a contract. This includes handling enquiries, providing quotes, scheduling appointments, delivering services, and processing payments.
Legitimate interests: We may process your data where it is necessary for our legitimate business interests and these interests are not overridden by your rights and freedoms. Our legitimate interests include managing our business operations, keeping appropriate records, improving our services, and protecting our business against fraud or misuse.
Legal obligations: We may process personal data to comply with legal and regulatory obligations, for example to keep records for tax and accounting purposes or to respond to lawful requests from public authorities.
Consent: In some limited cases, we may rely on your consent, such as for certain types of optional marketing communications. Where we rely on consent, you have the right to withdraw it at any time.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage carpet cleaning and related services, including booking, confirming, and carrying out appointments.
To communicate with you about your enquiries, bookings, changes to appointments, and any issues or complaints.
To prepare and send invoices, process payments received, and maintain accurate accounting records.
To maintain our customer records, understand demand for our services in the Streatham area, and plan our resources.
To respond to your feedback, questions, or concerns and to improve the quality of our services.
To protect our business, including the prevention and detection of fraud or misuse of our services, and to enforce our contractual rights.
To comply with legal and regulatory requirements and to cooperate with law enforcement or regulatory authorities where necessary.
Data sharing and processors
We may share your personal data with selected third parties who act as data processors on our behalf. These processors are only permitted to use your personal data in accordance with our instructions and for specified purposes, and they are required to implement appropriate security measures. Examples of such processors include:
IT and hosting providers that store data and support our business systems.
Payment processing and accounting service providers that assist us in managing invoices, payments, and financial records.
Customer management or booking system providers that help us manage appointments and customer communications.
We may also share personal data with:
Professional advisers, such as accountants or legal advisers, where necessary for obtaining professional services.
Law enforcement bodies, courts, or regulatory authorities, where we are required or permitted to do so by law.
We do not sell your personal data. We do not allow our processors to use your data for their own independent purposes.
Data retention
We keep personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected and to meet legal, accounting, or reporting obligations. The length of time we retain data will vary depending on the type of information and the applicable legal requirements.
In general, customer contact and service records are retained for a period that allows us to respond to queries, handle repeat bookings, and meet our tax and accounting obligations. Certain records, such as invoices and basic transaction details, may be kept for longer where required by law.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be associated with an identifiable individual.
International transfers
Where our service providers or systems involve the transfer of personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place, such as the use of standard contractual clauses or other mechanisms approved by data protection law, to protect your data.
Data security
We take reasonable and proportionate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include restricting access to personal data to individuals who need it for their role and ensuring that our processors are required to protect the data they handle.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These rights are subject to certain conditions and exemptions. They include:
Right of access: You can request confirmation as to whether we process your personal data and obtain a copy of the data we hold about you.
Right to rectification: You can request that inaccurate or incomplete personal data be corrected.
Right to erasure: In certain circumstances, you can request that your personal data be deleted, for example where it is no longer needed for the purpose for which it was collected.
Right to restriction: You can ask us to restrict the processing of your personal data in certain situations, such as while we are dealing with a request to correct inaccurate data.
Right to data portability: In some cases, you can request that we provide your personal data in a structured, commonly used, and machine-readable format, or that we transmit it directly to another controller where technically feasible.
Right to object: You can object to processing based on our legitimate interests, including certain forms of direct marketing, and we will stop processing unless we have compelling legitimate grounds to continue.
Right to withdraw consent: Where we rely on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing that took place before withdrawal.
Exercising your rights and complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you may contact us using the usual communication channels you use for our services. We may need to verify your identity before responding to a request.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your rights have been infringed. We encourage you to contact us in the first instance so that we have the opportunity to address your concerns.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updated version will apply from the date it is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data.