Privacy Policy
Carpet Cleaning Hampstead Privacy Policy
This Privacy Policy explains how Carpet Cleaning Hampstead collects, uses, shares, and protects personal data relating to our customers and prospective customers in our service area. It also explains your rights under the UK General Data Protection Regulation and other applicable data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Carpet Cleaning Hampstead customers and service users within our operating area, including individuals who contact us to request information, obtain quotations, book services, or otherwise interact with us in connection with carpet cleaning and related services.
Data Controller
For the purposes of data protection law, Carpet Cleaning Hampstead is the data controller in relation to the personal data we process about you. This means we determine the purposes and means of processing your personal data when you use our services or interact with us.
Personal Data We Collect
We may collect and process the following categories of personal data about you, depending on how you interact with us and the services you request:
Identification and contact information, such as your name, residential or business address, and contact details such as your preferred method for us to contact you. This information is usually provided when you request a quotation, make a booking, or communicate with us.
Service and booking details, including information about the property where services are to be performed, such as type of property, access instructions, room and carpet details, and any specific cleaning requirements you describe to us.
Transaction and billing data, such as information needed to process payments for our services, details of the services purchased, price, and invoice records. We do not store full payment card details; these are processed by our chosen payment service providers.
Communication records, including copies of messages, enquiries, feedback, or complaints you send to us, as well as notes we create when communicating with you concerning bookings or service provision.
Technical and usage information, which may include basic device or browser information and general usage data generated when you visit our online pages or communicate with us electronically. This is used to ensure our services are functioning and to improve our customer experience.
How We Collect Your Data
We collect personal data directly from you when you contact us to request information, ask for a quotation, make a booking, or provide feedback. This may be done in person, by telephone, or via electronic communication channels.
We may also receive limited personal data from third parties where this is necessary to deliver our services. For example, a landlord, tenant, property manager, or another family member may provide your contact details so we can arrange cleaning at a particular address. In such cases, we rely on those parties to have obtained your permission where required by law.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis under applicable data protection law. The main lawful bases we rely on are:
Contract: We process personal data to enter into and perform our contract with you, such as arranging appointments, providing carpet cleaning services, managing billing, and responding to your requests relating to the services you have purchased.
Legitimate interests: We process data for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. These interests include managing our business operations, improving our services, handling customer queries, protecting against fraud, and maintaining accurate records.
Legal obligations: We process certain personal data to comply with legal and regulatory requirements, including obligations relating to tax, accounting, and the maintenance of business records.
Consent: In limited cases, we may rely on your consent, for example where required for certain forms of direct marketing communication. Where processing is based on consent, you have the right to withdraw your consent at any time.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To provide and manage services: This includes processing bookings, arranging appointments, delivering carpet cleaning and related services at your property, and communicating with you about the services you have requested.
To manage payments and accounts: We use your data to issue invoices, process payments, and maintain accurate internal financial and accounting records.
To respond to enquiries and support requests: We use your information to respond to your questions, complaints, feedback, and any requests to exercise your data protection rights.
To improve our services: We analyse information about our services and customer interactions to understand how we can improve the quality, efficiency, and safety of our operations.
To comply with legal requirements: We may use your data where this is necessary to comply with applicable laws, respond to lawful requests from authorities, or establish, exercise, or defend legal claims.
Data Sharing and Processors
We do not sell your personal data. However, we may share your personal data with trusted third parties who act as processors on our behalf. These third parties only process your data in accordance with our instructions and for the purposes described in this Privacy Policy.
Such processors may include providers of payment processing services that securely handle your card or bank transactions, providers of IT and hosting services who store and maintain our electronic records and communication systems, and professional service providers, such as accountants or legal advisors, where this is necessary for our business operations.
Where we engage processors, we ensure that appropriate contractual and technical safeguards are in place to protect your personal data in accordance with data protection law.
International Transfers
Where any of our service providers or their systems are located outside the United Kingdom or the European Economic Area, we take steps to ensure that your personal data receives an equivalent level of protection. This may include using standard contractual clauses or relying on adequacy decisions issued by relevant authorities.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including providing our services, complying with legal and regulatory requirements, and resolving disputes.
In practice, this means that we usually keep customer records and booking information for a period consistent with applicable limitation periods for legal claims and statutory retention rules. Financial and invoicing records are kept for the period required by tax and accounting laws. When personal data is no longer needed, we securely delete or anonymise it.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include secure systems for storing and processing data, restricting access to personal data to staff and contractors who need it for their role, and training relevant personnel on data protection responsibilities.
While we take reasonable steps to secure your data, no method of transmission or storage is completely secure. You are also responsible for taking reasonable steps to protect your own data when communicating with us.
Your Data Protection Rights
Under the UK General Data Protection Regulation and other applicable data protection laws, you have several rights in relation to your personal data. These rights may be subject to certain conditions and exemptions, but generally include:
Right of access: You have the right to request confirmation as to whether we process your personal data and to obtain a copy of the personal data we hold about you, along with certain related information.
Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data about you.
Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected.
Right to restriction of processing: You may request that we restrict the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to our use of it.
Right to data portability: Where we process your data by automated means based on your consent or a contract, you may have the right to receive the personal data you provided to us in a structured, commonly used, machine-readable format and to request that we transmit it to another controller where technically feasible.
Right to object: You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will then stop processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims.
Right to withdraw consent: Where we rely on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before it was withdrawn.
Exercising Your Rights
If you wish to exercise any of your data protection rights or have any questions about how we handle your personal data, you can contact us using the details provided on our main service information channels. To protect your privacy, we may need to verify your identity before responding to your request.
Complaints
If you are concerned about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the UK Information Commissioner's Office or with the data protection authority in your country of residence or work, where applicable.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we provide. The updated version will be made available through our usual communication channels, and the date of the latest revision will be indicated. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.