Privacy Policy - Colindale Carpet Cleaners

This Privacy Policy explains how Colindale Carpet Cleaners collects, uses, shares, stores, and protects personal data relating to our customers, prospective customers, and other individuals who use our services. It applies to all Colindale Carpet Cleaners customers in the Colindale area, as well as anyone who contacts us, requests a quotation, books a service, or otherwise interacts with us in connection with our carpet cleaning and related services.

We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We respect your privacy and are dedicated to protecting the information you provide to us.

1. Information We Collect

We only collect personal data that is necessary for providing our services, managing our relationship with you, meeting legal obligations, and improving our operations. The types of information we may collect include:

Identity details such as your name and, where relevant, the name of your business or property manager.
Contact details such as your address, email address, and telephone number.
Service information such as details of the cleaning services requested, property access instructions, preferred booking times, and service history.
Payment information such as billing details and payment records. We do not store full card details unless this is handled securely by a payment provider.
Communication records including emails, messages, call notes, complaint records, and feedback.
Technical data if you contact us electronically, such as device information, IP address, or basic usage information where relevant to service delivery or fraud prevention.
Special category data only in exceptional circumstances, for example where it is voluntarily shared and necessary for health, access, or safety reasons connected to delivering the service. We do not intentionally collect special category data unless there is a clear lawful reason to do so.

We do not knowingly collect more information than we need. Where possible, we minimise the use of personal data and limit access to those who require it to perform their duties.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotations, confirm bookings, and deliver cleaning services.
To communicate with you about appointments, service updates, changes, and aftercare.
To process payments, issue invoices, and manage accounts.
To keep records of services provided and maintain customer history.
To respond to enquiries, complaints, and requests for support.
To improve our services, customer experience, and internal operations.
To meet legal, tax, accounting, insurance, and regulatory obligations.
To prevent fraud, misuse, or unauthorised access to our systems or services.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose and that such use is lawful.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing personal data. The lawful bases we rely on may include:

Performance of a Contract

We process your personal data when it is necessary to provide a quotation, arrange an appointment, carry out cleaning services, process payment, or otherwise fulfil our agreement with you.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include managing customer relationships, improving service delivery, preventing fraud, keeping secure business records, and handling routine customer communications. Where we rely on legitimate interests, we consider the impact on your privacy and take steps to minimise any risk.

Legal Obligation

We may process and retain certain data where required by law, including for accounting, tax, insurance, and record-keeping purposes.

Consent

In limited situations, we may rely on your consent, for example where you voluntarily provide information that is not required for the service or where consent is needed for a particular optional purpose. If we rely on consent, you may withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as data processors or, in some cases, independent controllers. We only share what is necessary and require appropriate safeguards.

Payment service providers who handle transactions securely.
Accounting and bookkeeping processors who assist with invoices, tax records, and financial administration.
IT and cloud service providers who support email, storage, scheduling, security, and system maintenance.
Customer communication providers who assist with sending messages or managing booking systems.
Professional advisers such as insurers, legal advisers, or auditors where needed.
Public authorities or regulators where disclosure is required by law or necessary to protect our rights.

All processors are selected carefully and are expected to process personal data only on our instructions, keep it secure, and comply with data protection requirements. We do not sell your personal data.

5. International Transfers

If any of our service providers store or process personal data outside the UK, we will ensure that appropriate safeguards are in place, such as approved contractual protections or adequacy arrangements, so that your information remains protected to a standard consistent with UK data protection law.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the purpose for which it is held.

As a general approach:

Service and booking records are usually kept for a reasonable period after the service is completed to manage follow-up, complaints, or warranty-related queries.
Financial and tax records are retained for the period required by law.
Correspondence and complaint records may be retained for a period needed to resolve disputes and maintain business records.
Marketing-related data is retained until you withdraw consent or object, where applicable.

When personal data is no longer needed, it is securely deleted, anonymised, or destroyed in a safe manner.

7. Security of Your Data

We take the protection of personal data seriously and use reasonable technical and organisational measures to reduce the risk of loss, misuse, unauthorised access, disclosure, or alteration. These measures may include access controls, secure storage, staff awareness, and limited access to personal information on a need-to-know basis.

While no system is completely secure, we work to protect your information using proportionate safeguards and regular review of our procedures.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the legal basis for processing.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in some cases, you can ask us to delete your data.
Right to restrict processing – you can ask us to limit how we use your data in certain circumstances.
Right to data portability – you may request that we provide certain data in a commonly used format.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We aim to respond within the time limits required by law. Please note that some rights may not apply in all situations, and there may be lawful reasons for us to continue processing or retaining certain data.

9. Cookies and Similar Technologies

If you interact with us online through digital services, limited technical data may be collected automatically for operational, security, or performance purposes. Such tools are used only where necessary and in a way that is consistent with applicable law. If cookies or similar technologies are used, they are limited to what is needed for the service or its administration.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our internal practices. The latest version will apply from the date it is made available. We encourage you to review it periodically so that you remain informed about how we handle your personal data.

11. Complaints and Further Information

If you have concerns about how we use your personal data, you should contact us through the usual business channels so that we can review and address the matter. You also have the right to raise a complaint with the relevant data protection authority if you are unhappy with our response or believe your rights have been infringed.

This Privacy Policy is intended to provide clear information about our data handling practices. By using our services, you acknowledge that your personal data may be processed in line with this policy and applicable law. We value your trust and will continue to handle personal data responsibly, securely, and with respect for your privacy.