Privacy Policy – Carpet Cleaners SE23

Last updated: June 2026

This Privacy Policy explains how Carpet Cleaners SE23 collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all Carpet Cleaners SE23 customers in the area, including residential and commercial customers who request, receive, or enquire about our services.

We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Carpet Cleaners SE23 acts as the data controller for the personal data we collect and process in connection with our services. This means we decide how and why your personal data is used, subject to applicable legal requirements.

This policy applies where we process personal data relating to individuals who:

• request a quote or make an enquiry;
• book or receive carpet cleaning, upholstery cleaning, stain removal, or related services;
• communicate with us by phone, email, form submission, or messaging;
• are householders, tenants, landlords, property managers, or authorised representatives of a customer.

2. Personal Data We Collect

We only collect personal data that is necessary for delivering our services, managing our business, and meeting legal obligations. The types of data we may collect include:

• Identity data such as your name and, where relevant, the name of a business or property owner;
• Contact data such as phone number, email address, and service address;
• Service information such as booking details, property access notes, preferred appointment times, and service history;
• Payment-related data such as payment confirmation, invoice details, and transaction records. We do not store full card details if a third-party payment provider handles the transaction;
• Communication data such as messages, complaints, feedback, and correspondence records;
• Technical data such as basic website or device information if you interact with our online systems;
• Special category data only where strictly necessary and usually only indirectly, for example if you voluntarily provide information relating to health or access needs that affect service delivery.

We do not knowingly collect more information than we need. If you provide details that are not required, we will handle them with the same level of care and only use them where there is a lawful reason to do so.

3. How We Use Your Data

We use personal data for the following purposes:

• to provide quotations and answer enquiries;
• to manage bookings and deliver cleaning services;
• to contact you about appointment times, access, or service changes;
• to process payments, send invoices, and keep financial records;
• to handle complaints, service issues, and follow-up requests;
• to maintain internal records and service quality;
• to comply with legal, tax, accounting, and regulatory obligations;
• to prevent fraud, misuse, or unlawful activity;
• to defend or establish legal claims where necessary.

We do not sell your personal data. We also do not use your data for unrelated purposes that would be incompatible with the original reason it was collected.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the circumstances, we rely on one or more of the following:

4.1 Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes preparing quotes, confirming bookings, carrying out cleaning services, issuing invoices, and communicating about the service.

4.2 Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This can include managing customer records, improving service delivery, responding to enquiries, and protecting our business from misuse or fraud.

4.3 Legal Obligation

We may process and retain certain information to meet legal obligations, such as tax, accounting, insurance, and record-keeping requirements.

4.4 Consent

In limited cases, we may rely on your consent. If consent is used, you may withdraw it at any time. Withdrawal of consent will not affect processing that has already taken place lawfully before it was withdrawn.

4.5 Vital Interests and Public Task

These bases are unlikely to apply in most cleaning-service situations, but may be relevant in exceptional circumstances where necessary to protect someone’s vital interests or where required by law.

5. Data Sharing and Processors

We may share personal data with trusted third parties only when necessary and only under appropriate safeguards. These third parties act as processors or, in some cases, independent controllers.

Examples of processors and service providers may include:

• Payment providers that process card or online transactions;
• Accounting and bookkeeping providers that help us manage invoices and tax records;
• IT and cloud service providers that store or secure business records;
• Communication tools used to send service updates or manage customer correspondence;
• Scheduling or administration systems used for bookings and operational planning.

Where we use processors, we require them to process personal data only on our instructions, to keep it secure, and not to use it for their own purposes. We may also disclose data if required by law, court order, regulatory request, or to protect our legal rights.

Important: We do not share customer data with unauthorised parties, and we take reasonable steps to ensure that any third party handling data on our behalf meets appropriate security and confidentiality standards.

6. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods depend on the type of data and the reason for processing.

• Enquiry data may be kept for a limited period if no booking follows, to manage follow-up communications and business records;
• Customer and booking records are usually kept for the duration of the customer relationship and for a reasonable period afterwards;
• Invoices, payment records, and tax-related documents are retained for the periods required by applicable law;
• Complaint and dispute records may be kept longer if needed to resolve issues or establish legal claims.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

7. Security of Your Data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful management of third-party systems.

While no system can be guaranteed to be completely secure, we take data protection seriously and review our practices regularly to reduce risk.

8. Your Rights Under GDPR

You have a number of rights regarding your personal data. Subject to legal conditions and exceptions, these may include:

• Right of access – to request a copy of the personal data we hold about you;
• Right to rectification – to ask us to correct inaccurate or incomplete data;
• Right to erasure – to request deletion of your data in certain circumstances;
• Right to restriction – to ask us to limit how we use your data in certain situations;
• Right to object – to object to processing based on legitimate interests or direct marketing, where applicable;
• Right to data portability – to receive certain data in a structured, commonly used format where the legal conditions apply;
• Right to withdraw consent – where processing is based on consent;
• Right to complain – to raise concerns with the relevant data protection authority if you believe your rights have been infringed.

We may need to verify your identity before responding to a rights request. We aim to deal with such requests promptly and within the timeframes required by law.

9. Marketing Communications

We only send marketing communications where permitted by law. If we ever rely on consent or another lawful basis to send you promotional messages, you may opt out at any time. Service-related communications, such as booking confirmations or appointment updates, are not marketing and may still be sent when necessary to provide the service.

10. Children’s Data

Our services are aimed at adults and business customers. We do not intentionally collect personal data from children. If we become aware that we have inadvertently collected children’s data without appropriate authority, we will take steps to remove it where required.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is used.

12. Summary of Key Points

In summary: Carpet Cleaners SE23 collects only the personal data needed to provide cleaning services, manage bookings, process payments, and meet legal obligations. We rely on lawful bases such as contract, legitimate interests, legal obligation, and, in limited cases, consent. We retain data only for as long as necessary, use trusted processors under strict safeguards, and respect your GDPR rights.

This policy is intended to provide clear and transparent information to all Carpet Cleaners SE23 customers in the area.