Privacy Policy - Carpetcleaning Crystalpalace

This Privacy Policy explains how Carpetcleaning Crystalpalace collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all Carpetcleaning Crystalpalace customers in the area, including prospective customers, current customers, and anyone who enquires about our services.

1. Introduction

We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is designed to help you understand what data we process, why we process it, how long we keep it, and what rights you have in relation to your data.

By using our services, requesting a quotation, making an enquiry, or entering into an agreement with us, you acknowledge that your personal information may be processed as described in this policy.

2. Personal Data We Collect

We only collect information that is relevant and necessary for delivering our services, managing customer relationships, maintaining records, and meeting our legal obligations. The types of data we may collect include:

• Identity details such as your name or the name of your business or property manager.
• Contact details such as your address, email address, and telephone number.
• Service details including the type of cleaning requested, property access notes, appointment preferences, and relevant service instructions.
• Billing and payment information needed to process invoices, payments, refunds, or account administration.
• Communication records such as correspondence, service updates, complaints, and feedback.
• Technical and usage information if you contact us through digital channels, including basic device or browser information where relevant for security or service improvement.
• Special category data is generally not collected. If such information is voluntarily provided and is necessary for a service request or safety reason, we will process it only where lawful and appropriate safeguards are in place.

We do not seek to collect more data than is reasonably needed.

3. How We Use Personal Data

Personal data is used for legitimate service and business purposes, including:

• responding to enquiries and providing quotations;
• booking, managing, and delivering cleaning services;
• issuing invoices and processing payments;
• maintaining accurate customer records;
• handling complaints, service issues, and follow-up communications;
• meeting legal, tax, accounting, and insurance obligations;
• preventing fraud, misuse, or security incidents;
• improving our services, processes, and customer experience.

We will only use your data for the purpose for which it was collected unless we reasonably determine that another compatible purpose applies or we are required by law to do otherwise.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing personal data. Depending on the situation, we may rely on one or more of the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging services, confirming appointments, completing cleaning work, invoicing, and handling service-related communication.

Legal Obligation

We may process and retain certain information to comply with legal obligations, including accounting, taxation, insurance, and regulatory requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing customer relationships, maintaining service quality, protecting our business from fraud, and keeping operational records.

Consent

In limited situations, we may rely on your consent, particularly where it is required for certain optional communications or the processing of any non-essential information. If we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Personal Data and Processors

We may share personal data with trusted third parties where necessary to operate our business and deliver our services. These parties act as data processors or, in some cases, independent controllers. We require processors to protect data appropriately and to process it only on our instructions.

Examples of processors or service providers may include:

• Payment processors used to handle card or electronic payments securely.
• Accounting and bookkeeping providers used for financial administration and compliance.
• IT and cloud service providers used for secure storage, email, scheduling, or business administration.
• Customer management systems used to organise bookings, service notes, and communication records.
• Professional advisers such as accountants, insurers, or legal advisers where necessary.
• Public authorities where disclosure is required by law or necessary to defend legal claims.

We do not sell your personal data. Where data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect your information.

6. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, including to satisfy legal, accounting, insurance, and reporting obligations. Retention periods may vary depending on the type of data and the purpose for which it is held.

In general:

• customer service and booking records may be kept for the duration of the customer relationship and for a reasonable period afterwards;
• invoice, payment, and tax records are typically retained for the period required by law;
• complaints, incident records, or dispute-related data may be retained longer if needed to establish, exercise, or defend legal claims;
• where data is no longer required, it will be securely deleted, anonymised, or destroyed.

We review retention needs regularly to ensure data is not kept longer than necessary.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, disclosure, alteration, or destruction. These measures may include access controls, secure storage, limited staff access, password protection, and procedures for managing data securely.

While we work to protect your information, no method of transmission or storage is completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will take appropriate action in line with legal requirements.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the legal basis for processing:

• Right of access – you can request a copy of the personal data we hold about you.
• Right to rectification – you can ask us to correct inaccurate or incomplete information.
• Right to erasure – in certain circumstances, you can ask us to delete your personal data.
• Right to restriction – you can request that we limit how your data is used in certain situations.
• Right to object – you can object to processing based on legitimate interests in some cases.
• Right to data portability – you may request a copy of data you provided to us in a structured format, where applicable.
• Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully.

9. Children’s Data

Our services are directed to adults and businesses. We do not knowingly collect personal data from children unless it is incidentally provided in connection with a property or service request and is necessary for legitimate operational reasons. If we become aware that we have collected data that is not appropriate to retain, we will delete it where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our business practices, or the services we provide. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how their information is handled.

11. Summary of Our Commitment

At Carpetcleaning Crystalpalace, we process personal data responsibly, securely, and only when we have a valid reason to do so. We aim to keep information accurate, relevant, and protected, while giving customers clear choices and control where the law provides it. Our approach is based on transparency, compliance, and respect for the privacy of every customer in the area.

This policy applies to all Carpetcleaning Crystalpalace customers in area.