Privacy Policy - Carpetcleaning Harrow

This Privacy Policy explains how Carpetcleaning Harrow collects, uses, stores, shares, and protects personal data relating to all customers and prospective customers in the Harrow area. It applies to every individual who uses our carpet cleaning services, requests a quotation, makes an enquiry, books an appointment, or otherwise interacts with our business in the course of receiving services in the area. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are and Scope of This Policy

This policy applies to personal data processed by Carpetcleaning Harrow in connection with our domestic and commercial carpet cleaning services. It covers data collected from customers, potential customers, household representatives, property managers, and other individuals whose information is shared with us for service-related purposes. By using our services, you acknowledge that this policy applies to you if you are a customer or service user in the Harrow area.

2. Personal Data We Collect

We collect only the information needed to provide, manage, and improve our services. The types of data we may collect include:

• Identity information such as your name.
• Contact details such as email address, telephone number, and service address.
• Service details including booking preferences, property access notes, cleaning requirements, and requested dates or times.
• Payment and billing data such as payment status, invoice records, and transaction references.
• Communications including messages, complaints, feedback, and records of calls or correspondence related to our services.
• Technical information may include basic website or device data if you communicate with us electronically, where applicable.
• Special category data is not usually required. If you voluntarily disclose such information, we will only process it where a lawful basis permits and where it is necessary for your request or service delivery.

We aim to keep the information collected to the minimum necessary for service provision and compliance purposes.

3. How We Use Your Data

We use personal data for the following purposes:

• To respond to enquiries and provide quotations.
• To arrange, deliver, and manage carpet cleaning services.
• To confirm appointments and handle scheduling changes.
• To issue invoices, receive payments, and maintain financial records.
• To communicate service updates, reminders, or service-related notices.
• To manage complaints, disputes, and customer support requests.
• To meet legal, tax, accounting, and insurance obligations.
• To maintain internal records and improve service quality.

We do not use your personal data for purposes that are incompatible with the reasons it was collected, unless we obtain your consent or another lawful basis applies.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process your personal data. Depending on the context, Carpetcleaning Harrow relies on one or more of the following bases:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes handling bookings, carrying out cleaning services, and managing payments and service delivery.

Legal Obligation

We may process data where necessary to comply with our legal obligations, including tax, accounting, record-keeping, fraud prevention, or regulatory requirements.

Legitimate Interests

We may process data when it is in our legitimate business interests and those interests are not overridden by your rights and freedoms. This may include service administration, customer support, improving operations, maintaining security, and protecting against misuse.

Consent

In limited circumstances, we may rely on your consent, for example for certain optional communications or where you choose to provide information not otherwise required. Where consent is used, you may withdraw it at any time.

We always consider the necessity and proportionality of processing before relying on a lawful basis.

5. Sharing Personal Data and Processors

We may share personal data with trusted third parties that assist us in operating our business. These parties act as processors or independent controllers depending on the service they provide. When they act as processors, they process data only on our instructions and under contractual obligations.

Examples of processors or service providers may include:

• Payment processors for secure transaction handling.
• IT and hosting providers that support data storage, backups, and system functionality.
• Administrative service providers who help manage bookings, records, and communications.
• Accountants or professional advisers where necessary for financial, legal, or compliance purposes.
• Insurance providers in the event of a claim or incident.

We may also disclose personal data where required by law, court order, or a lawful request from public authorities. Any sharing is limited to what is necessary and appropriate.

6. International Transfers

Where a processor or service provider stores or accesses data outside the United Kingdom, we take steps to ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent protective measures. Our aim is to ensure that your personal data receives an adequate level of protection wherever it is processed.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, insurance, and reporting requirements. Retention periods depend on the nature of the data and the reason for processing.

• Customer service records are kept for a period necessary to manage the relationship and address follow-up issues.
• Financial and tax records are retained for the period required by law.
• Communication records may be kept to evidence instructions, service outcomes, or complaint handling.
• Consent-based data is kept only until consent is withdrawn or the purpose no longer exists.

When data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in accordance with our retention practices.

8. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff confidentiality requirements, and careful management of paper and digital records. While no system is completely risk-free, we review our safeguards regularly to maintain an appropriate level of security.

9. Your Rights Under GDPR

You have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:

• The right to be informed about how your data is used.
• The right of access to request a copy of the personal data we hold about you.
• The right to rectification if your information is inaccurate or incomplete.
• The right to erasure in some circumstances, also known as the right to be forgotten.
• The right to restrict processing in certain situations.
• The right to data portability where processing is based on consent or contract and carried out by automated means.
• The right to object to processing based on legitimate interests or direct marketing.
• Rights relating to automated decision-making, where such processing applies, which is generally not used by us for service decisions.

You may also withdraw consent at any time where consent is the lawful basis for processing. This will not affect the lawfulness of processing carried out before withdrawal.

10. How to Exercise Your Rights

If you wish to exercise any of your rights, we will take reasonable steps to verify your identity before responding. We aim to respond within the legal timeframe and may ask for additional information where needed to process your request properly. In some cases, rights may be limited by legal obligations or the rights of others, but we will explain any refusal or restriction clearly.

11. Complaints

If you believe your personal data has been handled improperly, you have the right to raise a complaint with the relevant supervisory authority. We encourage you to contact us first so that we can try to resolve the matter promptly and fairly. We take privacy concerns seriously and will investigate issues in accordance with our internal procedures.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any revised version will apply from the date it becomes effective. We encourage customers in the Harrow area to review this policy periodically to remain informed about how we protect personal data.

In summary: Carpetcleaning Harrow processes personal data responsibly, only for clear and lawful purposes, with appropriate safeguards, limited retention, and respect for your GDPR rights.