Privacy Policy - Carpetcleaning Queenspark

This Privacy Policy explains how Carpetcleaning Queenspark collects, uses, stores, shares, and protects personal data in connection with our carpet cleaning services. It applies to all Carpetcleaning Queenspark customers in the area, including prospective customers, active customers, and individuals who contact us about our services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning Queenspark provides professional carpet cleaning services for homes and businesses in the area. For the purposes of data protection law, we act as the data controller for the personal data we collect and use in the course of providing our services, unless otherwise stated. This means we determine the purposes and means of processing your personal data.

2. Information We Collect

We collect only the personal data that is necessary to provide our services, manage customer relationships, and meet our legal obligations. The types of information we may collect include:

Identity details such as your name and title.
Contact details such as address, email address, and telephone number.
Service information such as the type of cleaning requested, property details relevant to the job, appointment preferences, and service history.
Payment information such as billing records and transaction details, where applicable.
Communications such as messages, feedback, complaints, and notes from customer support interactions.
Technical and usage data if you interact with our online systems, which may include device identifiers, browser type, and basic log data.

We do not intentionally collect special category data unless it is necessary and lawful to do so. If such information is provided to us, for example in connection with access needs or health-related cleaning requirements, we will process it only where appropriate legal safeguards are in place.

3. How We Use Your Data

We use personal data for the following purposes:

To provide quotes and confirm bookings.
To deliver carpet cleaning services at the requested location.
To manage customer accounts and service records.
To process payments and issue invoices or receipts.
To communicate about appointments, service updates, and customer support.
To handle complaints, queries, and aftercare.
To maintain records for legal, accounting, and audit purposes.
To improve our services, customer experience, and operational efficiency.
To comply with legal and regulatory obligations.

We will not use your personal data for purposes that are incompatible with the reasons for which it was collected, unless we have a lawful basis to do so.

4. Lawful Basis for Processing

Under data protection law, we must have a valid lawful basis to process your personal data. Carpetcleaning Queenspark relies on the following lawful bases where appropriate:

Performance of a Contract

We process personal data when it is necessary to provide a quote, arrange an appointment, carry out cleaning services, take payment, or manage customer service in connection with a contract or potential contract.

Legitimate Interests

We may process personal data where it is in our legitimate interests to do so and those interests are not overridden by your rights and freedoms. This may include service improvement, record keeping, fraud prevention, customer communication, and maintaining business operations. Where we rely on this basis, we ensure the processing is proportionate and relevant.

Legal Obligation

We may process and retain personal data where required to comply with legal obligations, such as tax, accounting, health and safety, or regulatory requirements.

Consent

In limited cases, we may rely on your consent, for example for certain marketing communications or for specific optional processing activities. Where consent is used, you may withdraw it at any time.

5. Data Sharing and Processors

We may share personal data with trusted third parties when necessary to operate our business and provide our services. These parties act as processors or independent controllers depending on the situation.

Examples of processors may include:

Payment providers that process customer transactions securely.
Booking and scheduling systems used to manage appointments.
IT and cloud service providers that host our data or support our systems.
Communication service providers that help send messages or service notifications.
Accountants or bookkeeping services that assist with financial records and compliance.

We require processors to handle personal data only on our instructions, to keep it secure, and to comply with data protection laws. We do not sell personal data. We may also disclose data where necessary to law enforcement, courts, regulators, insurers, or professional advisers, but only when legally permitted or required.

6. International Transfers

If any of our service providers store or process data outside the United Kingdom or European Economic Area, we will ensure that suitable safeguards are in place to protect your personal data. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms.

7. Data Retention

We keep personal data only for as long as it is reasonably necessary for the purposes for which it was collected, and in line with legal, accounting, and operational requirements. Retention periods may vary depending on the type of data and the reason it was collected.

Customer service and booking records are generally retained for the duration of the customer relationship and for a reasonable period afterwards.
Financial and tax-related records are retained for the period required by applicable law.
Communication records may be retained for a limited time to resolve disputes or maintain service history.
Data no longer required is securely deleted, anonymised, or otherwise disposed of.

We review retention periodically to ensure that information is not kept longer than necessary. We apply retention controls to reduce risk and maintain data minimisation.

8. Security of Your Data

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. Such measures may include access controls, secure storage, staff confidentiality obligations, and regular review of data handling practices. While no system can be guaranteed completely secure, we work to maintain a level of security appropriate to the nature of the data we process.

9. Your Rights

Depending on your location and the applicable law, you may have the following rights in relation to your personal data:

Right of access — to request a copy of the personal data we hold about you.
Right to rectification — to ask us to correct inaccurate or incomplete data.
Right to erasure — to request deletion of your data in certain circumstances.
Right to restrict processing — to ask us to limit how we use your data in specific situations.
Right to data portability — to receive certain data in a structured, commonly used format where applicable.
Right to object — to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, you should make a clear request and provide enough information to verify your identity and locate the relevant data. We may need to retain certain information where required by law or where we have compelling legitimate grounds.

10. Marketing Communications

If we send marketing communications, we will only do so where permitted by law. You may opt out of marketing at any time. Even if you opt out, we may still send important service or transactional messages related to your bookings, invoices, or legal notices.

11. Children’s Data

Our services are not intended for children, and we do not knowingly collect personal data from children except where it is incidental to the provision of services to an adult customer or where required for safety or access purposes. If we become aware that we have collected data from a child without appropriate authority, we will take steps to delete it or otherwise process it lawfully.

12. Cookies and Similar Technologies

If we use a website or digital booking tools, cookies or similar technologies may be used to support functionality, improve performance, and measure basic usage. Where required, we will provide appropriate information and obtain consent before placing non-essential cookies. You may manage cookie settings through your browser or device preferences.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data processing practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

14. How We Comply

Carpetcleaning Queenspark is committed to accountability, transparency, and data minimisation. We aim to collect only what we need, use it fairly, keep it accurate, store it securely, and delete it when no longer required. We also expect any processors or partners acting on our behalf to uphold the same standards.

By using our services, you acknowledge that your personal data may be processed as described in this Privacy Policy. If any part of this policy is found to conflict with applicable law, the legal requirements will take priority, and the remainder of the policy will continue to apply.