Privacy Policy - Carpet Cleaners Crystalpalace

Carpet Cleaners Crystalpalace is committed to protecting the privacy and personal data of all Carpet Cleaners Crystalpalace customers in area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Carpet Cleaners Crystalpalace customers in area, whether you contact us by phone, email, online enquiry, or through any other service-related communication.

1. Who We Are

For the purposes of data protection law, Carpet Cleaners Crystalpalace acts as the data controller for the personal information we collect in connection with our carpet cleaning services. This means we decide how and why your personal data is processed. We take this responsibility seriously and aim to handle your information fairly, lawfully, and transparently.

2. Personal Data We Collect

We only collect personal information that is necessary for providing our services, managing enquiries, and meeting legal or operational obligations. The categories of data we may collect include:

Identity details such as your name.
Contact details such as your telephone number and email address.
Address details including property address and service location.
Service information such as booking details, requested services, cleaning preferences, and job notes.
Payment information where relevant, such as transaction records and billing details. We do not store full card details unless explicitly required through a secure payment provider.
Communication records including emails, messages, complaint notes, and service follow-up correspondence.
Technical information if you interact with any digital systems we use, such as IP address, browser type, and device data, where applicable.

We do not intentionally collect special category data unless it is necessary and you provide it voluntarily, for example if you share information about allergies, sensitivities, or access needs to help us deliver services safely. Where such information is provided, we treat it with extra care and only process it where lawful and appropriate.

3. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange and deliver carpet cleaning services.
To manage appointments, scheduling, and customer records.
To process payments, refunds, and related administrative tasks.
To communicate with you about your booking or service updates.
To handle complaints, disputes, and service quality issues.
To maintain business records and comply with legal obligations.
To improve our services, processes, and customer experience.

We only use your data where we have a valid reason to do so, and we aim to ensure our use of data is limited to what is necessary. We will not use your personal data for unrelated purposes without informing you and, where required, obtaining your consent.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. Carpet Cleaners Crystalpalace relies on the following lawful bases:

Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes processing required to provide a quote, confirm a booking, carry out a carpet cleaning service, and handle payment administration.

Legal Obligation

Some data may be processed to comply with legal obligations, such as tax, accounting, consumer protection, and record-keeping requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining service records, improving operations, preventing fraud, and managing customer support. We always consider whether the processing is necessary and proportionate.

Consent

Where we rely on your consent, we will ask for it clearly and separately. You can withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties where necessary to operate our business effectively. These third parties act as processors or independent controllers depending on the service they provide. We only work with parties that can provide appropriate security and data protection safeguards.

Examples of processors may include:

Payment service providers that process transactions securely.
IT and cloud service providers that host or support our systems.
Administrative software providers used for scheduling, invoicing, or record management.
Professional advisers such as accountants or legal advisers, where necessary.
Subcontracted service providers assisting with service delivery, where applicable.

We may also share data with public authorities, regulators, or law enforcement where required by law. We do not sell your personal data to third parties.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, tax, and reporting requirements. Retention periods depend on the nature of the data and the reason we hold it.

In general, we may retain:

Customer enquiry records for a reasonable period to manage follow-up and repeat requests.
Service and booking records for the duration required to manage our relationship with you and resolve any issues.
Payment and invoicing records for the period required by tax and accounting law.
Complaint and correspondence records for as long as needed to address the matter and demonstrate appropriate handling.

When data is no longer needed, we will securely delete, anonymise, or archive it in a way that prevents unauthorized access. We review retention regularly to ensure we are not holding information for longer than necessary.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unlawful access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limited access to personal information on a need-to-know basis.

Although no system can be guaranteed 100% secure, we work to maintain a level of security that is appropriate to the risk. We also expect any processors we use to apply comparable safeguards.

8. Your Rights

As a data subject under UK GDPR, you have a number of rights regarding your personal data. These rights may be subject to legal limitations, but we will always aim to respond appropriately and within the required timeframes. Your rights include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – in some cases, you can request deletion of your data.
Right to restriction – you can ask us to limit how we use your data in certain circumstances.
Right to data portability – you may request your data in a structured, commonly used format where applicable.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing relies on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we may need to verify your identity before responding. This is to protect your information and ensure requests are handled securely. We will not charge a fee unless your request is clearly unfounded or excessive, in line with applicable law.

9. Automated Decision-Making

Carpet Cleaners Crystalpalace does not use automated decision-making or profiling in a way that produces legal or similarly significant effects for customers. If this changes in the future, we will update this policy and provide any required information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how their data is handled.

11. Summary of Our Commitment

Carpet Cleaners Crystalpalace respects your privacy and handles personal information with care, transparency, and fairness. We collect only the data needed to provide our services, use it for clear and lawful purposes, retain it for appropriate periods, and share it only with trusted processors or where the law requires it. Most importantly, we recognise and uphold your rights over your personal data.

This Privacy Policy applies to all Carpet Cleaners Crystalpalace customers in area.