Carpet Cleaners Crystal Palace Privacy Policy

This Privacy Policy explains how Carpet Cleaners Crystal Palace collects, uses, stores and protects personal data relating to our customers and prospective customers. It applies to all Carpet Cleaners Crystal Palace customers in our service area, including anyone who contacts us to request information, quotes or services.

We are committed to processing personal data in accordance with the UK General Data Protection Regulation GDPR and all applicable data protection laws. This Privacy Policy is intended to provide you with clear and transparent information about our data processing activities and your rights.

Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our carpet cleaning and related services. The types of personal data we may collect include:

Identification and contact details such as full name, postal address, property access details where relevant, and other basic contact information that you provide when you contact us, request a quote or make a booking.

Service-related information such as details about the property areas to be cleaned, type and condition of carpets or upholstery, preferred dates and times for appointments, and any special instructions you choose to provide.

Communication records such as information you provide when you contact us by phone, through online forms or by other means, including enquiries, complaints, feedback and any follow-up correspondence.

Payment-related information such as confirmation that payment has been made and basic transaction details. We do not store full payment card numbers or security codes when payment is processed via a secure third-party payment processor.

Technical and usage data where applicable, such as basic information generated when you visit our website, including device information, approximate location derived from your IP address, and pages visited. This information may be collected using cookies or similar technologies where permitted by law.

How We Collect Your Data

We collect personal data directly from you when you contact us to request information, obtain a quote or place a booking, when you use our website or online forms, when you communicate with us by phone or other channels, and when you provide feedback, reviews or respond to surveys that we organise.

We may also receive limited personal data indirectly if a third party makes a booking on your behalf or refers you to us, in which case we will inform you of the source of your data where required by law.

Lawful Bases for Processing

We rely on one or more of the following lawful bases under the GDPR to process your personal data:

Performance of a contract: We process your personal data where it is necessary to enter into and perform our contract with you, for example to provide carpet cleaning services, manage bookings and respond to your requests.

Legal obligations: We may process certain personal data to comply with legal and regulatory obligations, such as tax, accounting and record-keeping requirements.

Legitimate interests: We may process your personal data where it is necessary for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. These interests include managing and improving our services, handling enquiries and complaints, maintaining business records, and protecting our business from fraud or misuse.

Consent: In limited situations, such as where required for certain types of marketing communications or optional cookies, we rely on your consent. You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

How We Use Your Personal Data

We use your personal data for the following purposes:

To provide and manage our services, including handling enquiries and quotes, confirming appointments, delivering carpet cleaning and related services, and communicating with you about your bookings.

To manage our relationship with you, including collecting feedback, addressing complaints, and providing customer support.

To administer and protect our business, such as by maintaining internal records, performing data analysis and troubleshooting issues related to our services.

To comply with legal and regulatory requirements, including maintaining appropriate financial and accounting records.

To send you service-related information and, where permitted by law or with your consent, to provide you with information about similar services that may be of interest. You can opt out of marketing communications at any time.

Data Sharing and Processors

We do not sell your personal data. We may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy and in compliance with GDPR.

These third parties may include:

Service providers acting as data processors who provide services such as payment processing, IT hosting, customer management systems or communication tools. These processors are only permitted to process your data on our documented instructions and are required to keep it secure.

Professional advisers including accountants or legal professionals who provide advice and services to us and who are bound by confidentiality obligations.

Public authorities or law enforcement agencies where we are legally required to do so or where it is necessary to protect our rights, property or safety or that of our customers or others.

Where we use data processors, we have written agreements in place that require them to protect your personal data in accordance with data protection law and to process it only for specified purposes.

International Transfers

If we transfer personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place, such as using standard contractual clauses or transferring to countries recognised as providing an adequate level of data protection. We will take steps to ensure that your data remains protected and that your rights continue to be respected.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting or reporting requirements.

In general, we keep customer records and basic service information for a period aligned with applicable limitation periods and statutory retention requirements. Payment records are retained in accordance with tax and accounting laws. Communications such as enquiries and complaints may be retained for a reasonable period in order to respond to issues and improve our services.

When personal data is no longer required for the purposes for which it was collected, we will securely delete or anonymise it so that it can no longer be associated with you.

Your Data Protection Rights

You have a number of rights under data protection law in relation to your personal data. Subject to certain conditions and legal exemptions, these include:

Right of access: You have the right to request confirmation that we process your personal data and to obtain a copy of the personal data we hold about you.

Right to rectification: You have the right to request that inaccurate or incomplete personal data we hold about you is corrected.

Right to erasure: You have the right to ask us to delete your personal data in certain circumstances, for example where the data is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.

Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain situations, for example while we verify the accuracy of the data or our reasons for processing it.

Right to data portability: In certain circumstances, you have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format and to request that we transmit that data to another controller where technically feasible.

Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as our lawful basis. You also have the right to object at any time to the processing of your personal data for direct marketing.

Rights relating to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless certain conditions are met.

You may exercise your rights by contacting us using the contact details provided on our website or in our service documentation. We may need to verify your identity before responding to your request. We will respond within the timeframes required by law.

Security of Your Personal Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include limiting access to personal data to those who have a business need to know, using secure systems and processes, and training relevant staff in data protection responsibilities.

Privacy Policy Coverage and Changes

This Privacy Policy applies to all Carpet Cleaners Crystal Palace customers and potential customers within our service area, regardless of how you contact us or arrange services.

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or data protection best practices. Any changes will be effective when the revised Privacy Policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.