Privacy Policy - Carpetcleaning Haringey

This Privacy Policy explains how Carpetcleaning Haringey collects, uses, stores, shares, and protects personal data in connection with the services we provide. It applies to all Carpetcleaning Haringey customers in the area, including individuals who enquire about our services, receive a quotation, book an appointment, or use our carpet cleaning services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We respect your privacy and aim to keep your information secure and limited to what is necessary for legitimate business purposes. This policy sets out what data we collect, why we collect it, how long we retain it, who may process it on our behalf, and the rights you have regarding your personal data.

1. Information We Collect

We may collect and process several types of personal data when you interact with Carpetcleaning Haringey. The information we collect depends on the nature of your enquiry or service request. This may include:

Identity details such as your name.
Contact details such as your email address, telephone number, and service address.
Service information such as the type of cleaning requested, property details relevant to the service, and appointment preferences.
Payment-related information where necessary for invoicing, payment processing, or accounting records.
Communication records including messages, notes from calls, complaint details, and service follow-up correspondence.
Technical data such as basic website or device information if you contact us through an online form or digital channel.

We generally do not seek to collect special category data unless it is absolutely necessary and you have provided it yourself in the context of a service request or complaint. If such data is ever processed, it will be handled with enhanced care and only where permitted by law.

2. How We Use Your Data

We use personal data only for clearly defined purposes related to our services and lawful business operations. These purposes may include:

Responding to enquiries and providing quotations.
Arranging and delivering carpet cleaning services.
Managing bookings, changes, cancellations, and service updates.
Processing payments and maintaining accounting records.
Handling customer support requests, complaints, and aftercare.
Improving the quality, efficiency, and reliability of our services.
Maintaining records for legal, tax, and insurance purposes.
Protecting our business, staff, customers, and property from misuse, fraud, or unlawful activity.

We only use your data where it is relevant and necessary for the service we provide. We do not sell your personal data.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the context, we may rely on one or more of the following lawful bases:

Contract

We process your information where it is necessary to enter into or perform a contract with you. This includes taking your booking, delivering carpet cleaning services, issuing invoices, and handling service-related communication.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include service administration, record keeping, quality assurance, fraud prevention, and business improvement.

Legal Obligation

We may process and retain certain information where required to comply with legal obligations, such as tax legislation, accounting rules, consumer law, or insurance requirements.

Consent

In limited circumstances, we may rely on your consent, for example where it is appropriate for certain optional communications or the use of specific information that you have chosen to provide. Where consent is used, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing Your Data and Processors

We may share personal data with trusted third parties who assist us in operating our business and delivering our services. These third parties act as data processors or, in some cases, independent controllers. We ensure that appropriate data protection agreements and safeguards are in place before any sharing occurs.

Processors may include:

IT and hosting providers who support our systems, storage, and communication tools.
Payment processors who handle card payments or other payment transactions.
Accounting and bookkeeping providers who assist with invoicing, tax, and financial administration.
Scheduling or booking service providers who help manage appointments and operational workflows.
Professional advisers such as legal, insurance, or compliance advisers where needed.

We may also disclose personal data where required by law, court order, or a legitimate request from a public authority. If we sell, restructure, or transfer part of our business, data may be transferred as part of that transaction, subject to legal protections.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Retention periods vary depending on the type of information and the reason it was collected.

In general:

Quotation and enquiry records may be retained for a limited period to manage follow-up and customer service.
Service and transaction records may be retained for the duration of the customer relationship and thereafter for business administration.
Invoices, receipts, and tax-related records are usually retained for the period required by law.
Complaint and dispute records may be retained longer where necessary to resolve issues or defend legal claims.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limited data sharing with processors that are bound by contractual safeguards.

Although no system can be guaranteed to be completely secure, we work to reduce risks and to respond appropriately to any suspected data incident. If a personal data breach occurs and we are legally required to do so, we will notify the relevant authorities and affected individuals.

7. Your Rights

As a data subject under UK GDPR, you have a number of rights regarding your personal data. These rights may be subject to legal exceptions and limitations. They include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit processing in specific situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to raise any concerns with us first so that we can address them promptly and fairly.

8. Children’s Data

Our services are intended for adults and household or business customers. We do not knowingly collect personal data from children in a way that would be inconsistent with applicable data protection law. If we learn that we have inadvertently collected such information, we will take appropriate steps to delete it or handle it lawfully.

9. International Transfers

Where personal data is processed by a service provider outside the United Kingdom, we will ensure that suitable safeguards are in place to protect it. Such safeguards may include adequacy regulations, contractual protections, or other legally recognised transfer mechanisms.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or the services we provide. Any updates will take effect when published in the revised policy. We encourage customers to review this policy periodically to stay informed about how we handle personal data.

11. Summary of Our Commitment

Carpetcleaning Haringey is committed to respecting the privacy of every customer in the area. We collect only the information needed to provide our services, use it for clear and lawful purposes, retain it for appropriate periods, and share it only with trusted processors or where required by law. We also work to ensure your rights are upheld and that your personal data remains secure and handled with care.

This policy applies to all Carpetcleaning Haringey customers in area.