Privacy Policy - Carpetcleaning BR3

This Privacy Policy explains how Carpetcleaning BR3 collects, uses, stores, shares, and protects personal data when providing carpet cleaning services to customers in the BR3 area. It applies to all Carpetcleaning BR3 customers in the area, including individuals who request quotations, book services, communicate with us, or otherwise interact with us in connection with our services.

We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take privacy seriously and aim to process personal information fairly, lawfully, and transparently.

1. Personal Data We Collect

We only collect personal data that is necessary for operating our business, delivering our services, and meeting legal obligations. The types of information we may collect include:

Identity information: name and, where relevant, title.
Contact details: address, email address, and telephone number.
Service information: details about the property, type of carpet cleaning requested, preferred appointment times, and instructions relating to the service.
Payment information: billing details and payment records. We do not store card security codes.
Communication records: messages, notes, and correspondence relating to enquiries, quotations, complaints, or feedback.
Technical and usage data: limited data such as IP address or device information if you interact with digital systems used for bookings or communications.

We do not intentionally collect special category data unless it is provided by you and is necessary for a specific service-related reason, for example access requirements. If such data is provided, we will only process it where a lawful condition applies.

2. How We Use Personal Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to arrange and deliver carpet cleaning services;
to manage customer accounts and service records;
to process payments and issue invoices or receipts;
to communicate about appointments, changes, or service updates;
to deal with complaints, disputes, or aftercare issues;
to comply with legal, accounting, and tax obligations;
to improve our services, processes, and customer experience;
to protect our business from fraud, misuse, or unlawful activity.

We only use your personal data for the purposes for which it was collected, unless we reasonably believe that we need to use it for another compatible purpose. If we need to use it for an unrelated purpose, we will explain the legal basis and, where required, seek consent.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Carpetcleaning BR3 relies on the following lawful bases depending on the activity involved:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes handling bookings, carrying out cleaning services, and managing payments.

Legal Obligation

We process personal data where we are required to do so by law, such as for tax records, accounting requirements, or responding to lawful requests from authorities.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include maintaining service records, improving business operations, preventing fraud, and managing customer communications. When relying on legitimate interests, we consider whether the processing is proportionate and respectful of your privacy.

Consent

In some cases, we may rely on your consent, such as for optional marketing communications where required. If we rely on consent, you have the right to withdraw it at any time.

4. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods vary depending on the type of information and the reason it is held.

As a general approach:

customer service records are retained for a reasonable period after the service has ended;
financial and transaction records are retained for the period required by law;
complaint and communication records are retained long enough to resolve issues and demonstrate service history;
data held on the basis of consent is kept until consent is withdrawn or it is no longer needed.

When data is no longer required, we securely delete, anonymise, or otherwise dispose of it. We do not keep personal data indefinitely.

5. Sharing and Processors

We may share personal data with trusted third parties where necessary for service delivery, business administration, or legal compliance. These third parties act as processors or independent controllers depending on the circumstances.

Examples of processors or service providers may include:

payment processors used to handle card or electronic transactions;
accounting and bookkeeping providers who help manage financial records;
IT and cloud storage providers used to store data securely and support business systems;
customer communication tools used to send service-related messages;
professional advisers such as legal or tax advisers where necessary;
public authorities where disclosure is required by law.

We require processors to handle personal data securely and only on our instructions, with appropriate confidentiality and data protection safeguards in place. Where personal data is transferred outside the UK, we will ensure suitable protections are used in line with applicable law.

6. Data Security

We use reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures are designed to be appropriate to the nature of the data we handle and the risks involved.

While no system can be guaranteed to be completely secure, we take steps to reduce risk, including limiting access to personal data to authorised personnel only and reviewing our practices periodically. Security is an ongoing responsibility, and we work to maintain suitable safeguards.

7. Your Rights Under GDPR

If you are a customer of Carpetcleaning BR3 in the area, you have a number of rights in relation to your personal data. Subject to legal conditions and exceptions, these rights include:

Right to be informed: to know how your data is collected and used.
Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restrict processing: to ask us to limit how your data is used in certain situations.
Right to data portability: to request that data you provided to us be transferred in a structured, commonly used format where applicable.
Right to object: to object to processing based on legitimate interests or direct marketing.
Rights in relation to automated decision-making: to not be subject to decisions based solely on automated processing where this produces legal or similarly significant effects.

If you wish to exercise any of these rights, we will respond in accordance with data protection law and may need to verify your identity before taking action. In some cases, we may not be able to comply fully where legal obligations or legitimate grounds apply.

8. Marketing Communications

We only send marketing communications where permitted by law. If consent is required, we will obtain it before sending such messages. You may withdraw consent or object to marketing at any time. Marketing preferences do not affect essential service communications, such as appointment updates or billing information.

9. Children’s Data

Our services are directed to adults who arrange cleaning services for properties. We do not knowingly collect personal data from children for marketing or general service purposes. If we become aware that we have collected child-related data without a lawful basis, we will take appropriate steps to delete or protect it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. When we make changes, the updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

11. Summary of Our Commitment

Carpetcleaning BR3 is committed to treating personal data responsibly and transparently. We collect only what is necessary, use it for clear and lawful purposes, retain it for limited periods, and share it only with processors or organisations that support our services or legal duties. We also respect the rights of all Carpetcleaning BR3 customers in area and aim to make it easy for individuals to understand how their information is used.

By using our services, you acknowledge that you have read and understood this Privacy Policy.