Privacy Policy for Carpetcleaning Kingstonuponthames

This Privacy Policy explains how Carpetcleaning Kingstonuponthames collects, uses, stores, shares, and protects personal data. It applies to all Carpetcleaning Kingstonuponthames customers in the area, including individuals, households, landlords, tenants, and business clients who request or receive our carpet cleaning and related services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

By using our services, making an enquiry, booking an appointment, or communicating with us, you acknowledge that your personal data may be processed as described in this policy.

1. Data We Collect

We collect only the data necessary to provide our services effectively, manage customer relationships, and meet legal or regulatory obligations. The types of personal data we may collect include:

Identity details: name, title, and any relevant business or household contact information.
Contact details: telephone number, email address, and service address.
Service information: booking details, property access preferences, cleaning requirements, notes about carpet or upholstery condition, and service history.
Payment information: payment confirmation, transaction records, and billing details. We do not normally store full card details where payments are handled by secure third-party providers.
Communication records: emails, messages, call notes, complaints, reviews, and other correspondence.
Technical data: limited information such as device or browser details when you interact with digital systems, if applicable.

We may also receive personal data from third parties where necessary, for example from landlords, letting agents, or property managers arranging services on behalf of an occupant, or from payment processors confirming a transaction.

2. How We Use Personal Data

We use personal data to deliver professional cleaning services and to manage our business operations. This includes:

processing booking requests and scheduling appointments;
providing carpet cleaning, stain treatment, upholstery care, and related services;
issuing invoices, handling payments, and maintaining financial records;
communicating with customers about appointments, service updates, or queries;
responding to complaints, service issues, and refund requests;
maintaining internal records for quality assurance, training, and operational planning;
meeting legal, tax, insurance, and regulatory obligations;
protecting our business, staff, and customers from fraud or misuse.

We do not sell personal data. We only use information for the purposes stated in this policy or for purposes that are compatible with those original reasons.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. The lawful bases we rely on may include:

Performance of a Contract

We process personal data when it is necessary to provide a service you have requested, such as arranging a cleaning appointment, completing the service, or managing payment and follow-up communication.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include service quality monitoring, internal record keeping, fraud prevention, and responding to customer enquiries efficiently.

Legal Obligation

We may process and retain certain information to comply with legal requirements, including accounting, taxation, insurance, and record-keeping obligations.

Consent

Where consent is required, such as for certain optional communications or marketing activities, we will rely on your consent and you may withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties who act as data processors or, in some cases, independent controllers. These parties are used only where necessary and are required to process data securely and in line with data protection law.

Examples of processors and service providers may include:

Payment processors used to complete card or online payments securely;
Accounting or bookkeeping providers that help manage invoices and financial records;
IT and cloud storage providers that host email, booking systems, or business records;
Customer communication services used to send service updates or appointment confirmations;
Professional advisers such as insurers, legal advisers, or auditors where required.

Where a third party processes data on our behalf, we require appropriate safeguards, confidentiality obligations, and security measures. If data is shared with a separate controller, that party is responsible for its own privacy practices.

We may also disclose information if required by law, court order, or a public authority, or where necessary to protect our rights, property, staff, or customers.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, and operational requirements. Retention periods depend on the type of data and the reason it was collected.

Customer service and booking records are generally kept for a reasonable period to manage ongoing service relationships and handle queries.
Financial and transaction records are retained for the period required by tax and accounting laws.
Correspondence and complaint records may be retained for quality control, dispute resolution, and legal protection.
Marketing consent records are kept until consent is withdrawn or the information is no longer needed.

When personal data is no longer required, it is securely deleted, anonymised, or destroyed.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and careful handling of records.

Although we take reasonable steps to safeguard information, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we continuously review our practices to reduce risk.

7. Your Rights

As a data subject, you have important rights under data protection law. Subject to legal limits and verification of identity, these rights may include:

Right of access: request a copy of the personal data we hold about you;
Right to rectification: ask us to correct inaccurate or incomplete data;
Right to erasure: request deletion of your data in certain circumstances;
Right to restriction: ask us to limit how we use your data in certain situations;
Right to object: object to processing based on legitimate interests or direct marketing;
Right to data portability: request transfer of data you provided, where applicable;
Right to withdraw consent: withdraw consent where processing relies on consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your data protection rights have been violated.

8. International Transfers

If personal data is transferred outside the UK, we will ensure appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or equivalent legal protections. We only permit such transfers where permitted by law and where suitable protections exist.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. Any updates will take effect when published. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

10. Scope of This Privacy Policy

This policy applies to all Carpetcleaning Kingstonuponthames customers in area who use our services, make enquiries, provide personal data, or otherwise interact with us. It covers both residential and commercial customers and applies regardless of whether the service is a one-off appointment or an ongoing arrangement.

We are committed to keeping your data safe, using it fairly, and respecting your privacy at every stage of the service relationship. If any part of this policy is found to conflict with applicable data protection law, the legal requirements will take precedence.