Carpet Cleaners Elephant and Castle Privacy Policy

This Privacy Policy explains how Carpet Cleaners Elephant and Castle collects, uses, stores and protects personal data relating to our customers and prospective customers in the Elephant and Castle area. It is intended to be compliant with the UK General Data Protection Regulation and the Data Protection Act 2018.

This Privacy Policy applies to all Carpet Cleaners Elephant and Castle customers and service users within the Elephant and Castle area, including people who make enquiries about our services, book appointments, receive cleaning services, or otherwise interact with us in relation to our carpet cleaning activities.

1. Data Controller

For the purposes of data protection law, Carpet Cleaners Elephant and Castle is the data controller in relation to the personal data described in this Privacy Policy. As the data controller, we determine the purposes and means of processing your personal data in connection with our services.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary to provide and manage our carpet cleaning services. The categories of personal data we may collect include:

Identity and contact information, such as your name, address, property access details, and basic contact information you choose to share so that we can respond to your enquiries and manage bookings.

Service and booking information, such as details of the services you request, dates and times of appointments, property type and size, and notes about any specific instructions or requirements relating to the cleaning work.

Payment and transaction information, which may include information about the payment method you use and records of the amounts you pay for our services. We do not store full card details where payments are processed through third party payment providers.

Communication records, such as information contained in your messages to us, feedback, complaints, or other correspondence, including any information you choose to provide when you contact us.

Technical and usage information, where relevant, such as basic information about how you interact with our online presence. This may include date and time of contact or form submissions. We aim to keep such data collection to the minimum necessary for service provision and security.

3. How We Collect Your Data

We may collect personal data directly from you when you contact us to request information or a quotation, make a booking or place an order, communicate with us by phone, in writing or online, or provide feedback or a complaint.

We may also obtain limited personal data from third party service providers where it is necessary to confirm bookings, process payments, or support our administrative processes. This may include basic verification or transactional information.

4. Lawful Bases for Processing

We process your personal data only where a lawful basis applies. Depending on the specific activity, we may rely on the following lawful bases:

Contract: We process personal data that is necessary to enter into or perform a contract with you, including responding to enquiries, providing quotations, carrying out carpet cleaning services, managing appointments, and handling payments.

Legal obligation: We may process certain personal data to comply with our legal obligations, for example record keeping, tax, accounting, or responding to lawful requests from public authorities.

Legitimate interests: We may process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This includes activities such as managing our business operations, maintaining service quality, preventing fraud, and improving customer experience.

Consent: In limited cases, we may rely on your consent, for example where we wish to send you certain types of optional marketing or promotional communication. Where consent is the lawful basis, you have the right to withdraw it at any time.

5. How We Use Your Personal Data

We use your personal data for the following purposes:

To respond to your enquiries, provide quotations, and supply information about our carpet cleaning services in the Elephant and Castle area.

To set up, confirm, and manage bookings and appointments, including sending necessary communications about your service.

To provide and deliver the carpet cleaning services you have requested, including working at your property and following your specific instructions.

To process payments, issue invoices or receipts, and maintain accurate financial records.

To manage customer relationships, handle feedback and complaints, and provide aftercare or follow up where needed.

To manage our internal business operations, including administration, accounting, and quality control.

To comply with legal or regulatory obligations and to cooperate with lawful requests from authorities if required.

6. Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected, and in line with applicable legal and regulatory requirements.

Booking, service, and contact records are generally kept for a period that allows us to manage ongoing customer relationships, respond to queries, and maintain accurate financial and tax records. After the relevant retention period has expired, we will either securely delete or anonymise your personal data.

Where we rely on consent to process your personal data, such as for certain optional marketing communications, we will continue processing until you withdraw your consent or until we determine that the information is no longer needed for that purpose.

7. Data Sharing and Processors

We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors may include payment processing providers, accounting or bookkeeping service providers, information technology or system support providers, and other administrative service providers.

Where we use data processors, they are only permitted to process personal data in accordance with our written instructions, for the purposes we specify, and they are required to maintain appropriate technical and organisational measures to protect your data.

We may also share personal data where required by law, where it is necessary to protect our rights or the rights of others, or where it is needed for the establishment, exercise, or defence of legal claims.

We do not sell or rent your personal data to third parties.

8. International Transfers

Where any of our service providers or processors are located outside the United Kingdom, we will take appropriate steps to ensure that your personal data is protected in accordance with data protection laws. This may include using contracts approved for use in the UK or ensuring that the destination country has been recognised as providing an adequate level of data protection.

9. Data Security

We take reasonable and appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction, or damage. These measures include limiting access to personal data to personnel and providers who need it for their role, using secure methods to store and transmit data where possible, and regularly reviewing our procedures to maintain data security.

10. Your Data Protection Rights

As an individual within the scope of the UK GDPR, you have a number of rights in relation to your personal data. These include:

Right of access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, along with certain other information.

Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where the data is no longer necessary for the purposes for which it was collected.

Right to restriction of processing: You may request that we restrict the processing of your personal data in certain situations, such as while we are verifying its accuracy or considering an objection you have raised.

Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as the lawful basis, including any direct marketing based on those interests.

Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to have it transmitted to another controller where technically feasible.

Right to withdraw consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your data protection rights have been infringed.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or services. Any updated version will apply to all Carpet Cleaners Elephant and Castle customers and service users in the Elephant and Castle area from the date it is published.

We encourage you to review this Privacy Policy periodically so that you remain informed about how we collect, use and protect your personal data.