Privacy Policy - Carpet Cleaners W3

This Privacy Policy explains how Carpet Cleaners W3 collects, uses, stores, shares, and protects personal data. It applies to all Carpet Cleaners W3 customers in the area, including current, former, and prospective customers who inquire about, book, receive, or support our carpet cleaning services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpet Cleaners W3 provides professional carpet cleaning and related cleaning services. In connection with these services, we may process personal data about customers, site visitors, service recipients, and where relevant, representatives of business customers or property managers. We act as the data controller for the personal data we collect and determine the purposes and means of processing.

2. Personal Data We Collect

We collect only the personal data necessary to provide and manage our services, run our operations, and meet legal obligations. Depending on how you interact with us, this may include:

Identity data such as your name and, where appropriate, the name of a company or household representative.
Contact data such as address, email address, and telephone number.
Service data such as booking details, service preferences, property access notes, and service history.
Payment and transaction data such as payment status, billing records, and invoice information. We do not retain card security codes beyond what is necessary for payment processing.
Communication data such as messages, complaints, feedback, and customer support correspondence.
Technical data where applicable, such as device information, IP address, browser type, and usage details if you engage with our digital services.
Legal and compliance data such as records needed to fulfil regulatory, accounting, or insurance obligations.

We do not intentionally collect special category personal data unless you choose to provide it and it is necessary for a specific lawful purpose. If such information is ever required, we will handle it with heightened protection and only where permitted by law.

3. How We Use Personal Data

We use personal data to deliver our services and manage legitimate business functions. Typical uses include:

Scheduling and delivering carpet cleaning services.
Managing customer accounts, inquiries, and quotations.
Processing payments and maintaining financial records.
Communicating about appointments, service changes, and customer requests.
Handling complaints, disputes, or claims.
Improving our services, training staff, and maintaining quality standards.
Meeting legal, tax, accounting, and insurance obligations.
Preventing fraud, misuse, and security incidents.

We only use personal data for the purposes for which it was collected unless we reasonably determine that another compatible purpose applies or we have another lawful basis to do so.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process personal data. Carpet Cleaners W3 relies on the following bases depending on the context:

Performance of a Contract

We process personal data when it is necessary to enter into or perform a contract with you, including providing quotes, confirming bookings, carrying out cleaning services, and managing payments.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Examples include customer service, service improvement, internal administration, fraud prevention, and maintaining secure records.

Legal Obligation

We process data where needed to comply with legal requirements, including tax record keeping, accounting obligations, and responses to lawful requests from public authorities.

Consent

Where required by law, we may rely on your consent, for example for certain marketing or optional communications. You may withdraw consent at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These third parties act as data processors or independent controllers depending on the service they provide. We require appropriate contractual safeguards and only share data where necessary.

Processors may include:

Payment service providers that handle secure payment processing.
Accounting or bookkeeping providers that support financial administration.
IT, hosting, and cloud storage providers that support secure data storage and system operation.
Customer communication tools used to manage messages, bookings, or service updates.
Professional advisers such as insurers, auditors, or legal advisers where required.

We may also disclose personal data where necessary to comply with legal obligations, enforce agreements, protect our rights, or respond to lawful requests by authorities. We do not sell your personal data.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary based on the type of information and our obligations.

Customer and service records are generally retained for the duration of the business relationship and for a reasonable period afterwards.
Financial and transaction records are retained for the period required by tax and accounting laws.
Complaints, claims, or dispute-related records may be kept longer where needed to establish, exercise, or defend legal claims.
Marketing consent records are kept until consent is withdrawn or the data is no longer needed.

When personal data is no longer required, we will securely delete, anonymise, or archive it in line with our data retention practices.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures may include restricted access, secure storage, staff training, access controls, and supplier due diligence.

While we take reasonable steps to safeguard your data, no system can be guaranteed completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will take appropriate steps in line with legal requirements.

8. International Transfers

If any processor or service provider stores or accesses personal data outside the UK, we will ensure appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or equivalent lawful transfer mechanisms.

9. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may apply depending on the circumstances and legal conditions:

Right of access – to request a copy of your personal data.
Right to rectification – to correct inaccurate or incomplete data.
Right to erasure – to ask for deletion of your data where legally permitted.
Right to restriction – to request limited processing in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

10. Children’s Data

Our services are not directed to children, and we do not knowingly collect personal data from children except where it is necessary in a service context and authorised by an adult responsible for the arrangement. If we become aware that we have collected personal data improperly, we will take appropriate steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service arrangements. Any changes will take effect when published in the revised policy. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

12. Summary of Our Commitments

Carpet Cleaners W3 is committed to processing personal data lawfully, securely, and only when necessary. We collect limited information, use it for clear business and legal purposes, retain it only as long as required, and share it only with trusted processors or where the law requires. We also respect your rights and aim to handle all personal data with care, transparency, and accountability.

This Privacy Policy applies to all Carpet Cleaners W3 customers in area.