Privacy Policy - Carpet Cleaners Ilford

This Privacy Policy explains how Carpet Cleaners Ilford collects, uses, stores, shares, and protects personal data. It applies to all Carpet Cleaners Ilford customers in the area, including individuals who request quotations, book services, receive cleaning work at their premises, or otherwise interact with our business in connection with carpet, upholstery, rug, stain removal, and related cleaning services.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to help you understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your data.

1. Personal Data We Collect

We may collect and process the following categories of personal data when you use our services or communicate with us:

Identity details such as your name, title, and any business or household name you provide.
Contact details such as telephone number, email address, and service address.
Service information including details of the cleaning work requested, preferred dates, property access notes, and records of completed jobs.
Payment-related information such as billing details and payment status. We do not intentionally store full card details unless necessary for a transaction handled by a secure payment provider.
Communication records including enquiries, complaints, feedback, and correspondence sent by phone, email, message, or other channels.
Technical data such as basic website or device information if you interact with our online content, where applicable.
Special instructions you give us about the property or cleaning service, which may include access requirements or details relevant to health and safety.

We aim to collect only the data that is necessary for the purposes described in this policy. We do not deliberately collect excessive information, and we ask customers to avoid sharing unnecessary sensitive details unless they are relevant to the service.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotations, schedule appointments, and carry out cleaning services.
To communicate with you before, during, and after a service.
To manage payments, invoices, and records of work completed.
To respond to enquiries, comments, and complaints.
To maintain service quality, record preferences, and improve customer experience.
To comply with legal, tax, accounting, insurance, and regulatory obligations.
To detect, prevent, and address fraud, misuse, or security incidents.

Where we rely on customer feedback or service history to improve our operations, we do so in a way that is proportionate and consistent with the purpose for which the data was originally collected.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. The main lawful bases we rely on are:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes arranging a quotation, booking a service, carrying out the cleaning work, confirming attendance, and processing payment.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided your interests and rights do not override those interests. Examples include managing customer records, improving our services, handling customer enquiries, maintaining business security, and keeping internal service history. We ensure these activities are reasonable, relevant, and limited to what is needed.

Legal Obligation

We process certain information to comply with legal obligations such as bookkeeping, tax reporting, dispute handling, insurance matters, and record retention obligations.

Consent

In limited circumstances, we may ask for your consent, for example where optional marketing or non-essential communication is involved. If consent is used, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors or independent controllers, only where necessary and lawful. Processors are required to handle data securely and only on our instructions. They may include:

IT and cloud service providers used for storing business records, calendars, or communications.
Accounting or invoicing providers that help manage financial records and tax-related administration.
Payment service providers that process transactions securely.
Customer management or scheduling tools used to organise bookings and service history.
Professional advisers such as insurers, legal advisers, or accountants where necessary.

We may also disclose personal data if required by law, court order, lawful request from a public authority, or to protect our rights, property, safety, or the safety of others. We do not sell personal data.

5. International Transfers

Where a processor or service provider stores or accesses data outside the UK, we take appropriate steps to ensure adequate protection. This may include using approved contractual safeguards and checking that the provider applies security controls consistent with data protection law. We only permit international transfers where suitable protections are in place.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. Retention periods may vary depending on the nature of the information and the reason for processing.

Quotation and enquiry records are typically kept for a limited period to manage follow-up, customer service, and business administration.
Service and invoice records may be kept for longer where needed for tax, accounting, and contractual purposes.
Communication records may be retained while relevant to ongoing service history, complaint handling, or dispute resolution.
Data no longer needed is securely deleted, anonymised, or archived where appropriate.

When deciding how long to retain data, we consider the nature of the data, the risk of harm from unauthorised use or disclosure, the purposes of processing, and legal obligations that may apply. In some cases, certain records may need to be retained longer to resolve disputes or comply with statutory requirements.

7. Your Rights

As a data subject, you have several rights in relation to your personal data. These rights may apply depending on the circumstances and any legal exemptions:

Right of access – you can request confirmation of whether we process your personal data and obtain a copy of it.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can request deletion of your data in certain cases, for example where it is no longer necessary for the original purpose.
Right to restriction – you can ask us to limit how we use your data in specific circumstances.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you may request certain data in a structured, commonly used, machine-readable format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We will respond within the time limits set by applicable law, usually within one month, unless the request is complex or numerous.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and regular review of our data handling practices.

Although we take reasonable steps to safeguard data, no system can be guaranteed to be completely secure. In the event of a data breach that presents a risk to your rights and freedoms, we will take appropriate action in line with legal requirements.

9. Children’s Data

Our services are directed to adults and property owners, tenants, landlords, or business representatives arranging cleaning services. We do not knowingly collect personal data from children unless it is incidentally included in service-related communication and is necessary for the provision of the service. Where this occurs, we handle the information with the same care and lawful basis described in this policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their information is processed.

11. Summary of Key Commitments

Carpet Cleaners Ilford only collects personal data that is relevant to providing cleaning services and running the business responsibly. We use data under lawful bases such as contract, legitimate interests, legal obligation, and, where needed, consent. We keep data only as long as necessary, share it only with trusted processors or where legally required, and respect your rights under data protection law. Our aim is to process all customer information in a transparent, secure, and lawful way for everyone in the Ilford area who uses our services.