Privacy Policy - Carpet Cleaners Harrow

This Privacy Policy explains how Carpet Cleaners Harrow collects, uses, stores, shares, and protects personal data in connection with its cleaning services. It applies to all Carpet Cleaners Harrow customers in the area, including people who enquire about our services, receive a quote, make a booking, or use any of our cleaning services. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We respect your privacy and aim to process only the information that is necessary to provide and improve our services, manage customer relationships, and meet legal obligations. This policy should be read carefully so you understand what data we collect, why we collect it, how long we keep it, and what rights you have in relation to your information.

1. Data We Collect

We may collect and process different types of personal data depending on how you interact with us. The information we hold may include:

Identity details such as your name and title.
Contact information such as your address, email address, and telephone number.
Service details such as your booking history, requested cleaning services, property access notes, and service preferences.
Billing and payment information such as invoice details and transaction records.
Communication records such as emails, call notes, messages, complaint records, and customer feedback.
Technical data such as basic website or device information if you submit an enquiry through a digital form, where applicable.
Special category data only where strictly necessary and where you voluntarily provide it, for example information about allergies or sensitivities relevant to cleaning products.

We generally do not ask for more information than is needed to arrange and carry out our services. If you choose not to provide certain data, we may not be able to complete your booking or respond properly to your request.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotations and respond to enquiries.
To manage bookings, schedule visits, and deliver cleaning services.
To communicate with you about appointments, updates, and service changes.
To issue invoices, process payments, and maintain accounts.
To handle complaints, disputes, and customer care matters.
To maintain business records and improve the quality of our services.
To comply with legal, accounting, insurance, and regulatory obligations.
To prevent fraud, misuse, or unauthorised access to our systems and records.

We will only use your personal data for the purpose for which it was collected, unless we reasonably determine that we need to use it for another compatible purpose and the law allows this.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on one or more of the following lawful bases:

Contract

We process your data where it is necessary to take steps at your request before entering into a contract or to perform a contract with you. This includes preparing quotes, making bookings, delivering cleaning services, and handling payments.

Legal Obligation

We may process data where necessary to comply with legal requirements, such as tax, accounting, record-keeping, or responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include managing our customer database, improving service quality, preventing misuse, and defending legal claims. When we rely on legitimate interests, we consider whether the processing is proportionate and whether your privacy would be impacted unfairly.

Consent

In limited situations, we may rely on your consent, especially if we process optional information that is not required to provide our services. Where consent is used, you have the right to withdraw it at any time.

4. Who We Share Data With

We may share personal data with trusted third parties who help us run our business. These parties act as processors or independent controllers depending on the service they provide. They may include:

Payment providers that process card or bank transactions.
Accounting and bookkeeping providers that support invoicing and financial records.
IT and hosting providers that maintain secure systems, software, and storage.
Customer communication tools that help us manage emails, messages, and service notifications.
Professional advisers such as lawyers, insurers, or auditors where necessary.
Public authorities where disclosure is required by law.

We only share the information needed for each specific purpose and we require appropriate safeguards to protect it. We do not sell your personal data.

5. Processors and Data Protection Measures

Where we use external service providers to process personal data on our behalf, we ensure they are bound by data processing agreements and are required to protect your information. These processors may only act on our instructions and must keep data secure and confidential.

Examples of safeguards we may apply include access controls, password protection, encryption where appropriate, staff confidentiality obligations, secure storage, and periodic review of retained data. We aim to minimise the number of people who can access personal data and limit access to those who need it to perform their role.

If any processor is located outside the UK or EEA, we will only transfer personal data where appropriate safeguards are in place, such as adequacy regulations or approved contractual protections.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, and reporting requirements. Retention periods may vary depending on the type of record and the reason for keeping it.

Customer service records are usually kept for a period needed to manage ongoing service relationships and resolve issues.
Invoice and transaction records are retained for the time required by tax and accounting laws.
Communication records may be retained while relevant to service delivery, complaints, or legal claims.
Consent-based records are retained until consent is withdrawn or the purpose no longer applies.

When data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices. In some cases, we may retain information longer if required to establish, exercise, or defend legal claims.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to legal conditions and exemptions, these may include:

The right to be informed about how your data is used.
The right of access to request a copy of the personal data we hold about you.
The right to rectification if your information is inaccurate or incomplete.
The right to erasure in certain circumstances, sometimes called the right to be forgotten.
The right to restrict processing where you want us to limit how we use your data.
The right to object to processing based on legitimate interests or direct marketing.
The right to data portability for data you have provided to us where processing is based on consent or contract and carried out by automated means.
The right to withdraw consent where consent is the legal basis for processing.

You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your data has not been handled properly. We encourage you to contact us first so we can try to resolve any concerns promptly and fairly.

8. Security of Personal Data

We take reasonable and appropriate steps to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. While no method of transmission or storage is completely secure, we use practical measures to reduce risks and maintain confidentiality. These measures are regularly reviewed and updated where necessary.

Our team is expected to handle personal data responsibly and only access records for legitimate business reasons. We also aim to maintain secure systems and limit unnecessary data collection.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or the way we process personal data. Any revised version will apply from the date it is published or otherwise communicated. We recommend that customers review this policy periodically to remain informed about how their data is handled.

10. Summary of Our Commitment

Carpet Cleaners Harrow is committed to processing personal data in a lawful, transparent, and secure manner. We collect only the information needed to provide our services, use it for clear business purposes, keep it only as long as necessary, and respect your rights under data protection law. This policy applies to all Carpet Cleaners Harrow customers in area and is designed to ensure that your personal data is treated with care and respect at every stage of our relationship.