Privacy Policy - Carpetcleaning E2

Carpetcleaning E2 is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, share, store, and protect personal information relating to our customers and prospective customers in the E2 area. It applies to all Carpetcleaning E2 customers in area, including anyone who requests a quote, books a service, communicates with us, or receives a service from us.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We aim to handle your information fairly, transparently, and securely.

1. Personal Data We Collect

We collect only the information we need to provide our services effectively, manage customer relationships, and comply with legal obligations. The types of data we may collect include:

Identity details such as your name.
Contact details such as your email address, telephone number, and service address.
Booking and service information such as preferred appointment times, service requirements, and notes relevant to your carpet cleaning request.
Payment and transaction details such as billing records and payment confirmations.
Communications such as messages, emails, calls, and any feedback or complaints you send to us.
Technical data where relevant, such as basic website interaction data if you submit an online form.

We do not intentionally collect special category data unless it is necessary and you provide it voluntarily. If such information is ever required for a specific reason, we will explain why and ensure that an appropriate lawful basis applies.

2. How We Use Your Personal Data

We use your personal data to operate our business and deliver carpet cleaning services. This may include:

responding to enquiries and providing quotations;
arranging and managing bookings;
delivering cleaning services at your property;
processing payments and maintaining financial records;
handling customer support, complaints, and follow-up communication;
meeting legal, accounting, and insurance obligations;
improving our services and maintaining service quality;
protecting against fraud, misuse, or security incidents.

We only use personal data for purposes that are compatible with the reason it was collected, unless we have a valid legal basis to use it differently.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. The main lawful bases we rely on are:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes managing bookings, completing cleaning services, and handling payment-related administration.

Legal Obligation

We may need to process and retain data to comply with legal requirements, including tax, accounting, insurance, and record-keeping duties.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, improving service delivery, preventing fraud, and maintaining internal records.

Consent

In limited cases, we may rely on your consent, for example where you choose to receive certain optional communications. If we rely on consent, you may withdraw it at any time.

4. Sharing Your Data and Processors

We do not sell your personal data. We may share information only when necessary and appropriate. This may include trusted third-party processors who help us operate our business. These may include:

Payment service providers for secure transaction processing;
IT and cloud service providers for data storage, email, and administrative systems;
Accounting or bookkeeping processors to manage financial records;
Customer management or booking tools used to organise appointments and service records;
Professional advisers such as accountants, insurers, or legal advisers where required;
Public authorities if disclosure is required by law or necessary to protect rights, property, or safety.

Where we use processors, they are only allowed to process personal data on our instructions and must implement appropriate security measures. We take reasonable steps to ensure that any processor we use meets data protection standards.

5. International Transfers

Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful mechanisms designed to protect your information to an equivalent standard.

6. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, or as required by law. Retention periods may vary depending on the type of data and the reason for processing.

Customer and service records are typically kept for as long as needed to manage our business relationship and deal with follow-up issues.
Financial and accounting records are retained for the period required by tax and accounting laws.
Communication records may be kept for a reasonable period to resolve disputes, maintain service quality, or handle complaints.
Consent-based data is retained only until you withdraw consent or it is no longer needed.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff awareness, and limited access to information on a need-to-know basis.

While no system can be guaranteed completely secure, we take data security seriously and regularly review our procedures to reduce risk.

8. Your Rights Under GDPR

You have a number of rights in relation to your personal data. Subject to legal limits, these include:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete information.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restrict processing - to ask us to limit how we use your data in certain situations.
Right to data portability - to receive data you provided to us in a structured, commonly used format, where applicable.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.

You also have the right to raise concerns with the Information Commissioner’s Office (ICO) if you believe your data has not been handled properly.

9. Children’s Data

Our services are intended for adults arranging domestic or commercial carpet cleaning. We do not knowingly collect personal data from children unless it is necessary for service-related communication and is provided by an adult customer. If we become aware that we have collected data unlawfully, we will take appropriate steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updates will take effect when published in the revised version. We encourage customers to review this policy periodically to stay informed.

11. Summary of Our Commitment

We only collect personal data that is necessary, use it for clear and lawful purposes, keep it secure, and retain it only as long as needed. We are committed to treating your information with care and ensuring that all Carpetcleaning E2 customers in area can trust us to handle data responsibly.

This policy is intended to provide a clear and fair explanation of how we process personal data in connection with our carpet cleaning services in E2.