Privacy Policy - Carpetcleaning Enfield

This Privacy Policy explains how Carpetcleaning Enfield collects, uses, stores, shares, and protects personal data in connection with the services we provide. It applies to all Carpetcleaning Enfield customers in the area, including prospective customers who enquire about our services, existing customers who receive a service, and any individual whose personal data is processed by us in the course of our business activities.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognise the importance of privacy and take appropriate measures to protect the information entrusted to us.

1. Data We Collect

We may collect and process the following categories of personal data:

• Identity data such as your name, title, and any relevant account or booking reference.
• Contact data such as your address, email address, telephone number, and service location details.
• Service data such as details of the cleaning services requested, property access requirements, preferred appointment times, and information relevant to completing the work.
• Payment data such as billing information, transaction records, and limited payment-related details necessary to process payments.
• Communication data such as messages, enquiries, complaints, feedback, and records of correspondence.
• Technical data such as limited website or device information, if you interact with digital systems used for enquiries or administration.

We do not intentionally collect special category data unless it is necessary and lawful to do so. If any such data is provided to us inadvertently, we will handle it with additional care and only retain it where there is a valid legal basis for processing.

Personal data is generally collected directly from you when you request a quote, make a booking, communicate with us, or receive our services. In some cases, data may also be provided by third parties acting on your behalf, such as a landlord, property manager, or referral partner, where appropriate and lawful.

2. How We Use Personal Data

We use personal data to operate our business and provide services effectively. This may include:

• responding to enquiries and providing quotations;
• managing bookings and service delivery;
• communicating about appointments, service updates, or changes;
• issuing invoices and processing payments;
• handling complaints, disputes, and follow-up queries;
• maintaining records for business administration and compliance;
• improving service quality, internal processes, and customer experience;
• preventing fraud, misuse, or unlawful activity;
• meeting legal, tax, accounting, and regulatory obligations.

We only collect and use data that is relevant and necessary for the purpose for which it is processed. We do not use personal data in ways that are incompatible with the original purpose of collection unless we have a lawful basis to do so.

3. Lawful Basis for Processing

We process personal data only where a lawful basis under UK GDPR applies. Depending on the situation, we rely on one or more of the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you, including providing quotes, arranging services, carrying out cleaning work, and managing related administrative tasks.

Legal Obligation

We may process personal data where required to comply with legal obligations, including accounting, tax, record-keeping, and other regulatory requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Examples include managing our operations, keeping records, improving services, and defending legal claims. We ensure that any such processing is proportionate and carefully considered.

Consent

In limited situations, we may rely on your consent, for example where it is required for a specific optional activity. If we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Where special category data is processed, we will only do so where an additional lawful condition applies, and we will take appropriate safeguards.

4. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to deliver our services or manage our business. These parties act either as processors or as independent controllers, depending on the nature of their role.

Typical processors may include:

• IT and cloud service providers used for storage, communication, or administration;
• booking or scheduling systems;
• accounting, invoicing, and payment-related service providers;
• customer support or communications platforms;
• professional advisers, such as legal or tax advisers, where necessary.

All processors are required to act only on our instructions, to process personal data securely, and to protect it in accordance with applicable data protection law. Where we share data with independent controllers, such as regulatory bodies, insurers, or law enforcement authorities, they will be responsible for their own processing.

We do not sell personal data. We will only disclose data where there is a lawful reason to do so, and we seek to minimise the amount of data shared.

5. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations.

Retention periods vary depending on the type of data and the reason for processing. For example:

• booking and service records may be retained for a reasonable period to manage customer history, disputes, and administration;
• financial and tax-related records may be retained for the period required by law;
• correspondence and complaint records may be retained for a period necessary to resolve issues and maintain business records.

When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in a safe and appropriate manner. Retention decisions are reviewed periodically to ensure we do not keep data longer than necessary.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of administrative procedures.

Although we work to protect all personal data, no system can be guaranteed to be completely secure. In the event of a personal data breach, we will assess the situation and take steps in line with applicable legal obligations.

7. Your Rights Under GDPR

You have a number of rights in relation to your personal data, subject to certain conditions and legal exemptions:

• Right of access – you may request a copy of the personal data we hold about you.
• Right to rectification – you may ask us to correct inaccurate or incomplete information.
• Right to erasure – in some circumstances, you may request deletion of your personal data.
• Right to restriction – you may ask us to restrict processing in certain situations.
• Right to object – you may object to processing based on legitimate interests or direct marketing, where applicable.
• Right to data portability – you may request that certain data be provided to you or another organisation in a structured format.
• Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the time limits set by law and may need to verify your identity before processing the request. These rights are not absolute, and some requests may be limited by legal or contractual obligations.

8. Complaints and Supervisory Authority

If you are concerned about how we handle your personal data, we encourage you to raise the matter so it can be reviewed and resolved fairly. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or service arrangements. Any revised version will apply from the date it is made available. We encourage you to review this policy periodically so that you remain informed about how your personal data is handled.

10. Scope of This Policy

This Privacy Policy applies to all Carpetcleaning Enfield customers in area and to anyone whose personal data is processed by us in connection with our services. By using our services or providing us with personal data, you acknowledge that your information will be handled in accordance with this policy and with applicable data protection law.

Carpetcleaning Enfield is committed to respecting privacy, processing data responsibly, and maintaining the trust of our customers. We will always aim to process personal data in a way that is lawful, transparent, and limited to what is necessary for the service provided.