Privacy Policy
Edgware Carpet Cleaning Privacy Policy
This Privacy Policy explains how Edgware Carpet Cleaning collects, uses, stores and protects personal data relating to customers and prospective customers in the Edgware area. It is designed to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Edgware Carpet Cleaning customers and prospective customers in our service area, including individuals, households, landlords, tenants, and business clients who contact us, request a quote, make a booking, or otherwise interact with us in connection with carpet, upholstery or related cleaning services.
Data Controller
For the purposes of data protection law, Edgware Carpet Cleaning is the data controller for the personal information described in this policy. This means we decide how and why your personal data is used and are responsible for ensuring that your data is handled in a lawful and secure manner.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us. This may include:
Identification and contact details: name, address, service address, billing address, and other contact details such as your preferred method of contact.
Booking and service information: details about the services you request, property type and size, room and carpet details, access instructions, preferred dates and times, and any relevant notes about your premises that relate to the delivery of our services.
Communication records: information you provide when you contact us by any means, including queries, complaints, feedback, and any follow up communications.
Billing and payment details: details necessary to generate quotes and invoices, payment status, and transaction references. Where payments are processed by third party providers, we do not store full payment card details but may receive confirmation of payment and associated identifiers.
Marketing preferences: information about whether and how you wish to receive marketing communications from us.
Technical and usage information: limited technical data related to how you access our online information, such as general device or browser details and pages viewed. This is used to improve our services and understand demand. We do not seek to identify you from this data unless it is necessary for security or legal reasons.
Lawful Basis for Processing
We only process your personal data where we have a lawful basis under data protection law. The main lawful bases we rely on are:
Contract: we process your personal data to enter into and fulfil our contract with you, for example to provide quotes, confirm bookings, deliver cleaning services, and handle payments.
Legal obligation: we may process personal data where necessary to comply with our legal obligations, such as maintaining accounting records, responding to lawful requests from authorities, and complying with health and safety or regulatory requirements.
Legitimate interests: we may process your data where it is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This may include managing our relationship with you, improving our services, ensuring site and system security, preventing fraud, and pursuing or defending legal claims.
Consent: in some cases we may rely on your consent, for example for certain types of direct marketing. Where we rely on consent, you can withdraw it at any time by contacting us or using any preference or unsubscribe options we may provide.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To provide quotes, respond to enquiries, and manage bookings and appointments.
To carry out carpet and related cleaning services at your premises, including contacting you about access and service details.
To issue invoices, process payments, and manage any refunds or outstanding balances.
To communicate with you about your service, including confirmation messages, updates, and follow up communications.
To handle complaints, disputes, or claims, and to maintain appropriate business and financial records.
To improve our services, including training, quality assurance, and performance monitoring.
To send you service-related or administrative information and, where permitted, marketing communications that may be of interest to you.
To comply with legal obligations and respond to lawful requests from public authorities.
Data Sharing and Processors
We do not sell your personal data. We may share your information with third parties where necessary for the purposes described in this policy and where permitted by law.
Service providers and processors: we may share your data with trusted third party processors who provide services to us, such as payment processing, accountancy, secure data storage, information technology and system support, and administrative support. These processors are only permitted to process your data on our instructions, for the purposes we specify, and must apply appropriate security measures.
Professional advisers: we may share personal data with professional advisers, such as accountants, auditors, or legal advisers, where reasonably necessary for advice, compliance, or dispute resolution.
Authorities and legal bodies: we may disclose personal data where required by law, regulation, or court order, or where necessary to protect our rights, property, or safety or that of our customers or others.
In all cases, we only share the minimum amount of personal data necessary and take steps to ensure that your data is protected in accordance with this policy and data protection law.
Data Retention
We keep your personal data only for as long as is reasonably necessary for the purposes described in this policy and to meet legal, accounting, or reporting requirements.
Booking and service records are typically kept for a period that allows us to manage ongoing relationships, handle queries and complaints, and comply with tax and accounting obligations. After this period, data is securely deleted or anonymised.
Where we rely on your consent for marketing, we retain your contact details for marketing purposes until you withdraw your consent or object to such processing, after which your data will be removed from our marketing lists while we may retain a record of your preference.
In determining the appropriate retention period, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and any applicable legal requirements.
International Transfers
We aim to keep your personal data within the United Kingdom or the European Economic Area where possible. If any of our service providers or systems involve transferring data outside these regions, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other lawful transfer mechanisms, to protect your personal data.
Data Security
We take the security of your personal data seriously. We implement technical and organisational measures designed to prevent unauthorised access, loss, misuse, alteration, or disclosure of your information. These may include restricted access controls, secure storage, and procedures for handling any suspected data breach. While we take reasonable steps to protect your information, no system is completely secure, and you should take care when sharing personal data with us and others.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to conditions and legal limitations, but we will respect them wherever they apply. Your rights include:
Right of access: you can request confirmation as to whether we hold personal data about you and request a copy of that data.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data that we hold about you.
Right to erasure: in certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purpose for which it was collected or where you withdraw consent.
Right to restriction of processing: you may ask us to restrict the processing of your personal data in specific situations, such as while we are verifying its accuracy or considering an objection.
Right to data portability: where processing is based on consent or contract and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine readable format and, where feasible, transmit it to another controller.
Right to object: you can object to our processing of your personal data where we rely on legitimate interests. You also have an absolute right to object to direct marketing at any time.
Right to withdraw consent: where we process your data on the basis of your consent, you may withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before withdrawal.
If you wish to exercise any of these rights, please contact us using the contact details provided on our website or any other communication channel we offer for this purpose. We may need to verify your identity before responding to your request and will respond within the time limits required by law.
Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us in the first instance so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom if you are not satisfied with our response.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any updates will be posted on our website and will take effect from the date of publication. We encourage you to review this policy periodically to stay informed about how we protect your personal data.
