Privacy Policy - Carpetcleaning CR0

This Privacy Policy explains how Carpetcleaning CR0 collects, uses, stores, shares, and protects personal data relating to its customers in the CR0 area. It applies to all Carpetcleaning CR0 customers in the area, including individuals who request quotes, book services, make enquiries, or otherwise interact with our business. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning CR0 provides carpet cleaning and related domestic and commercial cleaning services in the CR0 area. For the purposes of data protection law, we act as the data controller for the personal data we collect and use in connection with our services. This means we decide why and how your personal data is processed and are responsible for ensuring it is handled appropriately.

2. Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing customer relationships, and meeting legal obligations. Depending on how you interact with us, we may collect the following categories of data:

Identity data, such as your name and title.
Contact data, such as your address, email address, and telephone number.
Service data, such as property access details, cleaning preferences, appointment dates, and service history.
Payment data, such as payment status and transaction records. We do not store full card details where payment processing is handled by a third party.
Communication data, such as messages, enquiries, complaints, feedback, and records of correspondence.
Technical data, such as basic website usage data if you contact us through online forms or digital channels.
Legal and compliance data, such as records required for tax, accounting, insurance, or dispute resolution purposes.

We do not intentionally collect special category data unless it is necessary and you have provided it in a lawful manner. If such data is ever shared with us, we will handle it with extra care and only where a valid legal basis applies.

3. How We Use Your Data

We process personal data for several purposes connected with our services and operations. These include:

providing quotes and booking cleaning services;
managing appointments and service delivery;
communicating with customers about their bookings or enquiries;
handling payments, refunds, and invoices;
recording service history and customer preferences;
responding to complaints, claims, or requests;
maintaining business records for accounting and tax purposes;
improving our services and customer experience;
meeting legal, regulatory, and insurance obligations.

We process data only to the extent needed for these purposes and do not use it in ways that are incompatible with the original reason it was collected.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Carpetcleaning CR0 relies on the following lawful bases:

Contract: where processing is necessary to provide a quote, manage a booking, deliver a cleaning service, or fulfil our agreement with you.
Legitimate interests: where processing helps us run and improve our business, respond to enquiries, maintain records, prevent fraud, or protect our legal rights, provided your interests and rights do not override ours.
Legal obligation: where we are required to keep records for tax, accounting, health and safety, or other legal requirements.
Consent: where we ask for your permission for specific optional processing, such as certain forms of marketing or non-essential communications. You may withdraw consent at any time.

Where we rely on legitimate interests, we assess the impact on your privacy and ensure our interests are not unfairly prejudicial to you. Where consent is the lawful basis, we make sure it is freely given, specific, informed, and unambiguous.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties who support our business operations. These parties act as processors or independent controllers depending on the service they provide. We only share the minimum information necessary and require appropriate safeguards.

Examples of processors may include:

payment processing providers;
accounting and bookkeeping services;
IT and cloud storage providers;
customer communication platforms;
booking or scheduling systems;
professional advisers such as insurers, legal advisers, or auditors;
subcontracted service providers assisting with cleaning operations, where applicable.

Processors are only permitted to use your data according to our instructions and must keep it secure. We do not sell personal data. We may also disclose data where necessary to comply with the law, enforce agreements, respond to lawful requests, or protect our rights, property, staff, or customers.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, including legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the reason for processing.

Customer service records are retained for the duration of the customer relationship and for a reasonable period afterwards.
Financial and tax records are kept for the period required by law.
Enquiry and correspondence records may be retained for operational and evidence purposes.
Marketing preferences are kept until you withdraw consent or object.

When data is no longer needed, we take appropriate steps to delete, destroy, or anonymise it securely.

7. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and restricted sharing of information. While no system can be completely secure, we work to safeguard all data in a manner appropriate to the risk involved.

8. Your Rights

As a data subject under the UK GDPR, you have several rights regarding your personal data. These rights may apply depending on the circumstances and any legal exemptions.

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: you can request deletion of your data in certain situations.
Right to restrict processing: you can ask us to limit how we use your data in certain cases.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you can ask for your data in a structured, commonly used format where applicable.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the time limits set by law and may need to verify your identity before actioning your request.

9. International Transfers

Where any service provider stores or processes data outside the United Kingdom, we ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We only transfer data where necessary and where adequate protection can be maintained.

10. Cookies and Similar Technologies

If we use any website or digital service tools that rely on cookies or similar technologies, these may collect limited technical information to support functionality, security, and usage analysis. Where consent is required, you will be given appropriate choice and control. Non-essential cookies will not be used without a lawful basis.

11. Children’s Data

Our services are intended for adults and property owners, tenants, landlords, or authorised representatives. We do not knowingly collect personal data from children unless it is necessary in a specific service context and lawfully provided by an adult with authority to do so.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. Any updated version will continue to apply to all Carpetcleaning CR0 customers in the area. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

13. Summary of Key Principles

In handling your personal data, we aim to follow the core principles of data protection: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. We also take accountability seriously and work to ensure our practices are appropriate, proportionate, and respectful of your rights.

By using Carpetcleaning CR0 services, you acknowledge that your personal data may be processed in accordance with this Privacy Policy, subject always to your legal rights and applicable data protection law.