Privacy Policy - Carpet Cleaners Stjohnswood

This Privacy Policy explains how Carpet Cleaners Stjohnswood collects, uses, stores, and protects personal data when providing services to customers in the St John’s Wood area. It applies to all Carpet Cleaners Stjohnswood customers in the area, including residential and commercial clients, and to anyone who contacts us, requests a quotation, books a service, or otherwise engages with our cleaning services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpet Cleaners Stjohnswood is a professional carpet and upholstery cleaning service operating for customers in St John’s Wood and the surrounding area. In this policy, references to we, us, and our mean Carpet Cleaners Stjohnswood. References to you and your mean the customer, prospect, website user, or other individual whose personal data we process.

We act as a data controller when we decide how and why personal data is processed in connection with our services.

2. The Personal Data We Collect

We only collect personal data that is necessary for the purposes described in this policy. The types of information we may collect include:

Identity information, such as your name.
Contact details, such as your address, telephone number, and email address.
Service details, including the type of cleaning requested, property access notes, appointment preferences, and any instructions relevant to the service.
Billing and payment information, where needed to manage invoicing, payments, refunds, or records of transactions.
Communication records, such as emails, messages, notes from calls, complaint details, and service-related correspondence.
Technical information, if you interact with our online systems, such as IP address, browser type, device information, and basic usage data.
Security and access information, where needed to safely enter a property or confirm attendance.

We do not intentionally collect special category data unless it is provided to us by you and is genuinely necessary for the service or for legal reasons. If you choose to share such information, we will treat it with appropriate care and only use it where lawful to do so.

3. How We Use Your Data

We use personal data for the following purposes:

To provide quotations and arrange cleaning services.
To confirm bookings, attend properties, and complete services safely and efficiently.
To communicate with you about your appointment, service requirements, or any issues that arise.
To issue invoices, process payments, and maintain financial records.
To respond to enquiries, complaints, and requests.
To improve our services, customer experience, and internal operations.
To meet legal, tax, accounting, and regulatory obligations.
To protect our business, staff, and customers from fraud, misuse, or unlawful activity.

We never sell your personal data. We only share it when necessary and in accordance with this policy.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the context, Carpet Cleaners Stjohnswood relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering services, handling payments, and managing service-related communications.

Legal Obligation

We may process data where required to comply with the law, such as keeping accounting records, responding to lawful requests, or meeting tax obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include maintaining service records, improving our operations, preventing fraud, and managing customer enquiries. When we rely on legitimate interests, we ensure the processing is proportionate and respectful of your privacy.

Consent

In limited situations, we may rely on your consent, for example where consent is needed for specific optional communications or non-essential activities. Where we rely on consent, you may withdraw it at any time.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods may vary depending on the type of information and the purpose for which it is used.

Customer service and booking records are generally retained for as long as needed to manage the service relationship and handle any follow-up issues.
Financial and transaction records are retained for the period required by tax and accounting law.
Communications and complaint records may be kept for a reasonable time to manage disputes, provide evidence of service, and improve service quality.
Technical and security data is retained only for as long as needed for security, troubleshooting, or operational purposes.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

6. Processors and Third Parties

We may use trusted third-party service providers, also known as processors, to help us run our business. These processors only process personal data on our instructions and are required to protect it appropriately.

Examples of processors may include:

Accounting and bookkeeping providers.
Payment processing services.
IT support and data storage providers.
Communication and email services.
Customer record management tools.

We may also share personal data with other third parties where necessary, such as legal advisers, insurers, regulatory authorities, or law enforcement agencies, but only where required or permitted by law.

Where processors or third parties are used, we take steps to ensure suitable safeguards are in place, including contractual protections and appropriate security measures.

7. Data Security

We take reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limiting access to those who need it for their work.

However, no system is completely secure. While we work to protect your data, we cannot guarantee absolute security for information transmitted or stored electronically.

8. Your Rights

Under data protection law, you have a number of rights regarding your personal data. These rights may be exercised in certain circumstances and may be subject to legal limitations.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you may ask us to delete your data where there is a valid legal basis to do so.
Right to restrict processing – you may request that we limit how we use your data in certain circumstances.
Right to data portability – you may request certain data in a structured, commonly used format.
Right to object – you may object to processing based on legitimate interests or to direct marketing.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in line with data protection law. We may need to verify your identity before acting on your request.

9. Children’s Data

Our services are not aimed at children, and we do not knowingly collect personal data from children except where it is provided by an adult customer in connection with a service arrangement. If we become aware that we have collected data inappropriately, we will take steps to delete it where appropriate.

10. International Transfers

Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place in accordance with applicable data protection law. These safeguards may include adequacy decisions, standard contractual clauses, or equivalent protection measures.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our internal practices. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their information is used.

12. Summary of Key Principles

We collect only the personal data needed to provide and manage our services.
We use data only for legitimate, lawful, and clearly explained purposes.
We retain data only as long as necessary and then delete or anonymise it.
We use processors carefully and require them to protect your information.
We respect your privacy rights and respond to valid requests promptly.

Carpet Cleaners Stjohnswood is committed to treating customer data responsibly and transparently. This policy applies to all Carpet Cleaners Stjohnswood customers in the area and is intended to ensure that personal information is handled with care, respect, and legal compliance.