Carpet Cleaning EC2 Privacy Policy
This Privacy Policy explains how Carpet Cleaning EC2 collects, uses, stores, and protects personal data relating to customers and prospective customers in the EC2 area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our carpet cleaning and related services, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy applies to all Carpet Cleaning EC2 customers and prospective customers in the EC2 area, including individuals, households, landlords, tenants, and business clients who contact us, request a quote, enter into a contract for services, or otherwise interact with us.
Data Controller
Carpet Cleaning EC2 is the data controller responsible for the personal data it collects and processes in connection with its services within the EC2 area. As data controller, we decide how and why your personal data is processed and we are responsible for ensuring that such processing is carried out in accordance with applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data when you deal with Carpet Cleaning EC2:
Identification and contact details such as name, postal address, property address where services are provided, and general location information in the EC2 area. Booking and communication details including dates and times of appointments, service history, information you provide when requesting a quote, and records of communications with you. Payment and billing information such as billing address and details required to process your payment through external payment providers. Service-related information including details about the property areas to be cleaned, specific instructions or preferences, access details for the property where relevant, and information about previous services. Technical and usage information, where applicable, such as information about how you contact us online, your communication preferences, and information supplied through online forms.
We only collect personal data that is relevant and necessary for the purposes explained in this Privacy Policy.
How We Collect Personal Data
We collect personal data directly from you when you contact us, request a quote, make a booking, enter into a contract for services, or communicate with us by any means. We may also receive personal data about you from third parties such as letting agents, landlords, property managers, or other intermediaries who arrange services on your behalf in the EC2 area, where this is lawful and appropriate.
Purposes and Lawful Basis for Processing
We process your personal data only where we have a lawful basis to do so. The main purposes and corresponding lawful bases are:
To provide our services, including responding to enquiries, preparing quotes, scheduling and carrying out carpet cleaning and related services at your property. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.
To manage our relationship with you, including managing bookings, handling queries, rescheduling appointments, dealing with feedback or complaints, and maintaining records of services provided. The lawful basis is performance of a contract and our legitimate interests in delivering and improving our services.
To process payments, invoices, and accounting records, including confirming payment and dealing with payment-related queries. The lawful basis is performance of a contract, compliance with legal obligations in relation to tax and accounting, and our legitimate interests in operating our business in a responsible manner.
To improve and develop our services, including analysing service patterns, typical requirements in the EC2 area, and customer preferences, in order to enhance service quality. The lawful basis is our legitimate interests in improving and developing our services.
To comply with legal and regulatory obligations, including responding to lawful requests from authorities, maintaining business and tax records, and complying with applicable health and safety or consumer protection laws. The lawful basis is legal obligation.
To send you information about similar services you have previously used, where permitted. The lawful basis is our legitimate interests in promoting our services, and you may opt out at any time.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by law.
Service and booking records are usually retained for a period that allows us to respond to queries, manage repeat bookings, and comply with tax and accounting requirements. Payment and invoice data is retained for the period required by applicable tax and financial record-keeping laws. Communication records and service notes are kept for a reasonable period to protect our legitimate interests in managing our business and handling any disputes or complaints.
When personal data is no longer required for any permitted purpose and there is no legal requirement to retain it, we will delete it securely or anonymise it so that it can no longer be used to identify you.
Use of Data Processors
We may engage third party service providers to process personal data on our behalf. These organisations act as data processors and only process your personal data in accordance with our instructions and for the purposes described in this Privacy Policy.
Examples of data processors we may use include providers of payment processing services, providers of booking or scheduling systems, providers of customer management or accounting software, and companies providing secure data storage or cloud services.
Where we use data processors, we ensure that appropriate contractual and technical safeguards are in place to protect your personal data. These processors are not permitted to use your personal data for their own purposes.
Data Sharing and Transfers
We do not sell your personal data. We may share your data with third parties only where this is necessary for the purposes described in this Privacy Policy, such as with payment providers to process your payment or with professional advisers where required for legal, accounting, or regulatory reasons.
In some cases, personal data may be transferred to or stored in locations outside the United Kingdom. Where this occurs, we will ensure that appropriate safeguards are in place to protect your personal data, for example by relying on adequacy regulations or by using appropriate contractual clauses.
Security of Your Data
We take reasonable technical and organisational measures to protect the personal data we hold against unauthorised access, accidental loss, destruction, or damage. These measures may include access controls, secure storage methods, and procedures designed to ensure that personal data is only accessed by those who need it for legitimate business purposes.
Although we take appropriate measures to safeguard your data, no transmission of information is completely secure. You should take care when providing personal data and ensure any information you send is transmitted securely where possible.
Your Rights Under GDPR
As a data subject, you have a number of rights under data protection law in relation to your personal data processed by Carpet Cleaning EC2. These include:
The right of access, which allows you to obtain confirmation of whether we process your personal data and, if so, to receive a copy and certain information about how it is used.
The right to rectification, which allows you to request correction of inaccurate or incomplete personal data we hold about you.
The right to erasure, in certain circumstances, which allows you to request that we delete your personal data where there is no compelling reason for us to continue processing it.
The right to restrict processing, in certain circumstances, which allows you to request that we limit how we use your data while a complaint or query is being resolved.
The right to data portability, which allows you, in certain cases, to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to request that we transmit that data to another controller where technically feasible.
The right to object, which allows you to object to processing based on our legitimate interests and to direct marketing at any time.
The right not to be subject to a decision based solely on automated processing, including profiling, where such decision has legal or similarly significant effects, unless certain conditions are met. Carpet Cleaning EC2 does not typically rely on decisions based solely on automated processing in the provision of its services.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed. We encourage you to contact us first so that we can seek to resolve any concerns.
Policy Scope and Updates
This Privacy Policy applies to all Carpet Cleaning EC2 customers and prospective customers within the EC2 area and to all personal data collected in the context of providing carpet cleaning and related services. It does not apply to the practices of any third parties that we do not control.
We may update this Privacy Policy from time to time to reflect changes in our services, in technology, or in applicable law. The updated version will apply from the date it is published. You should review this Privacy Policy periodically to stay informed about how we handle your personal data.
