Privacy Policy - Collierswood Carpetcleaning

This Privacy Policy explains how Collierswood Carpetcleaning collects, uses, stores, shares, and protects personal data when we provide carpet cleaning, upholstery cleaning, stain treatment, and related services. It applies to all Collierswood Carpetcleaning customers in the area, including prospective customers, current customers, and individuals who contact us about our services. We are committed to handling personal data in a lawful, fair, and transparent way and to respecting the rights of every individual whose information we process.

For the purpose of data protection law, Collierswood Carpetcleaning acts as a data controller in relation to the personal data we collect and use for our own business operations. This policy should be read alongside any service terms, quotes, invoices, or booking confirmations that may apply to a specific job.

1. Information We Collect

We collect only the personal data necessary to provide and manage our services effectively. The types of information we may collect include:

Identity details such as your name and, where relevant, the name of a business or property manager.
Contact details such as your address, email address, and telephone number.
Service details including the type of cleaning requested, property access information, preferred dates and times, and service instructions.
Billing information such as invoice details, payment status, and transaction records.
Communication records including enquiries, complaints, feedback, and any correspondence about appointments or service issues.
Technical and usage data if you interact with us electronically, such as device information, browser details, and basic log data used for security and system administration.

We generally do not seek special category data. However, in limited situations, you may voluntarily provide information that could be sensitive, for example where access arrangements or household circumstances require extra notes. Where this occurs, we will only process such information when there is a lawful basis to do so and when it is necessary for the service or for legal reasons.

2. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To schedule, manage, and deliver cleaning services.
To communicate with customers before, during, and after appointments.
To process payments, send invoices, and maintain financial records.
To manage customer accounts and service history.
To handle complaints, claims, and service-related disputes.
To maintain business records and meet legal and tax obligations.
To improve our services, security, and operational efficiency.

We will only use your data for the purposes described above or for purposes that are compatible with them. If we need to use your data for a new purpose, we will ensure that we have a valid legal basis and, where required, we will notify you.

3. Lawful Basis for Processing

Under the UK GDPR and applicable data protection law, we rely on one or more of the following lawful bases when processing personal data:

a. Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes managing bookings, providing services, issuing invoices, and communicating about the work we have agreed to carry out.

b. Legal Obligation

We process some information where required to comply with legal obligations, such as tax, accounting, fraud prevention, and record-keeping requirements.

c. Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. Examples include maintaining internal records, improving our services, protecting against misuse, and handling customer communications. When relying on legitimate interests, we carry out an assessment to ensure the processing is proportionate and necessary.

d. Consent

In limited cases, we may ask for your consent, for example where we process optional data not required for service delivery or where a specific type of marketing communication requires consent. You may withdraw consent at any time, although this will not affect the lawfulness of processing carried out before withdrawal.

4. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including for the fulfilment of contractual obligations, compliance with legal requirements, resolution of disputes, and enforcement of our agreements.

Typical retention periods include:

Customer service records: retained for the period needed to manage the relationship and any follow-up matters.
Financial and invoice records: retained for the period required by tax and accounting laws.
Complaint or claims records: retained for as long as needed to deal with the issue and any legal limitation periods.
Communication records: retained for a reasonable period to ensure continuity of service and quality control.

When data is no longer required, we will securely delete, anonymise, or destroy it. We aim to keep data only for the minimum time necessary and apply data minimisation principles throughout our retention practices.

5. Data Sharing and Processors

We may share personal data with trusted third parties where necessary for business operations or legal compliance. We do not sell personal data. Where we use third-party service providers to process data on our behalf, they act as processors and are bound by appropriate contractual obligations.

Examples of processors may include:

Booking and scheduling providers that help manage appointments and reminders.
Payment processors that handle card or electronic payments securely.
Accounting and invoicing providers that support financial administration.
IT and cloud service providers that store or support business systems.
Communication service providers that help us send service-related messages.

We may also disclose information to:

Public authorities, regulators, or law enforcement where required by law.
Professional advisers such as accountants, insurers, or legal advisers when necessary.
Other parties involved in a dispute, claim, or recovery action where required to protect our legal rights.

Whenever we appoint a processor, we seek to ensure that appropriate security measures are in place and that personal data is processed only according to our instructions and in compliance with data protection law.

6. International Transfers

If any personal data is transferred outside the UK, we will ensure that appropriate safeguards are used to protect it. These safeguards may include adequacy regulations, standard contractual clauses, or other legally recognised mechanisms. We will only make such transfers where they are necessary and lawful.

7. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our systems and procedures. While no system can be completely secure, we work to reduce risks and respond promptly to suspected incidents.

8. Your Rights

You have several rights under data protection law. Subject to legal limits, you may have the right to:

Access your personal data and obtain a copy of it.
Rectification of inaccurate or incomplete data.
Erasure of your data in certain circumstances.
Restriction of processing in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability for information you have provided to us and where processing is based on consent or contract and carried out by automated means.
Withdraw consent where processing is based on consent.

You may also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have not been respected. We encourage you to contact us first so that we can try to resolve any concerns.

9. Marketing Communications

We do not send unsolicited marketing messages unless permitted by law or with your consent where required. Where you have opted in to receive updates or offers, you can ask us to stop sending them at any time. Service-related messages, such as booking confirmations, appointment changes, and invoice notices, are not marketing and may still be sent where necessary to perform our services.

10. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children except where it is incidental to providing services at a property and necessary for safety, access, or communication. If we become aware that we have collected child data without an appropriate basis, we will take steps to delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or processing practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

12. Summary of Our Commitment

Collierswood Carpetcleaning is committed to processing personal data responsibly, securely, and only when there is a valid lawful basis. We collect the information needed to provide reliable cleaning services, keep accurate business records, and meet legal requirements. We retain data only for as long as necessary, use processors carefully, and respect your rights under data protection law. This policy applies to all Collierswood Carpetcleaning customers in area and is designed to ensure transparency and trust in how we handle personal information.

Last reviewed: current policy version applies until updated.