Carpet Cleaning Sidcup Customer Privacy Policy
This Privacy Policy explains how Carpet Cleaning Sidcup collects, uses, stores, and protects personal data relating to customers and prospective customers in the Sidcup area. It is designed to be compliant with the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Carpet Cleaning Sidcup customers, including domestic and business customers, within our service area.
Who We Are and Scope of This Policy
Carpet Cleaning Sidcup provides carpet and upholstery cleaning and related services to customers in the Sidcup area. For the purposes of data protection law, Carpet Cleaning Sidcup is the controller of the personal data described in this Privacy Policy. This means we determine how and why your personal data is processed.
This Privacy Policy covers personal data we collect directly from you, from third parties acting on your behalf, and from your use of our services, including enquiries, bookings, and any communication with us in the course of providing our services.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details: name, address, service address, and basic contact details needed to communicate with you and deliver our services.
Service and booking information: details of the services you request, property access information that you choose to provide, booking dates and times, and notes relating to the work we carry out at your property.
Payment-related information: information required to process payments and maintain records of transactions. We do not store full payment card details if payment is taken via a third-party payment processor.
Communication records: information contained in messages, emails, letters, and any feedback or complaints you send us, as well as notes of any conversations relating to your booking or enquiry.
Technical and usage data: information about how you interact with our website or online booking tools, such as basic device and browsing information, where this is collected via cookies or similar technologies.
How We Collect Your Personal Data
We may collect your personal data in the following ways:
Directly from you when you contact us to request a quote, make a booking, or ask a question about our services.
During the provision of services, where we record details relevant to the service being delivered at your property.
From third-party platforms where you submit enquiries or reviews relating to Carpet Cleaning Sidcup and our services.
Automatically through your use of our website or online booking systems, where technical information and usage data may be collected.
Lawful Bases for Processing Your Data
We process your personal data only when we have a lawful basis under data protection law. The main lawful bases we rely on are:
Performance of a contract: to take steps at your request before entering into a contract, and to perform our contract with you, for example to provide carpet cleaning services at your property, manage your booking, and communicate with you about your appointment.
Legal obligation: to comply with legal and regulatory requirements, such as record-keeping, tax obligations, and responding to lawful requests from authorities when required.
Legitimate interests: to pursue our legitimate business interests in operating and improving our services, handling customer enquiries, preventing fraud, maintaining security, and promoting our services in a proportionate way that respects your privacy rights.
Consent: where we rely on your consent, for example for certain types of marketing communications or optional cookies. When we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To respond to your enquiries and provide quotes for services you request.
To set up, manage, and fulfil your bookings for carpet cleaning and related services.
To take payment, issue invoices, and maintain records of transactions and services provided.
To manage our relationship with you, including handling feedback, resolving complaints, and providing customer support.
To improve our services by analysing how customers use our services and website, where appropriate.
To send you service-related communications, such as booking confirmations, appointment reminders, and updates regarding our terms or this Privacy Policy.
To send marketing communications about our services where we are permitted to do so in compliance with data protection and electronic marketing laws, and always giving you the option to opt out.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with trusted third parties where necessary for the purposes described in this Privacy Policy:
Service providers and processors: third-party companies that provide services on our behalf, such as payment processing, accounting support, website hosting, booking and scheduling systems, data storage, and communication tools. These service providers act as processors and may only process your personal data under our instructions and in accordance with data protection law.
Professional advisers: such as accountants or legal advisers, who may need access to certain data for legitimate business and legal reasons.
Authorities and regulators: where required to comply with legal obligations, respond to lawful requests, protect our rights, or prevent and detect crime or fraud.
Whenever we share your data with processors, we put in place contracts that require them to protect your data and use it only for the specified purposes.
International Transfers
Where any of our service providers are located outside the United Kingdom or the European Economic Area, we will take appropriate steps to ensure that your personal data is given an equivalent level of protection. This may include using contracts approved for use in the UK that contain standard data protection clauses or relying on other lawful transfer mechanisms recognised by data protection law.
Data Retention
We will retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.
In practice, this means:
Customer and service records are generally kept for a period needed to provide our services and to maintain a record of work carried out at your property.
Financial and transaction records are kept for the period required by tax and accounting laws.
Communication records are retained for a reasonable period to manage customer relationships, handle complaints, and improve our services.
When personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be linked to you.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures include limiting access to personal data to those who have a business need to know it and using secure methods to store and transmit information where appropriate.
While we work hard to protect your personal data, no system can be completely secure. We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.
Your Data Protection Rights
Under data protection law, you have several rights in relation to your personal data. These rights apply to all Carpet Cleaning Sidcup customers in our service area, subject to certain conditions and exemptions:
Right of access: you can request a copy of the personal data we hold about you and information about how we process it.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data.
Right to erasure: in certain circumstances, you can ask us to delete your personal data.
Right to restriction: you can ask us to restrict the processing of your personal data in specific situations.
Right to data portability: you can request that we provide certain personal data to you or another organisation in a structured, commonly used, and machine-readable format, where the processing is based on consent or contract and carried out by automated means.
Right to object: you can object to processing based on our legitimate interests, and you always have the right to object to direct marketing.
Rights related to consent: where we rely on your consent, you can withdraw your consent at any time, without affecting the lawfulness of processing that took place before withdrawal.
If you wish to exercise any of these rights, you can contact us using the contact details provided on our website or through our usual communication channels. We may need to verify your identity before responding to your request.
Complaints and Contact
If you have concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection authority in the United Kingdom if you believe your data protection rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or changes in legal requirements. Any updated version will be made available through our usual customer communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
