Privacy Policy - South Croydon Carpet Cleaners

This Privacy Policy explains how South Croydon Carpet Cleaners collects, uses, stores, shares, and protects personal data when providing services to customers in the South Croydon area. It applies to all South Croydon Carpet Cleaners customers in the area, including individuals who request quotes, book appointments, receive cleaning services, or otherwise interact with us. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Personal Data We Collect

We collect only the information necessary to provide and manage our services effectively. The types of personal data we may collect include:

Identity data such as your name and, where relevant, the name of a business or property manager.
Contact details such as your address, email address, and telephone number.
Service information such as details of the carpets, rugs, upholstery, or other items requiring cleaning, access notes, preferred dates, and service instructions.
Transaction data such as invoices, payment records, and service history.
Communication data such as messages, phone notes, booking requests, complaints, and feedback.
Technical data if you contact us through digital channels, which may include basic device or usage information used for security and service improvement.

We do not intentionally collect special category data unless you voluntarily provide information that is relevant to the service, for example access needs or health-related instructions. If such information is shared, we will only use it where necessary and appropriate safeguards are in place.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotes, confirm bookings, and carry out cleaning services.
To communicate with you about appointments, changes, delays, or service-related matters.
To process payments, issue invoices, and maintain financial records.
To manage customer accounts, service history, and internal administration.
To respond to enquiries, complaints, and requests for support.
To improve our services, training, quality control, and business operations.
To meet legal, tax, insurance, and regulatory obligations.

We only process data where there is a valid and lawful reason to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. South Croydon Carpet Cleaners relies on the following lawful bases depending on the context:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotes, booking services, completing cleaning work, and managing payments.

Legal Obligation

We may process and retain certain information because it is required by law, including accounting, tax, and record-keeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include managing customer relationships, improving services, preventing fraud, and maintaining internal records. We assess such processing carefully and only keep what is relevant.

Consent

In limited situations, we may rely on your consent, for example if you agree to receive optional marketing messages. Where consent is used, you may withdraw it at any time.

4. Sharing and Processors

We may share personal data with trusted third parties that help us operate our business. These third parties act as data processors or independent controllers depending on the service they provide. We require appropriate safeguards and data protection terms where needed.

Payment processors who handle card or online payments securely.
Accounting and bookkeeping providers who assist with invoicing, records, and tax compliance.
IT, cloud storage, and communication providers who help us store data, manage emails, and maintain systems.
Scheduling or customer management tools used to organise appointments and service records.
Professional advisers such as insurers, legal advisers, or auditors where necessary.
Public authorities where disclosure is required by law or needed to protect rights, property, or safety.

We do not sell your personal data. We only share the minimum information necessary for a specific purpose. Any processor we use is expected to keep your information secure and process it only on our instructions.

5. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, including legal, accounting, and business requirements. Retention periods depend on the type of information and the reason it is held.

Quotation and enquiry records may be kept for a limited period to handle follow-up requests and service tracking.
Customer service and booking records may be retained for the duration of our relationship and for a reasonable period afterwards.
Invoices, payment records, and tax-related documents are typically retained for the period required by law.
Complaint and dispute information may be held for as long as necessary to resolve matters and protect legal rights.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. Retention is reviewed regularly to ensure we do not keep data longer than necessary.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include restricted access, secure systems, password protection, and staff awareness procedures. While no system can be guaranteed completely secure, we take reasonable steps to protect the information entrusted to us.

7. Your Rights

As a data subject, you have a number of rights under data protection law. These rights may apply depending on the circumstances and any legal exceptions.

Right of access – You may request a copy of the personal data we hold about you.
Right to rectification – You may ask us to correct inaccurate or incomplete information.
Right to erasure – In certain cases, you may request that we delete your personal data.
Right to restrict processing – You may ask us to limit how we use your data in some situations.
Right to object – You may object to processing based on legitimate interests, including certain direct marketing activities.
Right to data portability – Where applicable, you may request a copy of your data in a structured, commonly used format.
Right to withdraw consent – Where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in line with applicable legal requirements. We may need to verify your identity before taking action. These rights are important, and we aim to handle requests fairly and promptly.

8. International Transfers

Where a processor or service provider stores or accesses data outside the United Kingdom, we will ensure appropriate safeguards are in place. This may include contractual protections or use of approved transfer mechanisms to keep your information protected to a standard consistent with UK data protection law.

9. Cookies and Similar Technologies

If we use online systems that employ cookies or similar technologies, these tools may be used for essential functionality, security, and basic analytics. Any such use will be limited to what is necessary for the operation and improvement of our services. Where consent is required for non-essential technologies, it will be requested before they are used.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. The updated version will apply from the date it is made available. We encourage customers in South Croydon to review this policy periodically so they remain informed about how their data is handled.

11. Summary of Our Commitments

South Croydon Carpet Cleaners is committed to responsible data handling. We collect only necessary information, use it for clear and lawful purposes, keep it only as long as needed, and share it only with trusted processors or where required by law. We respect your privacy rights and aim to provide a transparent service that is safe, secure, and compliant.

By using our services, you acknowledge that you have read and understood this Privacy Policy.