Privacy Policy - Carpetcleaning Canarywharf

This Privacy Policy explains how Carpetcleaning Canarywharf collects, uses, stores, shares, and protects personal data when providing carpet cleaning services. It applies to all Carpetcleaning Canarywharf customers in area, including residential and commercial clients who request, receive, or enquire about our services. We are committed to handling personal data in a lawful, fair, transparent, and secure manner in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning Canarywharf is a service provider that offers carpet cleaning and related cleaning services. In the course of operating our business, we may act as a data controller for the personal data we collect directly from customers, prospective customers, suppliers, and other individuals connected to the delivery of our services. This means we determine the purposes and means of processing personal data for business and service delivery purposes.

2. Personal Data We Collect

We only collect data that is necessary for the provision of our services, administration of our business, legal compliance, and customer support. The types of personal data we may collect include:

Identity information such as your name.
Contact details such as your address, telephone number, and email address.
Service details including property type, cleaning requirements, booking preferences, access instructions, and service history.
Payment information such as billing details and transaction records, where applicable.
Communication records including messages, notes from calls, complaints, feedback, and enquiries.
Technical data such as basic website or device interaction data if you submit an enquiry through an online form or communication platform.
Marketing preferences where you have told us how you wish to be contacted.

We generally do not intentionally collect special category data unless you choose to provide it and it is necessary for a specific purpose, for example to support an accessibility request or an instruction relevant to service delivery. Where special category data is processed, we will only do so where permitted by law and with appropriate safeguards.

3. How We Collect Your Data

We may collect personal data directly from you when you:

make a booking or request a quotation;
communicate with us by phone, email, message, or other channels;
complete a form or provide details for a service;
make a payment or receive an invoice;
give feedback, submit a complaint, or request follow-up support.

We may also receive data from third parties where necessary, such as from payment providers, booking platforms, or business partners involved in arranging or delivering the service. If we receive information from another source, we will treat it in accordance with this policy and applicable law.

4. Why We Use Your Data

We use personal data only for legitimate business purposes and lawful processing activities. The main reasons we process your data are:

to provide quotes, manage bookings, and carry out cleaning services;
to communicate with you about appointments, service updates, or changes;
to process payments, issue invoices, and maintain financial records;
to respond to enquiries, complaints, and service requests;
to maintain internal business records and improve service quality;
to comply with legal, tax, accounting, and regulatory obligations;
to prevent fraud, misuse, or unauthorised access to our systems;
to send marketing communications where permitted and where you have not opted out.

5. Lawful Basis for Processing

Under data protection law, we must identify a lawful basis before processing your personal data. Depending on the purpose, we may rely on the following lawful bases:

Contract

We process your data where it is necessary to enter into or perform a contract with you. This includes taking booking details, arranging service times, carrying out the cleaning work, invoicing, and handling follow-up service issues.

Legal Obligation

We process certain data when needed to meet legal obligations such as accounting, tax compliance, record keeping, or responding to lawful requests from authorities.

Legitimate Interests

We may process your data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. This may include business administration, customer service management, service improvement, fraud prevention, and internal record keeping. We always consider whether the processing is proportionate and whether your privacy rights should take priority.

Consent

Where required by law, we rely on your consent, for example for certain marketing communications or the processing of optional information that is not otherwise necessary. If we rely on consent, you may withdraw it at any time.

6. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods depend on the type of data and the reason for processing.

Customer and booking records are generally kept for as long as needed to manage the service relationship and handle any follow-up queries.
Financial and accounting records may be retained for the period required by tax and bookkeeping laws.
Communication records may be retained for a reasonable period to support service quality, dispute resolution, and customer support.
Marketing preferences are kept until you opt out or request deletion where applicable.

When personal data is no longer needed, we will securely delete, anonymise, or destroy it, depending on the circumstances. We regularly review retained data to ensure it is not kept longer than necessary.

7. Data Sharing and Processors

We may share personal data with trusted third-party service providers, known as processors, who process data on our behalf and under our instructions. These processors help us operate our business and provide services effectively. Examples may include:

payment processing providers;
booking and scheduling systems;
IT and cloud storage providers;
accounting and invoicing providers;
communication and customer support tools;
professional advisers such as accountants or legal advisers, where necessary.

We require processors to protect personal data, use it only for the agreed purpose, and comply with applicable data protection obligations. We do not sell personal data. Where personal data is shared with other third parties, it will only be done when necessary for service delivery, legal compliance, or with your consent where required.

8. Security of Your Data

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, disclosure, or alteration. These measures may include access controls, secure storage, staff awareness procedures, and limited data access on a need-to-know basis. Although no system can be guaranteed to be completely secure, we take data protection seriously and regularly review our safeguards.

9. International Transfers

If personal data is transferred outside the UK, we will ensure appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We will only make such transfers where necessary and where the required level of protection can be maintained.

10. Your Rights

You have a number of rights under data protection law in relation to your personal data. These rights may be subject to certain legal conditions and exemptions. They include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to request that we limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used, machine-readable format.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in line with applicable law. We may need to verify your identity before taking action on your request.

11. Complaints

If you are concerned about how your personal data has been handled, you have the right to raise a complaint with the relevant data protection authority. You can also contact us directly to allow us an opportunity to address the issue first. We encourage customers to contact us if they believe any information we hold is inaccurate or if they have concerns about data use.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updates will take effect when published in the revised version. We recommend reviewing this policy periodically to stay informed about how we protect personal data.

13. Applicability

This Privacy Policy applies to all Carpetcleaning Canarywharf customers in area and to any personal data processed in connection with our carpet cleaning services, enquiries, quotations, bookings, and related customer interactions. By using our services, you acknowledge that your personal data may be processed as described in this policy and in accordance with applicable data protection law.

In summary: we process personal data lawfully, retain it only as long as necessary, use trusted processors where appropriate, and respect your rights over your information. Your privacy is important to us, and we are committed to handling your data responsibly.