Carpet Cleaning Knightsbridge Privacy Policy
This Privacy Policy explains how Carpet Cleaning Knightsbridge collects, uses, stores and protects personal data relating to customers and prospective customers in the Knightsbridge area. It is intended to comply with the UK General Data Protection Regulation and related data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Carpet Cleaning Knightsbridge customers, prospective customers, and website visitors located in the Knightsbridge area who engage with us to enquire about, book, or receive carpet cleaning and related services. It covers personal data collected in person, by phone, in writing, or through online interactions, including our website and any digital forms we may use.
Data Controller
For the purposes of applicable data protection laws, Carpet Cleaning Knightsbridge is the data controller responsible for determining how and why your personal data is processed. We are responsible for ensuring that any processing of your personal data is carried out in accordance with this Privacy Policy and applicable legal requirements.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you when you contact us, request a quote, book a service, or otherwise interact with us:
Identification and contact details, such as your name, address, service address, and other contact details required to arrange appointments and provide services.
Service and booking information, such as details of the services you request, property type, areas to be cleaned, preferred dates and times, and any special instructions relevant to the job.
Communication records, such as the content of enquiries, feedback, and any complaints or correspondence relating to our services.
Payment-related information, which may include limited payment details necessary to process payments, though card details are generally handled directly by secure payment processors and not stored by us beyond what is required for accounting and record-keeping.
Technical and usage information, such as anonymised or aggregated data about how our website is accessed and used, including basic analytics that do not identify you directly.
How We Collect Personal Data
We collect personal data directly from you when you contact us to request information, obtain a quote, or book a service. This may be done by telephone, in person, via our website contact forms, or through any other channels we make available. We may also generate personal data during the provision of services, such as notes about the work carried out and follow-up requirements.
In some cases, we may receive your details from third parties who refer you to us or who are authorised to share your information with us for the purpose of arranging our services. When this happens, we take reasonable steps to ensure you are informed that we have received your data and are provided with access to this Privacy Policy.
Lawful Basis for Processing
We process your personal data only where we have a valid legal basis under data protection laws. Depending on the context, the main lawful bases we rely on are as follows:
Performance of a contract: We process personal data that is necessary to provide our services, including responding to enquiries, supplying quotes, booking appointments, delivering carpet cleaning services, and managing payments.
Legitimate interests: We may process personal data where it is necessary for our legitimate business interests and where these interests are not overridden by your rights and freedoms. This can include improving our services, managing our relationship with you, handling queries, and maintaining accurate business records.
Legal obligations: We may process personal data to comply with legal and regulatory obligations, including accounting, taxation, and record-keeping requirements.
Consent: In limited circumstances, we may rely on your consent, for example, where you choose to receive certain types of optional marketing communications. Where consent is used, you may withdraw it at any time, and we will stop the related processing.
How We Use Your Personal Data
We use your personal data for the following purposes:
To respond to enquiries, provide quotations, and communicate with you about potential or confirmed bookings.
To plan, manage, and deliver carpet cleaning and related services at the agreed location and time.
To process payments, issue invoices, and maintain financial records.
To manage our relationship with you, including handling feedback, complaints, and aftercare needs.
To improve our services, business processes, and customer experience, including by reviewing patterns and trends.
To comply with legal and regulatory obligations and to cooperate with relevant authorities where required.
Use of Data Processors
We may engage third-party service providers to process personal data on our behalf. These providers act as data processors and are only permitted to process your personal data in accordance with our documented instructions and for specified purposes.
Examples of such processors include payment processing providers, financial or accounting service providers, IT support and hosting providers, and providers of communication or scheduling tools. We require all processors to implement appropriate technical and organisational measures to protect your personal data and to keep it confidential.
We do not sell your personal data to third parties. We will not share your personal data with others for their own independent marketing purposes.
Data Retention
We retain your personal data for no longer than is necessary for the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The specific retention period depends on the nature of the data and our legal and operational needs.
Typically, we retain booking and service records, including contact details and invoices, for a number of years to meet legal and tax obligations. Communication records may be retained for a shorter period unless they are needed for ongoing issues, disputes, or legal claims. When personal data is no longer required, we will securely delete or anonymise it.
International Transfers
Our primary processing activities take place within the United Kingdom or the European Economic Area. If in the future we need to transfer personal data outside these regions, we will ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws. These safeguards may include standard contractual clauses or other legally recognised mechanisms that ensure an adequate level of protection.
Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised or unlawful access, accidental loss, destruction, or damage. These measures may include controlled access to information, secure storage systems, and staff awareness of data protection responsibilities.
While we take reasonable steps to secure your personal data, no system can guarantee absolute security. You are encouraged to take care when providing personal information and to inform us promptly if you suspect any misuse of your data in connection with our services.
Your Data Protection Rights
Under data protection laws, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:
The right of access: You can request confirmation that we process your personal data and obtain a copy of the personal data we hold about you.
The right to rectification: You can request that inaccurate or incomplete personal data is corrected or updated.
The right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected and there is no lawful basis for retaining it.
The right to restriction of processing: You can ask us to restrict the processing of your personal data in specific situations, such as where you contest its accuracy or object to our legitimate interest basis.
The right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request that we provide certain personal data in a structured, commonly used, and machine-readable format or transfer it directly to another controller where technically feasible.
The right to object: You can object to the processing of your personal data where we rely on legitimate interests, including any profiling based on those interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or where processing is required for legal claims.
The right to withdraw consent: Where we rely on your consent for specific processing activities, you may withdraw that consent at any time, and we will stop such processing from that point onwards.
Exercising Your Rights
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the contact details provided on our website or in your service documentation. We may need to verify your identity before responding to certain requests to ensure that personal data is not disclosed to the wrong person.
We aim to respond to all valid requests within the timeframes required by law. If you are not satisfied with our response or believe that we are processing your personal data in a way that infringes data protection laws, you may have the right to lodge a complaint with the relevant supervisory authority.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any changes will be posted in the latest version of the Privacy Policy made available to you. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.