Privacy Policy - Woodford Green Carpet Cleaners

Effective date: This Privacy Policy applies to all Woodford Green Carpet Cleaners customers in the area.

Woodford Green Carpet Cleaners is committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws. This Privacy Policy explains how we collect, use, store, share, and protect personal data when we provide carpet cleaning and related services.

1. Who this policy applies to

This policy applies to all Woodford Green Carpet Cleaners customers in area, including individuals who request quotes, make bookings, receive services at residential or commercial properties, communicate with us, or otherwise interact with us in connection with our services.

By using our services, you acknowledge that we may process personal data as described in this policy. We only process personal data where we have a valid lawful basis and where the processing is necessary for a specific purpose.

2. Data we collect

We collect only the personal data that is necessary to manage enquiries, bookings, service delivery, administration, compliance, and customer support. The data we may collect includes:

Identity details: your name and, where relevant, the name of a business or property contact.
Contact details: address, email address, telephone number, and any preferred communication method.
Service details: information about the property, the areas to be cleaned, carpet type, stain or damage descriptions, access requirements, and appointment preferences.
Billing and payment information: payment status, invoice details, and limited financial records required for accounting purposes. We do not keep unnecessary payment card data where payment processing is handled by a third party.
Communication records: emails, messages, call notes, complaint details, feedback, and customer service correspondence.
Technical data: limited website or device information if you contact us through digital channels, such as IP address, browser type, and basic usage data, where collected.
Special instructions: any information you choose to provide that helps us safely and effectively complete the service, such as property access notes or allergy concerns.

We do not intentionally collect more personal data than is necessary. We also do not seek to collect special category data unless you voluntarily provide it and it is relevant to your service request, such as a health-related access consideration. If such information is shared, we will only process it where permitted by law and with appropriate safeguards.

3. How we use your data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to manage bookings and deliver carpet cleaning services;
to confirm property details and service requirements;
to communicate appointment changes, service updates, and post-service matters;
to issue invoices, process payments, and maintain business records;
to deal with complaints, disputes, or follow-up requests;
to meet legal, tax, insurance, and regulatory obligations;
to improve our services, internal processes, and customer experience;
to protect our business, staff, customers, and property from fraud, misuse, or security risks.

We use your information in a fair, transparent, and limited way. We only keep data for as long as necessary for the purpose for which it was collected, or as required by law.

4. Lawful basis for processing

Under UK GDPR, we must have a lawful basis to use your personal data. Depending on the context, we rely on the following lawful bases:

Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes providing quotations, taking bookings, carrying out cleaning services, sending invoices, and managing service-related communications.

Legal obligation

We may process certain data to comply with legal requirements, including tax recordkeeping, accounting duties, insurance obligations, and lawful responses to authority requests.

Legitimate interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include improving service quality, managing customer relations, maintaining records, preventing fraud, and operating securely.

Consent

In limited situations, we may rely on your consent, for example where you have agreed to receive optional marketing communications or where you voluntarily provide sensitive information and we need your explicit permission to process it. You may withdraw consent at any time where consent is the lawful basis.

We do not rely on consent where another lawful basis is more appropriate and valid.

5. Data sharing and processors

We do not sell your personal data. We may share personal data with trusted third parties only where necessary for the operation of our business and the delivery of our services. These third parties act as processors or, in some cases, independent controllers.

Examples of processors may include:

Payment processors who handle secure transactions on our behalf;
Booking and scheduling providers that manage appointments and communications;
IT and cloud storage providers that store emails, records, or service data securely;
Accounting and bookkeeping services that support invoicing and financial administration;
Customer communication tools used for operational messages and service updates;
Professional advisers such as accountants, insurers, or legal advisers where necessary;
Regulators, law enforcement, or public authorities where disclosure is required by law.

Where we use processors, we require them to protect personal data, process it only on our instructions, and apply suitable technical and organisational security measures. We remain responsible for ensuring that any processing carried out on our behalf is lawful and appropriate.

6. Retention of personal data

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason for holding it.

Customer and service records: retained for the period needed to manage our relationship and resolve any service issues.
Financial and tax records: retained for the period required by law and standard accounting practice.
Communication records: retained for a reasonable period to support service administration, dispute handling, or customer care.
Marketing preferences: retained until you opt out or withdraw consent, where applicable.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices.

7. Your rights under data protection law

You have a number of rights in relation to your personal data. These rights may not always apply in every situation, but we will always assess your request carefully and respond in accordance with the law.

Your rights include:

Right of access: you may ask for confirmation of whether we process your data and request a copy of it.
Right to rectification: you may ask us to correct inaccurate or incomplete data.
Right to erasure: you may ask us to delete data in certain circumstances, such as where it is no longer needed or where consent is withdrawn.
Right to restriction: you may ask us to limit how we use your data in certain situations.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to data portability: you may request certain data in a structured, commonly used format where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

We will not discriminate against you for exercising your rights. If you wish to exercise any of these rights, we will respond within the time limits required by law and may need to verify your identity before processing the request.

8. Security of your data

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and restricted processing environments.

While no system can be guaranteed completely secure, we work to minimise risks and to ensure any personal data we hold is treated with care and respect.

9. International transfers

Where any processor or service provider stores or accesses data outside the UK, we will only allow this where adequate safeguards are in place and the transfer complies with data protection law. These safeguards may include approved contractual terms or use of providers in jurisdictions with appropriate protection standards.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is used.

11. Summary of our commitments

Woodford Green Carpet Cleaners is committed to processing personal data lawfully, fairly, and transparently. We collect only what we need, use it for clear and legitimate purposes, share it only with trusted processors where necessary, and keep it only for as long as required. We also respect your rights and aim to make privacy protection a core part of our service.

This Privacy Policy applies to all Woodford Green Carpet Cleaners customers in the area. By continuing to use our services, you acknowledge the practices described above and the protections provided under applicable data protection law.