Privacy Policy - Carpetcleaning Ealing

This Privacy Policy explains how Carpetcleaning Ealing collects, uses, stores, and protects personal data belonging to customers and prospective customers in the Ealing area. It applies to all Carpetcleaning Ealing customers in area, including anyone who requests a quote, books a service, communicates with us, or otherwise interacts with our services. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning Ealing provides carpet cleaning and related domestic and commercial cleaning services. In the context of this Privacy Policy, we act as the data controller for the personal data we collect and use in connection with our services. This means we decide how and why your personal data is processed.

We take privacy seriously and aim to ensure that any personal information we handle is used only for legitimate purposes connected to delivering our services, managing customer relationships, meeting legal obligations, and improving the quality of what we offer.

2. Information We Collect

We may collect and process the following categories of personal data:

Identity details such as your name and title.
Contact details such as your address, phone number, and email address.
Service details such as the type of cleaning requested, property access information, preferred service times, and special instructions.
Payment information such as billing records and transaction status. We do not store card details unless required for a specific transaction process and only where permitted by law.
Communication records such as messages, notes from calls, complaints, feedback, and service-related correspondence.
Technical data where applicable, such as IP address or basic device information if you interact with our digital services.
Marketing preferences if you choose to receive promotional information or opt out of such messages.

We do not intentionally collect special category data unless you provide it voluntarily and it is necessary for a specific service request, for example, where access needs or health-related concerns affect service delivery. If such information is shared, we will only process it where there is a valid legal reason to do so.

3. How We Use Your Data

We use your personal data for the following purposes:

To provide quotations, confirm bookings, and deliver cleaning services.
To communicate with you about appointments, service updates, and operational matters.
To manage billing, payments, and accounting records.
To respond to enquiries, complaints, and customer support requests.
To maintain business records and improve our services.
To meet legal, regulatory, tax, and insurance obligations.
To protect our business, staff, customers, and property from fraud, misuse, or security risks.

We only use personal data where there is a lawful reason to do so and where the use is relevant to our business relationship with you. We do not sell personal data.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. Carpetcleaning Ealing relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes managing bookings, carrying out the cleaning service, and handling payment-related administration.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include improving service quality, maintaining records, preventing fraud, and managing customer communications. We carefully balance our interests against your privacy rights.

Legal Obligation

We may process and retain certain information when required to comply with legal duties, including tax laws, accounting requirements, insurance obligations, and lawful requests from public authorities.

Consent

Where required, we will ask for your consent before sending certain marketing messages or processing optional information. If you give consent, you can withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before it was withdrawn.

5. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors on our behalf. These processors only handle your data under our instructions and are required to protect it appropriately.

Payment service providers that process transactions securely.
Accounting or bookkeeping providers that help manage financial records.
IT and hosting providers that support data storage, email, and system maintenance.
Customer management or scheduling tools used to organise bookings and service records.
Professional advisers such as insurers, auditors, or legal advisers where necessary.

We may also disclose information where required by law, to enforce our rights, or to protect the safety and security of our staff, customers, and operations. Any third party we engage must follow appropriate confidentiality and security measures.

6. International Transfers

If any of our processors store or access data outside the UK, we will ensure that suitable safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent lawful transfer mechanisms designed to protect your personal data to UK GDPR standards.

7. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy. Retention periods vary depending on the type of data, the purpose for which it was collected, and legal requirements.

Customer and service records are generally kept for the duration of the customer relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law.
Communication records may be retained for a limited time to help resolve disputes, manage complaints, or maintain service quality.
Marketing preference data is retained until you withdraw consent or opt out.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and the careful selection of processors. While no system can be guaranteed completely secure, we work to keep your information protected and to reduce risks as much as reasonably possible.

9. Your Rights

Under the UK GDPR, you have a number of rights regarding your personal data. These include:

The right to be informed about how your data is used.
The right of access to obtain a copy of the personal data we hold about you.
The right to rectification if your data is inaccurate or incomplete.
The right to erasure in certain circumstances, also known as the right to be forgotten.
The right to restrict processing in certain situations.
The right to data portability for information you provided to us, where applicable.
The right to object to processing based on legitimate interests or direct marketing.
Rights related to automated decision-making, where relevant, although we do not generally rely on solely automated decisions that produce legal or similarly significant effects.

If you wish to exercise any of these rights, we will respond within the time limits required by law and may ask for information to verify your identity. Some rights may not apply in every situation, and legal exceptions can restrict their use.

10. Marketing Preferences

If you choose to receive marketing information, we may use your contact details to send relevant updates or promotional messages. You can opt out at any time. We will respect your request and stop sending marketing communications where consent has been withdrawn or where you have objected.

11. Cookies and Similar Technologies

If we use digital tools that rely on cookies or similar technologies, they are used only where lawful and appropriate. Such tools may help with functionality, security, or basic analytics. Where consent is required, we will request it before placing non-essential cookies. You can manage browser settings to limit cookies, though this may affect some features.

12. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children unless it is necessary in connection with a customer’s service request and provided by an adult responsible for that arrangement. If we become aware that we have collected a child’s data inappropriately, we will take steps to delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

14. How We Apply This Policy

This Privacy Policy applies to all Carpetcleaning Ealing customers in area and to anyone engaging with our services within that area. By using our services, you acknowledge that your personal data may be processed in line with this policy, subject always to your rights under data protection law.

We are committed to respecting your privacy, keeping your information secure, and using your data responsibly. If you remain concerned about how your data is used, you may also contact the UK data protection regulator for further guidance or to raise a complaint.