Privacy Policy - Carpet Cleaners Islington

This Privacy Policy explains how Carpet Cleaners Islington collects, uses, stores, shares, and protects personal data when providing cleaning services to customers in the Islington area. It applies to all Carpet Cleaners Islington customers in area, including residential and commercial clients, and is designed to comply with the UK GDPR and the Data Protection Act 2018.

We are committed to handling personal information lawfully, fairly, and transparently. We only collect data that is necessary for service delivery, administration, legal compliance, and the improvement of our operations. We also respect your rights as a data subject and provide clear information about how you can exercise them.

1. Who this policy applies to

This policy applies to everyone who uses, enquires about, or receives services from Carpet Cleaners Islington in the area. It also applies to anyone whose personal data we may process in connection with our services, such as property owners, tenants, authorised representatives, building managers, and business contacts.

By using our services or providing your details to us, you acknowledge that your information will be processed in line with this policy.

2. Data we collect

We may collect and process the following categories of personal data:

Identity information such as your name or the name of your business contact.
Contact details such as address, email address, and telephone number.
Service details including service type, preferred appointment times, property access information, and instructions relevant to cleaning work.
Payment and billing information where needed to issue invoices, manage payments, or record transaction history.
Communication records including messages, requests, complaints, feedback, and service-related notes.
Technical information such as basic website or device data if you interact with our online systems, where applicable.
Property-related information that helps us carry out services safely and effectively, such as room layouts, carpet types, stain concerns, or access instructions.

We generally do not intentionally collect special category data unless it is necessary and you choose to provide it, or it is required for a specific legal, contractual, or safety-related reason. If such data is processed, we will do so in accordance with applicable law and with appropriate safeguards.

3. How we use your data

We use personal data for the following purposes:

to provide cleaning services and manage appointments;
to communicate with customers about bookings, service changes, and service completion;
to prepare quotations, invoices, receipts, and records;
to handle customer support, complaints, and queries;
to maintain service quality and improve our operations;
to meet our legal and regulatory obligations;
to prevent fraud, misuse, or unauthorised access;
to maintain internal administration and business records.

We only use personal data for specific, legitimate purposes and do not use it in ways that are incompatible with those purposes.

4. Lawful basis for processing

Under GDPR, we must have a lawful basis to process your personal data. Depending on the situation, we may rely on one or more of the following lawful bases:

Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes managing bookings, delivering cleaning services, and handling payment administration.

Legal obligation

We may process data where needed to comply with legal requirements, such as accounting, tax, record-keeping, or responding to lawful requests from authorities.

Legitimate interests

We may process data for our legitimate business interests, such as service management, customer support, internal record-keeping, fraud prevention, and service improvement. When we rely on this basis, we balance our interests against your rights and freedoms.

Consent

Where consent is required, for example for certain optional communications or specific types of processing, we will ask you clearly and separately. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing personal data and processors

We may share personal data with trusted third parties where necessary for business operations, legal compliance, or service delivery. These parties act either as processors or independent controllers, depending on the circumstances.

Processors are organisations that handle data on our instructions and under written agreements. Examples may include:

payment processors for transaction handling;
accounting or bookkeeping service providers;
IT, cloud storage, or customer management system providers;
administrative support services;
communication tools used for booking or service coordination.

We require all processors to protect personal data appropriately, use it only for the agreed purpose, and apply suitable technical and organisational security measures.

We may also disclose data where required by law, for example to comply with legal obligations, court orders, or regulatory requests. We do not sell personal data.

6. Data retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, reporting, and operational requirements. Retention periods may vary depending on the type of data and the purpose of processing.

In general:

customer service records are retained for the period needed to manage the relationship and resolve any follow-up issues;
billing and financial records are retained for the period required by tax and accounting law;
communication records are retained only as long as needed for service administration and dispute handling;
data no longer needed is securely deleted, anonymised, or otherwise disposed of.

We regularly review the data we hold to ensure it is not kept longer than necessary.

7. Security of your information

We take appropriate security measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, staff confidentiality obligations, secure storage, and limited access on a need-to-know basis.

While no system can be guaranteed completely secure, we work to reduce risks and respond promptly to any suspected data incident.

8. International transfers

If personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place in accordance with applicable data protection law. Such safeguards may include adequacy regulations, contractual protections, or other lawful transfer mechanisms.

9. Your rights

You have a number of rights under data protection law. Subject to legal limits and exemptions, these may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to request limitation of processing in certain cases.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to request transfer of certain data in a structured, commonly used format.
Right to withdraw consent – where processing relies on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in line with legal requirements. We may need to verify your identity before taking action to protect your information.

10. Automated decision-making

We do not use personal data for automated decision-making that produces legal or similarly significant effects on individuals. If this changes in the future, we will update this policy and provide the required information.

11. Children’s data

Our services are generally intended for adults. We do not knowingly collect personal data from children unless it is necessary for service administration and provided by an adult with authority to do so. Where children’s data is involved, we will handle it carefully and lawfully.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. Any revised version will apply from the date it is made available. We encourage customers to review it periodically.

Privacy and trust are important to us. Our aim is to process personal data responsibly, transparently, and only when needed for legitimate business purposes and lawful service delivery.

This policy applies to all Carpet Cleaners Islington customers in area.