Privacy Policy - Ruislip Carpet Cleaners

This Privacy Policy explains how Ruislip Carpet Cleaners collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all Ruislip Carpet Cleaners customers in the area, including residential and commercial clients, prospective customers, and anyone who interacts with us in connection with our services.

We are committed to handling personal data lawfully, fairly, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only collect information that is necessary for legitimate business purposes and take reasonable steps to keep it secure.

1. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity details such as your name.
Contact details such as your address, email address, and telephone number.
Service information such as the type of cleaning requested, property access details, preferred appointment times, and service notes.
Payment and billing details such as payment status, invoice information, and transaction records.
Communication records including messages, call notes, complaint details, and service feedback.
Technical and usage data if you interact with our digital systems, such as device information, browser data, or log records.

We do not intentionally collect special category data unless it is clearly relevant and lawful to do so, for example where you voluntarily provide information needed to meet an access, safety, or service requirement. Where such data is processed, we apply additional safeguards.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotes, arrange bookings, and deliver carpet cleaning services.
To manage customer accounts, invoices, and payments.
To communicate about appointments, service updates, and follow-up matters.
To respond to enquiries, complaints, and feedback.
To maintain service quality, training, and internal record keeping.
To comply with legal, tax, insurance, and regulatory obligations.
To protect our business, customers, staff, and property.

We only use personal data for the purposes for which it was collected, unless we reasonably believe that another compatible purpose is appropriate and lawful.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the context, we rely on one or more of the following:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering services, issuing invoices, and handling payment-related matters.

Legal obligation

We may process data to comply with legal and regulatory requirements, including accounting, tax, insurance, and record-keeping obligations.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include improving our services, managing customer relationships, preventing fraud, and maintaining secure operations.

Consent

In limited situations, we may rely on your consent, for example where it is needed for a specific optional purpose. If consent is used, you may withdraw it at any time, though this will not affect processing carried out before withdrawal.

4. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors on our behalf or, in some cases, as independent controllers. These may include:

Payment providers who process card or electronic payments.
Accounting and bookkeeping providers who support invoicing, reporting, and compliance.
IT and hosting providers who maintain secure systems, storage, and backups.
Customer communication tools used for scheduling, messaging, or service administration.
Professional advisers such as insurers, legal advisers, or auditors where necessary.

We require our processors to handle personal data securely, only in accordance with our instructions, and in compliance with data protection law. Where personal data is transferred outside the UK, we take appropriate steps to ensure adequate protection is in place.

We do not sell personal data. We do not share it with unrelated third parties for their own marketing purposes unless we are legally permitted to do so and, where required, you have given consent.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, and insurance requirements.

Retention periods vary depending on the type of data and the reason for processing. As a general approach:

Customer and booking records are kept for the duration of the service relationship and for a reasonable period afterwards.
Financial and invoice records are retained for the period required by law and standard accounting practice.
Communication records are retained as long as needed to manage enquiries, disputes, or service history.
Website or system logs are kept only for operational, security, and troubleshooting purposes, then deleted or anonymised.

When personal data is no longer needed, it is securely deleted, destroyed, or anonymised.

6. Security of Your Data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and periodic review of our data handling practices.

Although no method of transmission or storage is completely secure, we work to reduce risk and maintain a proportionate level of protection based on the nature of the data we process.

7. Your Rights

You have a number of rights under data protection law. These rights may apply depending on the circumstances and any legal exceptions. They include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain cases.
Right to restrict processing – to ask us to limit how we use your data in some situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to request transfer of certain data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed. We encourage you to raise concerns with us first so we can address them promptly and fairly.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is used.

9. Special Notes for Customers in the Area

This policy applies to all customers in the Ruislip area who use our carpet cleaning services or contact us about them. Whether you are arranging a one-off clean, an ongoing service, or making an enquiry, your personal data will be handled in accordance with this policy and applicable data protection law.

We believe privacy is an important part of providing a trustworthy service. Our aim is to process only the data we need, use it fairly, retain it only for as long as necessary, and ensure that your rights are respected at every stage.

Effective approach: By engaging our services, you acknowledge that personal data may be collected and processed as described in this Privacy Policy, subject always to your legal rights and protections under UK data protection law.