Privacy Policy - Edgware Carpet Cleaners

This Privacy Policy explains how Edgware Carpet Cleaners collects, uses, stores, shares, and protects personal data when providing cleaning services to customers in our area. It applies to all Edgware Carpet Cleaners customers in area, including prospective customers, current customers, former customers, and anyone who interacts with us in connection with our services.

We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only process personal data where we have a valid legal basis and only for purposes that are necessary for operating our business and delivering our services.

1. Information We Collect

We may collect and process different types of personal data depending on how you interact with us and which services you request. The information collected may include:

Identity details such as your name and title.
Contact details such as address, email address, and phone number.
Service details such as the type of cleaning requested, property access notes, appointment dates, and special instructions.
Payment information such as billing details and payment status. We do not store full card details where payment is processed through secure payment providers.
Communications including emails, messages, feedback, complaint records, and service-related notes.
Technical information if you visit any digital services we use, such as basic device or usage data collected for security and service improvement purposes.

We do not intentionally collect special category data unless it is provided voluntarily and is necessary for a specific service request, for example, access needs that may reveal health-related information. When such data is provided, we process it only where permitted by law and with appropriate safeguards.

2. How We Use Your Personal Data

Edgware Carpet Cleaners uses personal data only for legitimate business and service purposes. We may use your information to:

provide quotations and confirm bookings;
deliver carpet cleaning and related services;
manage access, scheduling, and operational arrangements;
process payments, issue invoices, and maintain financial records;
respond to enquiries, complaints, and customer requests;
maintain business records and service history;
improve the quality, safety, and efficiency of our services;
meet legal and regulatory obligations;
protect our business, customers, and staff from fraud, misuse, or security risks.

We only use personal data for the specific purposes for which it was collected, or for closely related purposes that would reasonably be expected. We do not sell personal data.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing personal data. Depending on the context, Edgware Carpet Cleaners may rely on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes confirming services, managing appointments, carrying out cleaning work, and handling payment-related administration.

Legal Obligation

We process certain information where required to comply with legal obligations, including tax, accounting, insurance, and record-keeping requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided that those interests are not overridden by your rights and freedoms. Examples include improving our services, maintaining business security, preventing fraud, and handling customer correspondence.

Consent

Where required by law, or where no other lawful basis applies, we will ask for your consent. If we rely on consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

Vital Interests

In rare situations, we may process personal data to protect someone’s vital interests, such as in an emergency involving safety or welfare.

4. Sharing Your Information and Processors

We may share personal data with trusted third parties who act as data processors or independent controllers, where necessary for business operations or legal compliance. Any sharing is limited to the minimum required and subject to appropriate confidentiality and data protection safeguards.

Our processors may include:

Payment service providers used to handle secure payment transactions.
Accounting and bookkeeping providers used for invoicing, tax, and financial administration.
IT and software providers used for customer records, scheduling, email, storage, or security.
Professional advisers such as insurers, legal advisers, or auditors where necessary.
Waste, equipment, or logistics partners involved in service delivery where relevant.

Where we use a processor, we ensure that they only process data on our instructions, keep it secure, and comply with applicable data protection requirements. We do not permit processors to use your data for their own purposes.

We may also disclose personal data where required by law, court order, or regulatory authority, or where necessary to establish, exercise, or defend legal claims.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including to meet legal, accounting, or reporting obligations. Retention periods may vary depending on the type of information and why it is held.

In general:

Customer service and booking records are retained for a reasonable period to manage repeat services, queries, and disputes.
Invoices and financial records are kept for the period required by tax and accounting law.
Correspondence and complaints may be retained to demonstrate how issues were handled and to support service quality.
Consent records may be retained as evidence of compliance.

When data is no longer required, we will delete it, anonymise it, or securely archive it in line with our retention practices. We review retention regularly to avoid keeping data longer than necessary.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limited data sharing. While no system can be guaranteed completely secure, we work to ensure that personal data is protected to a standard appropriate to its sensitivity and the risks involved.

7. Your Rights

Depending on the circumstances and legal basis for processing, you may have the following rights under data protection law:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain situations.
Right to restriction – to ask us to limit how we use your data in certain circumstances.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to request transfer of certain data in a structured, commonly used format.
Right to withdraw consent – where we rely on consent, you can withdraw it at any time.

These rights are not absolute, and they may be subject to exceptions or limitations under law. If you wish to exercise any of your rights, we will respond in accordance with applicable legal timeframes.

8. Marketing Preferences

If we send you marketing communications, we will do so only where permitted by law. You may opt out of marketing at any time. Even if you opt out, we may still send service-related messages that are necessary for booking confirmations, service updates, invoicing, or other operational communications.

9. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place, such as adequacy regulations, contractual protections, or other lawful transfer mechanisms required by data protection law.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, operations, or data protection practices. Any updated version will apply from the date it is made available. We encourage customers to review the policy periodically so they remain informed about how their personal data is handled.

11. Our Commitment to Privacy

At Edgware Carpet Cleaners, we aim to process personal data responsibly and only where it is necessary to deliver our services and run our business effectively. We respect your privacy rights and seek to maintain clear, fair, and lawful processing at every stage. If you provide personal data to us, we will treat it with care and use it only in ways that are consistent with this policy and with applicable law.