Privacy Policy

Northolt Carpet Cleaners is committed to protecting the privacy of our customers and visitors. This Privacy Policy explains how we collect, use, store, share, and protect personal data in connection with the services we provide. It applies to all Northolt Carpet Cleaners customers in the area and to anyone who interacts with us in relation to our cleaning services.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully to understand how your information is handled.

1. Information We Collect

We may collect and process the following categories of personal data:

Identity information: name, title, and any details you provide when requesting a quotation or booking a service.
Contact information: address, phone number, and email address.
Service information: details relating to the carpet cleaning, upholstery cleaning, stain removal, or related services you request.
Payment information: payment status, billing records, and transaction references. We do not necessarily store full payment card details if a third-party payment processor handles the payment.
Communications: messages, calls, emails, feedback, and complaints.
Technical information: limited device or usage data if you interact with our digital systems, such as IP address or browser type, where applicable.
Property and access details: information needed to carry out services safely and effectively, such as property access instructions or scheduling preferences.

We only collect data that is relevant and necessary for the services we provide. Where possible, we rely on information you give us directly. In some cases, we may also receive data from third parties such as payment providers, referral partners, or subcontracted service providers working on our behalf.

2. How We Use Your Personal Data

We use personal data for the following purposes:

To provide quotes, accept bookings, and deliver cleaning services.
To communicate with you about appointments, service updates, and service-related issues.
To process payments and maintain accounting records.
To manage customer relationships and respond to enquiries or complaints.
To improve our services, customer experience, and operational efficiency.
To comply with legal obligations, including tax, accounting, and consumer law requirements.
To protect our business, customers, staff, and property from fraud, misuse, or unlawful activity.

We do not use your personal data for unrelated purposes unless we are permitted to do so by law or have obtained your consent where required.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis to process personal data. We rely on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes arranging services, managing bookings, delivering carpet cleaning work, and handling payment or service follow-up.

Legal Obligation

We process certain data to meet legal obligations, such as record keeping for tax and accounting purposes, responding to lawful requests, and maintaining compliance with regulatory requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining service records, improving our operations, handling customer enquiries, preventing fraud, and ensuring the security of our business.

Consent

In limited situations, we may rely on your consent, for example if we need permission for a specific type of communication or optional activity. Where we rely on consent, you may withdraw it at any time.

4. Sharing Your Data and Processors

We do not sell your personal data. However, we may share it with trusted third parties, known as processors, where necessary to run our services. Processors act on our instructions and are required to protect your data appropriately.

Examples of processors and service providers may include:

Payment processors for handling transactions securely.
Scheduling or administrative systems used to manage bookings and service records.
IT and cloud service providers that host or support business data and communications.
Accountants or bookkeeping providers assisting with financial and tax records.
Subcontractors or operational partners who help deliver services under our direction.

We may also disclose personal data where required by law, to public authorities, law enforcement, insurers, legal advisers, or other organisations when it is necessary to protect our legal rights or comply with a legal obligation.

Where data is shared with processors, we take reasonable steps to ensure that appropriate contractual and security measures are in place. We only share the minimum information required for the relevant task.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, or reporting requirements. Retention periods vary depending on the type of information and the purpose of processing.

Customer service and booking records are generally retained for as long as needed to provide services and deal with follow-up matters.
Financial and tax records are retained for the period required by applicable law.
Communication records may be retained for a reasonable period to manage queries, disputes, and service history.
Inactive or unnecessary records are securely deleted, anonymised, or archived when no longer required.

When determining retention periods, we consider the nature of the data, the potential risk of harm from unauthorised use or disclosure, and the purpose for which the data was processed. Once data is no longer needed, it is removed in a secure manner.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality practices, and limited retention of sensitive records.

Although we work hard to safeguard personal data, no system is completely secure. We therefore cannot guarantee absolute security, but we continually review our practices to improve data protection.

7. Your Rights Under GDPR

You have a number of rights regarding your personal data. Subject to legal conditions and exemptions, these rights may include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete information.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to ask us to limit how we use your data in certain situations.
Right to data portability: to receive certain data in a structured, commonly used format where applicable.
Right to object: to object to processing based on legitimate interests or direct marketing, where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to contact us first so we can try to resolve any concerns.

8. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from individuals under the age of 16 unless it is necessary in connection with a service request made by a parent, guardian, or lawful representative. If we become aware that we have collected such data without appropriate authority, we will take reasonable steps to delete it.

9. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect the information in accordance with data protection law. This may include the use of approved contractual protections or transfers to jurisdictions with adequate safeguards.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business operations, or data handling practices. Any updated version will apply from the date it is issued unless stated otherwise. We encourage you to review this policy periodically so you remain informed about how your information is protected.

11. Contact and Complaints

If you have questions about this Privacy Policy or wish to exercise your rights, please use the appropriate communication channel provided in your service records. We will respond in accordance with data protection law and aim to handle requests fairly, promptly, and transparently.

Summary: This policy explains how Northolt Carpet Cleaners collects, uses, stores, shares, and protects customer data, including lawful bases, retention, processors, and GDPR rights.

By using our services, you acknowledge that you have read and understood this Privacy Policy. All Northolt Carpet Cleaners customers in area are covered by this policy.