Privacy Policy - East Bedfont Carpet Cleaners

This Privacy Policy explains how East Bedfont Carpet Cleaners collects, uses, stores, shares, and protects personal data when providing services to customers in East Bedfont and the surrounding area. It applies to all East Bedfont Carpet Cleaners customers in area, including prospective customers, current customers, and individuals who interact with us in connection with our cleaning services. We are committed to handling personal data in a lawful, fair, transparent, and secure manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

East Bedfont Carpet Cleaners provides carpet cleaning and related property cleaning services to residential and commercial customers. For the purposes of data protection law, we are the data controller for the personal data we collect and use in connection with our services. This means we decide how and why your personal data is processed.

We only collect information that is relevant and necessary for the delivery of our services, operational management, legal compliance, and customer support. We aim to keep all information accurate, up to date, and limited to what is required.

2. Personal Data We Collect

Depending on the nature of your interaction with us, we may collect the following categories of personal data:

Identity information such as your name and title.
Contact information such as address and email address.
Service details including property access notes, cleaning preferences, and service history.
Payment-related information such as payment confirmations and transaction references. We do not store full payment card details unless this is handled securely by a payment provider.
Communication records including enquiries, complaint details, and customer correspondence.
Technical and usage information where relevant, such as basic service logs or records created through online or digital communication tools.
Special category data only where you voluntarily provide it and where it is necessary, for example access needs or health-related information relevant to service delivery, subject to additional protections.

We do not intentionally collect more personal data than is needed for the purpose for which it is processed.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide quotations, confirm bookings, and deliver cleaning services;
to manage customer accounts and service records;
to communicate about appointments, changes, or service-related matters;
to process payments and maintain accounting records;
to handle complaints, disputes, and follow-up requests;
to improve our services, customer experience, and operational processes;
to meet legal, regulatory, and tax obligations;
to protect against fraud, misuse, or unlawful activity.

We will only use your personal data for the purposes for which it was collected, unless we reasonably believe we need to use it for a compatible purpose or where the law allows or requires us to do so.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. East Bedfont Carpet Cleaners relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you, such as when you request a quote, make a booking, or receive cleaning services.

Legal Obligation

We may process personal data where required to comply with legal obligations, including accounting, tax, record-keeping, and regulatory requirements.

Legitimate Interests

We may process personal data for our legitimate business interests, such as improving our services, maintaining business records, preventing fraud, and ensuring the effective running of our operations. Where we rely on legitimate interests, we consider whether our interests are overridden by your rights and freedoms.

Consent

In limited cases, we may rely on your consent, for example where you voluntarily provide additional information that is not required for service delivery or where consent is legally required. You have the right to withdraw consent at any time where processing is based on consent.

Vital Interests or Public Task

These lawful bases are unlikely to apply to our standard services, but they may be used where necessary in exceptional circumstances.

5. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to operate our business and provide services. These third parties act either as independent controllers or as processors acting on our behalf. We only share the minimum data necessary and require appropriate confidentiality and data protection measures.

Examples of processors or service providers may include:

Booking and scheduling providers used to manage appointments and service administration;
IT and cloud storage providers used to securely store business records and communications;
Payment processing providers used to handle transactions securely;
Accounting and bookkeeping providers used for financial administration;
Communication service providers used to send messages or respond to enquiries;
Professional advisers such as accountants, insurers, or legal advisers where necessary.

We do not sell personal data. We do not allow processors to use your data for their own purposes. If a third party receives personal data outside the UK or EEA, we will ensure appropriate safeguards are in place in accordance with data protection law.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, including legal, accounting, and reporting requirements. Retention periods depend on the type of information and the reason it is held.

Customer service records are typically retained for a period necessary to manage ongoing service relationships and resolve disputes.
Financial and tax records are retained for the period required by law.
Communications and complaint records may be kept for a reasonable time after the interaction ends to support customer care and legal defence.
Consent-based data is kept only while consent remains valid and necessary.

When personal data is no longer needed, we will securely delete it or anonymise it so that it can no longer identify you.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures are designed to reflect the nature of the data we handle and the risks involved. Access to personal data is limited to people who need it for legitimate business purposes.

Although no system can be guaranteed as completely secure, we regularly review our practices to reduce risk and improve data protection.

8. Your Rights

You have a number of rights regarding your personal data under data protection law. Subject to legal limits, these may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent.

If you wish to exercise any of these rights, we will respond in accordance with applicable law and may need to verify your identity before fulfilling your request.

9. Automated Decision-Making

We do not normally use fully automated decision-making or profiling that produces legal or similarly significant effects about you. If this changes, we will update this policy and provide any required information about your rights.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The updated version will apply once it is published or otherwise made available. We encourage you to review this policy periodically so that you remain informed about how we handle personal data.

11. Additional Notes

East Bedfont Carpet Cleaners only processes personal data where necessary for clear and lawful purposes. We aim to be transparent about how data is used and to respect your privacy at every stage of our service relationship. Where special category data is involved, we will apply additional safeguards and only process it when there is a lawful basis and an appropriate condition under data protection law.

By using our services, making an enquiry, or providing your details to us, you acknowledge that your personal data may be processed as described in this Privacy Policy. This policy is intended to provide a clear explanation of our data handling practices for customers in the East Bedfont area and surrounding locations served by East Bedfont Carpet Cleaners.