Privacy Policy - Carpet Cleaners Barnet

This Privacy Policy explains how Carpet Cleaners Barnet collects, uses, stores, shares, and protects personal data when providing services to customers in Barnet and the surrounding area. It applies to all Carpet Cleaners Barnet customers in the area, including private households, landlords, tenants, and commercial clients who request or receive cleaning services. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, you acknowledge that your personal data may be processed for the purposes described in this policy. We respect your privacy and aim to collect only the information necessary to deliver our services effectively and safely.

1. Who We Are

Carpet Cleaners Barnet is the data controller for the personal data collected in connection with our cleaning services. This means we decide how and why your personal information is processed. We are responsible for ensuring that any processing is lawful, secure, and limited to relevant business purposes.

This policy covers data gathered through service enquiries, booking requests, customer communication, site visits, invoicing, payment handling, and service delivery. It also applies to information obtained from third parties where necessary to arrange or complete a service.

2. Personal Data We Collect

We only collect data that is necessary for providing our cleaning services, managing customer relationships, and meeting legal or operational requirements. The types of personal data we may collect include:

Identity data such as your name, title, and any business name provided.
Contact data such as address, email address, and telephone number.
Service data such as property details, cleaning preferences, booking dates, access instructions, and service history.
Payment and billing data such as invoice details, payment status, and transaction records.
Communication data such as messages, notes from calls, complaints, and feedback.
Technical data such as limited device or browser information if you contact us through digital systems used for administration.

We do not intentionally collect special category data unless it is strictly necessary and you choose to provide it. If such data is shared with us, for example information relating to access needs or health considerations that affect service delivery, we will process it only where lawful and appropriate safeguards are in place.

3. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange bookings and manage appointments.
To deliver carpet cleaning and related services.
To communicate about service changes, arrival times, or aftercare information.
To issue invoices, process payments, and maintain financial records.
To manage customer accounts, complaints, and service follow-up.
To maintain internal records and improve our operations.
To comply with legal, tax, accounting, and regulatory obligations.

We may also use anonymised or aggregated information for business analysis. This information does not identify you directly and is therefore not treated as personal data.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the activity, we rely on the following lawful bases:

Contract

We process personal data when it is necessary to take steps at your request before entering into a contract, or to perform a contract for carpet cleaning or related services. This includes booking management, service delivery, payment processing, and customer communication connected to the service.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include service administration, internal record keeping, responding to enquiries, fraud prevention, and quality assurance. We always consider the impact on your privacy before relying on this basis.

Legal Obligation

We process certain data where required to comply with legal obligations, including tax law, accounting rules, consumer protection requirements, and record retention duties.

Consent

In limited circumstances, we may ask for your consent, for example where you choose to receive certain optional communications or provide information that is not necessary for the service. Where consent is used, you may withdraw it at any time.

Vital Interests

In rare situations, we may process data where necessary to protect someone’s vital interests, such as in an emergency involving access to a property or welfare concerns.

5. Sharing Your Information

We only share personal data when necessary and with appropriate safeguards. Data may be shared with:

Processors that support our business operations, such as booking systems, invoicing tools, secure storage providers, IT support, and payment service providers.
Professional advisers including accountants, auditors, insurers, or legal advisers where needed.
Public authorities or regulatory bodies where disclosure is required by law.
Subcontractors or service personnel involved in completing the work, where relevant and only to the extent needed.

We require all processors to handle personal data securely, use it only for our instructions, and comply with applicable data protection obligations. We do not sell your personal data.

6. International Transfers

If any of our processors store or access data outside the UK, we ensure appropriate safeguards are in place. This may include adequacy regulations, standard contractual clauses, or equivalent protections designed to keep your data secure and compliant with UK GDPR requirements.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected. The retention period depends on the type of data and the reason for processing.

Customer and service records are normally retained for the duration of the customer relationship and for a reasonable period after completion of the service.
Financial and invoicing records are retained for the period required by tax and accounting law.
Communication records may be retained for a period needed to resolve disputes, maintain service history, or meet operational needs.
Consent-based records are kept only until consent is withdrawn or the purpose ends.

When personal data is no longer needed, it is securely deleted, anonymised, or archived in accordance with our retention practices. We use data minimisation to ensure we do not keep information longer than necessary.

8. Data Security

We take the security of personal data seriously. Appropriate technical and organisational measures are used to protect information against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include restricted access, secure systems, password protection, staff awareness, and careful control over paper and digital records.

No system can be guaranteed completely secure, but we work to maintain a level of protection appropriate to the nature of the data we handle.

9. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may apply in different circumstances and are subject to legal conditions and exemptions.

Right of access – you may request confirmation of whether we process your personal data and obtain a copy of it.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – you may request deletion of your data where there is no legal reason for us to keep it.
Right to restriction – you may ask us to limit processing in certain situations.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to data portability – you may request that certain data be provided in a structured, commonly used format where applicable.
Right to withdraw consent – where processing relies on consent, you may withdraw it at any time.

If you exercise any of these rights, we will respond in line with legal requirements and within the relevant time limits. We may need to verify your identity before actioning a request.

10. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is necessary for a household service and supplied by an adult customer. If we learn that we have collected data unlawfully from a child, we will take steps to delete it where appropriate.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or service arrangements. The latest version will always apply to all Carpet Cleaners Barnet customers in the area. We encourage you to review this policy periodically to stay informed about how your personal data is handled.

12. Summary of Your Privacy Commitment

We are committed to processing personal data lawfully, fairly, and transparently. We collect only what we need, use it for clear business and service purposes, keep it only for as long as necessary, and protect it using suitable safeguards. Where processors assist us, they are required to handle data responsibly and in accordance with data protection law. You remain in control of your personal information and may exercise your rights where applicable.

This policy is intended to provide a clear and accessible explanation of our privacy practices for all customers using Carpet Cleaners Barnet services in the area.