Privacy Policy - Highams Park Carpet Cleaners

This Privacy Policy explains how Highams Park Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Highams Park Carpet Cleaners customers in the area, including individuals who enquire about, book, receive, or pay for our carpet cleaning and related services. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Highams Park Carpet Cleaners provides carpet cleaning and associated cleaning services to residential and commercial customers in the local area. For the purposes of data protection law, we act as the data controller in relation to the personal data we collect and use for the operation of our services. This means we determine why and how your personal data is processed.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing our customer relationships, and meeting legal obligations. The categories of data we may collect include:

• Identity details such as your name and title.
• Contact details such as your address, email address, and telephone number.
• Service information including property access details, room or area requirements, stain or fabric notes, and service preferences.
• Payment information such as billing records and transaction details. We do not store full payment card details unless necessary through secure third-party payment systems.
• Communication records including emails, messages, call notes, and service-related correspondence.
• Technical information where relevant, such as basic website or device usage data if you visit our online services.
• Marketing preferences if you choose to receive updates, offers, or news from us.

We do not intentionally collect special category data unless you choose to provide it and it is necessary for the service. For example, you may share information relevant to health, allergies, or access needs so that we can safely provide our services. Where such information is shared, we handle it with extra care and only where legally permitted.

3. How We Use Your Data

We use personal data for legitimate business and service purposes, including:

• to respond to enquiries and provide quotations;
• to schedule, deliver, and manage carpet cleaning services;
• to communicate about appointments, changes, and follow-up matters;
• to process payments, issue invoices, and maintain records;
• to handle complaints, disputes, or service concerns;
• to improve our service quality and customer experience;
• to comply with legal, tax, accounting, and regulatory obligations;
• to send marketing communications where permitted and where you have not opted out.

We will always aim to ensure that any use of your data is relevant, proportionate, and limited to what is necessary for the intended purpose.

4. Lawful Basis for Processing

We process personal data only where we have a lawful basis under UK GDPR. The lawful bases we rely on may include:

Contract

We process your data when it is necessary to enter into or perform a contract with you, such as arranging and delivering carpet cleaning services.

Legal obligation

We may process and retain certain data to meet accounting, tax, insurance, or regulatory requirements.

Legitimate interests

We may process data where it is in our legitimate interests to do so, provided your rights and freedoms do not override those interests. This may include maintaining customer records, improving services, preventing fraud, and managing business operations.

Consent

Where required, such as for certain marketing communications or the use of optional information, we will rely on your consent. You may withdraw consent at any time.

Vital interests

In rare cases, we may process personal data where it is necessary to protect someone’s vital interests, for example in an emergency situation.

5. Sharing Your Data and Processors

We do not sell your personal data. We may share it only when necessary and lawful. This may include sharing with trusted third parties who act as processors on our behalf. These processors are required to handle data securely and only according to our instructions.

Examples of processors may include:

• payment processing providers;
• accounting and bookkeeping software providers;
• appointment scheduling or customer management systems;
• IT support and cloud storage providers;
• communication service providers such as email or messaging platforms;
• professional advisers, including accountants or legal advisers, where necessary.

We may also share personal data with public authorities, courts, insurers, or law enforcement bodies where we are required to do so by law or where disclosure is necessary to protect our rights, your safety, or the safety of others.

Where processors handle personal data on our behalf, we take steps to ensure they provide appropriate security, confidentiality, and data protection standards. All data sharing is limited to the minimum necessary for the relevant purpose.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, and operational requirements. Retention periods may depend on the type of data and the reason for processing.

• Customer and service records are generally retained for the duration of our business relationship and for a reasonable period afterwards.
• Financial records are retained for the period required by tax and accounting law.
• Communication records may be kept for as long as needed to resolve disputes, provide customer support, or maintain service history.
• Marketing data is retained until you withdraw consent or opt out, or until it is no longer useful for the purpose collected.

When data is no longer required, we will securely delete, anonymise, or dispose of it.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness practices, and careful selection of service providers. Although no system can be guaranteed completely secure, we work to maintain a level of protection appropriate to the risks involved.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances of the processing:

• Right of access – you can request a copy of the personal data we hold about you.
• Right to rectification – you can ask us to correct inaccurate or incomplete data.
• Right to erasure – in certain cases, you can ask us to delete your data.
• Right to restrict processing – you may ask us to limit the use of your data in certain situations.
• Right to data portability – you may request data you provided to us in a machine-readable format where applicable.
• Right to object – you may object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached. We encourage you to raise concerns with us first so we can attempt to resolve the matter.

9. Cookies and Similar Technologies

If we use online services that rely on cookies or similar technologies, these may help with site functionality, analytics, or preferences. Where required, we will provide information about such technologies and obtain consent where necessary. You can adjust browser settings to manage cookies, though this may affect how some features work.

10. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is incidentally provided by an adult customer in connection with a service booking or access requirement. If we become aware that we have collected data from a child without appropriate legal basis, we will take steps to delete it.

11. International Transfers

If any personal data is transferred outside the United Kingdom, we will ensure that suitable safeguards are in place so that the data remains protected in accordance with applicable data protection law. Such safeguards may include approved contractual protections or transfers to countries with adequate protection standards.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

13. Summary of Our Commitment

At Highams Park Carpet Cleaners, we are committed to processing personal data lawfully, transparently, and responsibly. We only collect what we need, we use it for clear and legitimate purposes, and we keep it only for as long as necessary. We also work with trusted processors, safeguard your information, and respect your data protection rights.

Effective for all Highams Park Carpet Cleaners customers in the area.