Privacy Policy for Carpetcleaning Harringay

This Privacy Policy explains how Carpetcleaning Harringay collects, uses, stores, shares, and protects personal data. It applies to all Carpetcleaning Harringay customers in the Harringay area, including anyone who requests a quote, books a service, receives a service, or otherwise interacts with our business. We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data We Collect

We only collect personal data that is necessary for providing our services, managing customer relationships, meeting legal obligations, and improving our operations. The types of data we may collect include:

Identity details such as your name.
Contact details such as your telephone number, email address, and service address.
Service information including details of the carpet cleaning services requested or provided, property access notes, and appointment preferences.
Payment information such as payment status, invoice records, and transaction references. We do not store more payment data than is needed for accounting and administration.
Communication records including messages, complaints, feedback, and correspondence relating to bookings or service queries.
Technical information where relevant, such as basic device or usage data collected when you interact with our online systems.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it, or unless another lawful basis applies. If such data is shared with us by accident, we will treat it with extra care and only use it where permitted by law.

2. How We Use Your Data

We use personal data for legitimate business purposes connected to the services we provide. These purposes may include:

Responding to enquiries and arranging quotations.
Booking, managing, and delivering cleaning services.
Confirming appointments and service changes.
Processing payments, issuing invoices, and maintaining financial records.
Handling complaints, refunds, and service follow-up.
Meeting legal, tax, accounting, and regulatory obligations.
Improving our services, customer experience, and operational efficiency.
Protecting against fraud, misuse, and security incidents.

We do not sell your personal data. Any use of personal information is limited to what is necessary and proportionate for our business and legal obligations.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for every processing activity. Depending on the situation, Carpetcleaning Harringay relies on one or more of the following legal bases:

Contract

We process your data when it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes managing bookings, carrying out cleaning services, and dealing with service-related communications.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided those interests do not override your rights and freedoms. This may include maintaining service records, improving operations, responding to queries, and protecting the business from misuse or fraud.

Legal Obligation

We process certain data when required to comply with the law. This can include keeping financial and tax records, responding to lawful requests, or meeting regulatory duties.

Consent

Where consent is required, we will ask for it clearly and separately. For example, this may apply to optional marketing communications. You may withdraw consent at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us provide services or operate the business. These parties act as processors or independent controllers depending on the nature of the relationship.

Examples of processors may include:

Payment providers who process transactions securely.
Booking and administration systems that help manage appointments and customer records.
Accounting or bookkeeping providers who assist with invoicing, tax, and financial administration.
IT and cloud service providers who support data storage, backup, security, and communications.
Customer communication services that may handle emails, reminders, or service updates.

We require processors to keep personal data secure, use it only for specified purposes, and comply with data protection law. We do not allow them to use your data for their own unrelated purposes.

We may also disclose data where required by law, where necessary to protect our legal rights, or where needed to prevent harm or investigate suspected unlawful activity.

5. International Transfers

If any processor stores or accesses personal data outside the UK, we will ensure appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under UK data protection law. We take reasonable steps to ensure your data remains protected wherever it is processed.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods are determined based on the type of data, the nature of the service, and legal obligations.

As a general approach:

Customer service and booking records are kept for a period reasonably necessary to manage the customer relationship and resolve any disputes.
Financial and invoicing records are retained for the period required by tax and accounting law.
Communication records may be kept for a limited time to handle follow-up, complaints, and evidence of service.
Marketing consent records are kept until you withdraw consent or the data is no longer needed.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and restricted sharing of data on a need-to-know basis.

However, no method of transmission or storage is completely secure. While we take data protection seriously, we cannot guarantee absolute security.

8. Your Rights

You have a number of rights under UK data protection law. These rights may apply depending on the circumstances and any legal exemptions:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain cases.
Right to restriction – to ask us to limit the way we use your data in certain situations.
Right to data portability – to receive certain data in a structured, commonly used format.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

If you exercise your rights, we may need to verify your identity before responding. We will respond within the time limits required by law, usually within one month, unless the request is complex or numerous.

9. Automated Decision-Making

We do not use personal data for decisions based solely on automated processing that produce legal or similarly significant effects. If this changes in the future, we will update this policy and inform you where required.

10. Complaints

If you believe your personal data has been handled improperly, you have the right to raise a concern with us first. We will review the issue carefully and aim to resolve it fairly. You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how your data has been handled.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any updates will apply to all Carpetcleaning Harringay customers in the area from the time they take effect. We encourage you to review this policy periodically so that you remain informed about how we handle personal data.

12. Our Commitment

We are committed to processing personal data in a way that is lawful, fair, and transparent. We only collect what we need, keep it only as long as necessary, and protect it with appropriate safeguards. Privacy and trust are important to us, and we work to ensure that all personal information is handled responsibly and in line with GDPR requirements.

This Privacy Policy applies to all Carpetcleaning Harringay customers in the Harringay area.