Privacy Policy for Carpet Cleaners Wimbledon

This Privacy Policy explains how Carpet Cleaners Wimbledon collects, uses, stores, shares, and protects personal data in connection with the services we provide. It applies to all Carpet Cleaners Wimbledon customers in the area, including individuals who enquire about our services, book an appointment, receive a quotation, make a payment, or otherwise interact with us. We are committed to handling personal data in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Carpet Cleaners Wimbledon acts as the data controller for the personal information we collect and process about our customers, prospects, and website or service users. This means we determine why and how personal data is processed when we provide carpet cleaning and related services.

2. Information We Collect

We collect only the information necessary to deliver our services, manage our business, and meet legal obligations. The types of personal data we may collect include:

Identity details such as your name and title.
Contact details such as your address, email address, and telephone number.
Service information including booking details, property access information, cleaning preferences, and service history.
Payment information such as billing details and transaction records. We do not normally store full card information where payments are handled by secure payment providers.
Communication records including enquiries, complaints, feedback, and correspondence.
Technical information where applicable, such as basic device or usage data collected through digital systems used to operate our services.
Special category data only when strictly necessary and with appropriate safeguards, for example where you voluntarily provide health-related access notes or mobility considerations relevant to service delivery.

We aim to keep data collection proportionate and relevant. We do not collect more information than is required for legitimate business purposes.

3. How We Use Your Data

We use personal data for the following purposes:

to provide carpet cleaning and related services;
to respond to enquiries and provide quotations;
to schedule, confirm, and manage appointments;
to process invoices, payments, refunds, and accounting records;
to communicate service updates and resolve issues;
to maintain service quality and customer records;
to comply with legal, tax, and regulatory obligations;
to protect against fraud, misuse, or security incidents;
to establish, exercise, or defend legal claims where necessary.

We may also use aggregated or anonymised information for internal analysis, business planning, and service improvement. Such information does not identify you personally.

4. Lawful Basis for Processing

We process personal data only where we have a lawful basis under the UK GDPR. Depending on the circumstances, our lawful bases include:

Contract

We process your data where it is necessary to enter into or perform a contract with you. This includes arranging bookings, carrying out cleaning services, issuing invoices, and managing customer accounts.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, improving services, preventing fraud, and maintaining operational records. Where we rely on legitimate interests, we consider the impact on your privacy and apply appropriate safeguards.

Legal Obligation

We may process personal data to comply with legal obligations, such as accounting requirements, tax record keeping, and responding to lawful requests from authorities.

Consent

In limited cases, we may rely on your consent, particularly for optional communications or where special category data is provided outside other lawful bases. Where consent is used, it will be freely given, specific, informed, and unambiguous, and you may withdraw it at any time.

Vital Interests

In rare situations, we may process data to protect someone’s vital interests, such as in an emergency involving a person at a property. This basis would only be used where necessary.

5. Data Sharing and Processors

We may share personal data with trusted third parties where necessary for the purposes described in this policy. These third parties may act as processors or, in some cases, independent controllers. We ensure that any processing is subject to appropriate contractual and security protections.

Processors may include:

IT and cloud service providers used for secure storage, scheduling, and communications;
payment service providers that handle transactions securely;
accounting or bookkeeping providers who assist with financial administration;
customer relationship or booking system providers that help manage appointments and records;
professional advisers such as lawyers, insurers, or auditors where necessary;
public authorities where disclosure is required by law.

We require processors to process data only on our instructions, keep it secure, and delete or return it when no longer needed. We do not sell personal data.

6. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods depend on the type of information and the reason for processing.

Customer and service records are generally retained for a period necessary to manage repeat services, resolve disputes, and support business administration.
Financial and tax records are retained for the period required by law.
Correspondence and complaint records may be retained for a reasonable period to manage service history and defend claims.
Consent-based records are kept only while consent remains valid or until no longer needed.

When personal data is no longer required, we securely delete, anonymise, or destroy it. Retention is reviewed periodically to ensure it remains proportionate and lawful.

7. Your Rights

Under data protection law, you have several rights in relation to your personal data. Subject to legal restrictions and verification of your identity, you may have the right to:

Access your personal data and receive a copy of the information we hold about you.
Rectify inaccurate or incomplete information.
Erase your data in certain circumstances, also known as the right to be forgotten.
Restrict processing in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability for information you have provided to us where processing is based on consent or contract and carried out by automated means.
Withdraw consent at any time where processing is based on consent.
Complain to the relevant supervisory authority if you believe your data rights have been infringed.

We will respond to requests in line with applicable legal timescales and requirements. If a request is complex or repetitive, we may need additional time or clarification.

8. Security of Your Data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and data minimisation practices. While no system can be guaranteed completely secure, we continually review safeguards to reduce risk.

9. International Transfers

If personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it in accordance with data protection law. Such safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We only transfer data where necessary and with suitable protections.

10. Children’s Data

Our services are generally directed to adults. We do not knowingly collect personal data from children unless it is necessary for service delivery and provided by a parent, guardian, or authorised adult. If we become aware that we have collected data unlawfully from a child, we will take appropriate steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to remain informed about how we protect personal data.

12. Summary of Our Commitment

Carpet Cleaners Wimbledon is committed to respecting privacy, using data fairly, and maintaining transparency in all processing activities. We collect only what is needed, process it lawfully, retain it for appropriate periods, and ensure our processors are bound by suitable protections. Your privacy matters to us, and we strive to handle your information with care, accountability, and respect.