Privacy Policy - Camden Carpetcleaning

This Privacy Policy explains how Camden Carpetcleaning collects, uses, stores, shares, and protects personal data relating to its customers. It applies to all Camden Carpetcleaning customers in area, including anyone who requests a quote, books a service, receives a service, makes an enquiry, or otherwise interacts with us in connection with our carpet cleaning services.

We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We respect the privacy of our customers and ensure that personal data is processed only for legitimate purposes and kept only for as long as necessary.

1. Information We Collect

We collect and process different types of personal data depending on how you interact with us. The information we collect may include:

Identity details such as your name.
Contact details such as your address, email address, and telephone number.
Service details including the type of cleaning service requested, property access information, service history, and appointment preferences.
Payment-related information such as billing details and transaction records, where relevant.
Communication records including messages, complaints, feedback, and notes relating to your booking or enquiry.
Technical data if you interact with our digital systems, such as device information, IP address, or cookies, where applicable.

We do not intentionally collect special category personal data unless it is necessary and you have provided it for a specific reason. For example, you may tell us about allergies, accessibility needs, or health-related issues that affect how we carry out a cleaning service. In such cases, we will only process that information where appropriate safeguards are in place and where the law allows us to do so.

2. How We Use Personal Data

We use personal data for the following purposes:

To provide quotations and respond to enquiries.
To schedule, manage, and deliver cleaning services.
To communicate with customers about bookings, service updates, and related matters.
To process payments and maintain financial records.
To handle complaints, disputes, and service recovery.
To keep records of services provided and customer preferences.
To meet our legal, regulatory, tax, and accounting obligations.
To improve our services and customer experience.
To protect our business, customers, and staff from fraud, misuse, or unlawful activity.

We will only use your personal data where we have a lawful basis to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for every use of personal data. Depending on the situation, Camden Carpetcleaning relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes arranging services, confirming appointments, issuing invoices, and carrying out carpet cleaning tasks you have requested.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing customer relationships, maintaining records, improving service quality, preventing fraud, and ensuring the security of our operations.

Legal Obligation

We may process and retain certain information where required by law. This includes tax records, accounting documents, and other records needed to comply with legal or regulatory obligations.

Consent

In limited circumstances, we may rely on your consent. Where consent is used, it will be specific, informed, and freely given. You may withdraw consent at any time, although this will not affect the lawfulness of processing carried out before withdrawal.

Vital Interests

In rare situations, we may process personal data to protect someone’s vital interests, such as where an emergency arises during a service visit.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These third parties act as processors or independent controllers, depending on the service they provide. We only share data where necessary and subject to appropriate contractual and technical safeguards.

Examples of processors and service providers may include:

Booking and administration providers that support appointment management and customer records.
Payment processors that handle transactions securely.
IT, cloud storage, and software providers that host systems and support data management.
Accounting and bookkeeping providers that assist with financial administration and tax compliance.
Customer communication providers that help manage emails, messages, or service notifications.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

We require processors to process data only on our instructions, to keep it secure, and to comply with applicable data protection laws. We do not sell personal data.

5. International Transfers

If any of our service providers store or access personal data outside the United Kingdom, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other legally recognised transfer mechanisms. We take steps to ensure that your data remains protected to a standard consistent with UK data protection law.

6. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and for any additional period required by law. Retention periods depend on the type of data and the reasons for processing.

In general:

Enquiry records may be kept for a limited period after the enquiry is resolved.
Customer service records may be kept for as long as needed to manage the business relationship and any follow-up issues.
Financial and tax records are retained for the period required by law.
Complaint, dispute, and legal records may be retained for longer where necessary to defend or establish legal claims.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limiting access to personal data to those who need it for legitimate business purposes. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – you can ask us to delete your data in certain circumstances.
Right to restriction – you can ask us to limit the way we use your data in certain cases.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can ask for certain data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

We will respond to valid requests within the time limits required by law. To protect your privacy, we may need to verify your identity before fulfilling a request.

9. Marketing Preferences

We will only send marketing communications where permitted by law. If you receive marketing from us, you can opt out at any time by following the instructions provided in the message or by contacting us through the available channels. We will respect your preferences and stop sending marketing where required.

10. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children except where it is provided incidentally in connection with a household booking or service arrangement. If we become aware that we have collected personal data from a child without appropriate authorisation, we will take reasonable steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or data protection obligations. Any updates will take effect when the revised policy is published or otherwise made available. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

12. How We Handle Complaints

If you believe your data protection rights have been breached, you may raise a concern with us so that we can review the matter. We take privacy concerns seriously and will investigate any complaint relating to the handling of personal data. You also have the right to lodge a complaint with the relevant data protection authority if you are dissatisfied with our response.

This Privacy Policy is designed to give clear and transparent information about how Camden Carpetcleaning handles personal data. By using our services, you acknowledge that your information may be processed in line with this policy and applicable law.