Privacy Policy
Carpet Cleaners Surrey Privacy Policy
This Privacy Policy explains how Carpet Cleaners Surrey collects, uses, stores and protects personal data relating to our customers and prospective customers in Surrey and the surrounding area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services or contacting us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all individual customers and prospective customers of Carpet Cleaners Surrey within our service area in Surrey. It also applies to individuals who contact us with enquiries, request quotations, or visit our website. It does not cover the practices of any third parties that we do not control.
Data Controller
Carpet Cleaners Surrey is the data controller in respect of the personal data we collect and process about you. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us. The personal data we may collect includes:
Identification and contact details: name, address, property access details, and other contact details you choose to provide.
Service and booking information: details of the services you request, dates and times of bookings, notes about your property relevant to the cleaning service, and information about the outcome of services provided.
Payment and transaction information: records of payments made for our services and related transaction details. We do not store your full payment card details, as these are handled by our payment processors.
Communication records: records of communications with you, including enquiries, quotes, complaints, feedback, and any follow up correspondence.
Website and technical data: when you visit our website, we may collect technical data such as your IP address, browser type, device information, and information about how you use our website. This may be collected via cookies or similar technologies where legally permitted.
How We Collect Your Personal Data
We collect personal data directly from you when you contact us by telephone, through our website contact forms, through messaging services, or in person. We may also collect personal data when you provide details for a quote, confirm a booking, or make a payment.
In some cases, we may receive your personal data from third parties where they are authorised to share that information with us, for example, where a third party arranges a cleaning service at your property. In such cases, we will process your personal data in accordance with this Privacy Policy.
Purposes and Lawful Bases for Processing
We process your personal data only where we have a lawful basis to do so. The main purposes for which we use your personal data and their corresponding lawful bases are:
To provide our carpet cleaning and related services: including managing bookings, attending your property, carrying out cleaning services, and providing customer support. The lawful basis is performance of a contract or taking steps at your request prior to entering into a contract.
To manage our relationship with you: including handling enquiries, responding to complaints, and maintaining records of previous services to provide a consistent service. The lawful basis is performance of a contract and our legitimate interests in managing our business and customer relationships.
To process payments and accounting: including issuing invoices, processing payments and refunds, and maintaining financial records. The lawful bases are performance of a contract, compliance with legal obligations, and our legitimate interests in managing our finances.
To improve our services and operations: including analysing how customers use our services and website, reviewing feedback, and improving efficiency and quality. The lawful basis is our legitimate interests in developing and improving our business and services.
To send you service-related communications: such as booking confirmations, reminders, updates about your appointment, and essential service notifications. The lawful bases are performance of a contract and our legitimate interests in keeping you informed about your bookings.
To send you marketing communications: we may occasionally send marketing communications about our services where we have your consent or where we are otherwise permitted by law. You can opt out of marketing at any time.
To comply with legal and regulatory obligations: including maintaining appropriate records, responding to lawful requests from authorities, and complying with health and safety, tax and other legal requirements. The lawful basis is compliance with legal obligations and our legitimate interests in protecting our legal rights.
Data Retention
We keep your personal data only for as long as necessary for the purposes for which it was collected, and to comply with applicable legal, accounting or reporting requirements.
Customer and booking records are generally retained for up to seven years after the last interaction with you, in order to comply with tax and accounting rules and to manage any potential claims. Communication records will be retained for a period appropriate to the nature of the correspondence and our legitimate need to refer to it in future.
Where personal data is no longer required for the purposes for which it was collected, we will securely delete or anonymise it.
Data Processors and Third Parties
We may share your personal data with carefully selected third-party service providers who act as data processors on our behalf. These may include providers of payment processing services, IT and website hosting, booking management tools, customer relationship management systems, and professional advisers.
These processors are only permitted to process your personal data in accordance with our instructions, for the purposes described in this Privacy Policy, and are required to implement appropriate technical and organisational measures to protect your data.
We may also share your personal data with third parties where required by law, where necessary to establish, exercise or defend legal claims, or in the context of a business sale or restructuring, in which case we will ensure that your rights are protected.
International Transfers
Where any of our service providers or their systems are located outside the United Kingdom, your personal data may be transferred to and stored in another country. In such cases, we will ensure that appropriate safeguards are in place to protect your personal data, such as the use of standard contractual clauses or ensuring that the destination country has been recognised as providing an adequate level of data protection.
Security of Your Personal Data
We take the security of your personal data seriously. We implement appropriate technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, disclosure or destruction. These measures include restricting access to systems and data to personnel who need it for their role, using secure storage methods, and regular review of our security practices.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
Right of access: you have the right to request confirmation that we process your personal data and to obtain a copy of the personal data we hold about you.
Right to rectification: you have the right to request that we correct any inaccurate or incomplete personal data about you.
Right to erasure: in certain circumstances, you may have the right to request that we delete your personal data.
Right to restriction of processing: you may request that we restrict the processing of your personal data in certain situations, for example where you contest the accuracy of the data.
Right to data portability: in some cases, you may have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller.
Right to object: you have the right to object to our processing of your personal data where we rely on legitimate interests as the lawful basis, and to object at any time to the processing of your personal data for direct marketing purposes.
Right to withdraw consent: where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, please contact us using the contact details provided on our website. We may need to verify your identity before responding to your request.
Complaints
If you are concerned about how we handle your personal data, you can contact us so that we can try to resolve the issue. You also have the right to lodge a complaint with the UK data protection supervisory authority, the Information Commissioner's Office.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. Any updates will be published on our website and will take effect from the time of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.
