Privacy Policy
Carpet Cleaning Westminster Privacy Policy
This Privacy Policy explains how Carpet Cleaning Westminster collects, uses, shares, and protects personal data of its customers and prospective customers within the Westminster area. It is intended to comply with the General Data Protection Regulation and relevant UK data protection laws. By engaging our services or contacting us about our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Carpet Cleaning Westminster customers and potential customers located in the Westminster area who interact with us, whether by phone, in person, through our website, or through any other communication channel. It covers personal data collected in connection with carpet cleaning and related services, including quotations, bookings, service delivery, and after-care.
Data Controller
Carpet Cleaning Westminster is the data controller for the personal data described in this Privacy Policy. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
Types of Personal Data We Collect
We only collect personal data that is necessary for providing our services and managing our business relationship with you. The types of data we may collect include:
Identification data: name, title, and, where relevant, company or building name.
Contact details: service address, billing address, and general location information within Westminster, as well as other contact details that you provide to us, such as an online contact form reference.
Service information: details of the services you request, property type and access notes relevant to the service, preferred dates and times, and related instructions.
Communication records: records of communications between you and Carpet Cleaning Westminster, including enquiries, quotations, booking confirmations, feedback, and complaints.
Billing and transaction data: details related to invoices, amounts due, payment status, and transaction histories. We do not store full payment card details; where payments are processed through a payment provider, the provider will collect and process your card data on our behalf.
Technical and usage data: basic technical information associated with your use of our website or online tools, such as IP address, device type, browser type, and pages visited, to the extent necessary for security, troubleshooting, and service improvement.
How We Collect Your Data
We collect personal data directly from you when you request a quote, make a booking, communicate with us about a service, or provide feedback. Data may be collected by phone, in person, via our website, through online forms, or through other communication channels that we use.
We may also obtain limited information from third parties where this is necessary and lawful, such as payment processors confirming a successful transaction or online platforms that you use to contact us about our services.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis to do so under the GDPR and applicable UK data protection laws. The main lawful bases we rely on are:
Performance of a contract: We process your data to take steps at your request before entering into a contract and to perform the contract once it is in place. This includes providing quotations, managing bookings, delivering carpet cleaning services, issuing invoices, and handling related customer service.
Legal obligations: We process certain data to comply with legal obligations, such as maintaining accounting records, complying with tax requirements, and responding to lawful requests from public authorities.
Legitimate interests: We may process data where necessary for our legitimate business interests and where these are not overridden by your interests or fundamental rights and freedoms. This includes improving our services, managing our business operations, protecting our assets, preventing fraud, and handling customer queries and complaints.
Consent: In limited cases, we may rely on your consent, for example, for certain types of direct marketing communications. Where processing is based on consent, you can withdraw your consent at any time, and we will stop the processing for that purpose.
Purposes for Which We Use Personal Data
We use your personal data for the following purposes:
To provide quotations, arrange visits, and deliver carpet cleaning and related services.
To communicate with you about your bookings, service updates, access arrangements, and follow-up care.
To manage billing, payments, and accounting, as well as to address any payment issues.
To respond to enquiries, feedback, and complaints, and to ensure a consistent level of service quality.
To improve our services, processes, and customer experience, including through analysis of aggregated customer data.
To maintain the security and integrity of our systems and to prevent or investigate fraud or misuse.
To comply with legal and regulatory obligations that apply to our business.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to satisfy legal, accounting, or reporting requirements.
Customer and service records: We typically retain basic customer and service information for a period necessary to manage our ongoing relationship and to handle potential queries or claims. This may extend for several years after the last service was provided, in line with statutory limitation periods.
Billing and financial records: We retain invoice and transaction data for the period required under tax and accounting laws.
Technical and usage data: Technical logs and diagnostic data are retained for a limited period necessary for security, troubleshooting, and service improvement, after which they are deleted or anonymised.
When personal data is no longer required, it will be securely deleted, anonymised, or otherwise removed from our systems.
Data Processors and Third-Party Recipients
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged to provide services that support our business operations and are only permitted to process your data in accordance with our instructions and for specified purposes.
Examples of such processors and third parties include:
Payment processing providers, who handle card or online payments on our behalf.
Accountants or bookkeeping services, who assist with our financial and tax obligations.
IT and hosting providers, who support the operation and security of our systems and website.
Communication service providers, who help us manage customer communications and appointment reminders.
Where required by law, we may also share personal data with regulatory authorities, law enforcement agencies, or other public bodies.
We do not sell your personal data to third parties.
International Data Transfers
Where any of our processors or service providers transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with data protection laws. This may include reliance on adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms.
Your Data Protection Rights
Under the GDPR and applicable UK data protection laws, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these rights include:
Right of access: You can request confirmation that we are processing your personal data and obtain a copy of that data, together with information about the processing.
Right to rectification: You can request that inaccurate or incomplete personal data we hold about you be corrected or updated.
Right to erasure: You can request that we delete your personal data where there is no good reason for us to continue processing it, subject to legal and legitimate business requirements.
Right to restriction of processing: You can request that we restrict the processing of your personal data in certain circumstances, for example, while we verify its accuracy or consider an objection.
Right to data portability: You can request that we provide you with certain personal data in a structured, commonly used, and machine-readable format or transfer it to another controller where technically feasible.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests as the lawful basis, including for direct marketing. We will stop processing your data for such purposes unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is required for legal claims.
Right to withdraw consent: Where we process your data based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how Carpet Cleaning Westminster handles your personal data, you can contact us using the contact details you normally use when communicating with us about our services.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your rights have been infringed or that your personal data has been processed in a way that does not comply with applicable laws. We would, however, appreciate the opportunity to address your concerns directly before you approach a supervisory authority.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures are designed to provide a level of security appropriate to the risks presented by the processing and the nature of the data.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any changes will be effective from the date of publication of the updated policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.