Privacy Policy - Upper Norwood Carpet Cleaners

This Privacy Policy explains how Upper Norwood Carpet Cleaners collects, uses, stores, and protects personal data in connection with our carpet cleaning, upholstery cleaning, rug cleaning, stain treatment, and related household and commercial cleaning services. It applies to all Upper Norwood Carpet Cleaners customers in the area, including prospective customers, existing customers, and individuals who interact with us on behalf of a business, property, or household.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy sets out what data we collect, why we collect it, how long we keep it, who may process it on our behalf, and the rights available to you.

1. Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing customer relationships, meeting legal obligations, and improving our operations. The type of data we may collect includes:

Identity information such as your name and title.
Contact details such as your address, email address, and phone number.
Service details including the type of cleaning requested, property access notes, preferred dates, and special instructions.
Payment and transaction information such as billing records, payment status, and service history.
Communication records including enquiries, complaints, feedback, and correspondence.
Technical data such as basic device or browser information if you contact us through digital channels.
Location-related information necessary to identify the service area and attend the property.

We do not seek to collect sensitive data unless it is strictly necessary. If you choose to provide additional information, such as access needs or health-related notes relevant to service delivery, we will only use that information for the specific purpose for which it was shared.

We ask that you do not provide unnecessary personal details.

2. How We Use Personal Data

We use personal data for the following purposes:

To provide quotations, schedule appointments, and deliver cleaning services.
To manage customer accounts and service records.
To communicate about bookings, updates, follow-up service, and customer support.
To issue invoices, process payments, and maintain accounting records.
To respond to enquiries, disputes, complaints, and claims.
To improve the quality, safety, and efficiency of our services.
To comply with legal, tax, insurance, and regulatory obligations.
To prevent fraud, misuse, or other unlawful activity.

Where appropriate, we may also use aggregated or anonymised information for business analysis. This information does not identify any individual customer.

3. Lawful Basis for Processing

We process personal data only when we have a valid lawful basis under data protection law. Depending on the nature of the interaction, the lawful basis may be one or more of the following:

Contract: We process data when it is necessary to prepare for, enter into, or perform a contract with you. This includes arranging cleaning services, taking instructions, and completing the agreed work.
Legal obligation: We may process data to meet legal requirements, including tax, accounting, insurance, and record-keeping obligations.
Legitimate interests: We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include customer service, service improvement, internal administration, and fraud prevention.
Consent: In limited cases, we may rely on your consent, for example where you voluntarily agree to receive certain types of marketing communication. You may withdraw consent at any time.

When we rely on legitimate interests, we ensure that the processing is proportionate and that suitable safeguards are in place. When we rely on consent, it will be obtained in a clear and informed way.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These third parties act as processors or, in limited cases, independent controllers. We ensure that any third party handling personal data does so under appropriate contractual and security arrangements.

Examples of processors may include:

Payment service providers who process card or electronic payments.
Accounting and bookkeeping providers who assist with invoicing, tax, and financial administration.
IT and cloud storage providers who support secure storage, email, and business systems.
Customer management or scheduling tools used to organise appointments and service records.
Professional advisers such as insurers, legal advisers, or auditors where required.

We may also disclose personal data if required by law, court order, regulatory authority, or to protect our rights, property, customers, or staff. We do not sell your personal data.

Any processor we use is expected to protect your data and use it only according to our instructions.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected, including to meet legal, accounting, or reporting requirements. The retention period depends on the type of data and the reason for processing.

Customer service and booking records are generally kept for the period needed to manage the service relationship and handle follow-up matters.
Invoice, payment, and tax records are usually retained for the period required under financial and tax laws.
Correspondence and complaint records may be kept for a reasonable period to evidence communications and resolve issues.
Marketing consent records, where applicable, are retained until consent is withdrawn or the record is no longer needed.

When data is no longer required, we will delete it securely or anonymise it so it can no longer identify you.

6. Security of Personal Data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and limited data sharing on a need-to-know basis.

While we work hard to safeguard personal data, no system can be guaranteed to be completely secure. If a data incident occurs that may affect your rights or freedoms, we will respond in line with applicable legal requirements.

7. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to legal limitations, and not all rights will apply in every case. Your rights may include:

Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may ask us to correct inaccurate or incomplete information.
Right to erasure: You may request deletion of your data in certain circumstances.
Right to restriction: You may ask us to restrict the use of your data in certain situations.
Right to object: You may object to processing based on legitimate interests or direct marketing.
Right to data portability: You may request certain data in a structured, commonly used format where applicable.
Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We will handle requests within the time limits required by law.

Exercising your rights will not usually affect the services we provide, unless the data is necessary for that service or for legal compliance.

8. Marketing Communications

We may send service-related communications that are necessary for bookings, reminders, or customer administration. These are not marketing messages. If we ever send promotional communications and need consent, we will only do so where permitted by law and you can opt out at any time.

Where you object to direct marketing, we will stop using your data for that purpose.

9. Children’s Data

Our services are not directed to children, and we do not knowingly collect personal data from children except where it is incidentally provided by an adult customer in connection with a property or service appointment. If we become aware that we have collected data from a child inappropriately, we will take steps to delete it where required.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

11. Summary of Our Commitment

Upper Norwood Carpet Cleaners is committed to treating your personal data with care, transparency, and respect. We collect only the data we need, use it for clear and legitimate purposes, keep it only as long as necessary, and take steps to ensure it is shared and protected responsibly.

This Privacy Policy applies to all Upper Norwood Carpet Cleaners customers in area. By using our services or contacting us for assistance, you acknowledge that your personal data may be processed in accordance with this policy and applicable data protection law.