Privacy Policy - Gidea Park Carpet Cleaners

This Privacy Policy explains how Gidea Park Carpet Cleaners collects, uses, stores, shares, and protects personal data when providing services to customers in the Gidea Park area. It applies to all Gidea Park Carpet Cleaners customers in the area, including residential and commercial clients, and to anyone who contacts us to request a quotation, book a service, or make an enquiry. We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Gidea Park Carpet Cleaners provides carpet cleaning and related cleaning services to customers in and around Gidea Park. For the purposes of data protection law, we act as the data controller for the personal data we collect in connection with our services. This means we decide how and why your personal data is used.

2. Personal Data We Collect

We only collect personal data that is necessary to provide our services, manage our business, and comply with legal obligations. Depending on your interaction with us, we may collect the following categories of information:

Identity data such as your name and title.
Contact data such as your address, phone number, and email address.
Service details such as the type of cleaning requested, property details, preferred appointment times, and instructions relevant to the service.
Billing and payment data such as payment status, invoice records, and transaction references.
Communication data such as messages, service feedback, complaints, and notes from phone calls or emails.
Technical data such as basic website or device information if you interact with our online systems, where applicable.
Special category data only where necessary and only if you choose to provide it, for example information about allergies, access needs, or health-related considerations that affect the cleaning service. Such data is handled with extra care and only used when appropriate.

We do not intentionally collect more data than we need. Where possible, we encourage customers to avoid sharing unnecessary personal information.

3. How We Collect Personal Data

We may collect your personal data in the following ways:

When you request a quotation or make a booking.
When you communicate with us by phone, email, or through other messaging methods.
When we carry out services at your property or business premises.
When you provide feedback, raise a concern, or ask for support.
When we receive information from third parties acting on your behalf, such as landlords, letting agents, business managers, or family members who arrange services for you.

4. How We Use Your Personal Data

We use personal data only where we have a valid reason under data protection law. The main purposes for using your information are:

To provide quotations and manage bookings.
To deliver carpet cleaning and related services safely and effectively.
To communicate with you about appointments, changes, and service updates.
To process payments, issue invoices, and maintain financial records.
To handle complaints, disputes, or service issues.
To improve our services, training, and internal business processes.
To comply with legal and regulatory obligations.
To protect our business, customers, and staff from fraud, misuse, or security risks.

5. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for every use of personal data. The lawful bases we rely on include:

Performance of a Contract

We process your personal data when it is necessary to enter into or carry out a contract with you. This includes preparing quotes, confirming bookings, delivering services, and managing payments.

Legitimate Interests

We may process personal data where it is in our legitimate interests to do so, provided your rights do not override those interests. Examples include improving our services, handling customer enquiries, keeping records, preventing fraud, and maintaining business security.

Legal Obligation

Some personal data must be processed to meet legal and tax requirements, such as retaining invoices, accounting records, and proof of transactions.

Consent

In limited situations, we may rely on your consent, particularly where we process optional information or send marketing communications where consent is required. If consent is used, you can withdraw it at any time.

Vital Interests

In rare cases, we may need to use personal data to protect someone’s life or physical safety, for example if emergency access or health-related information is needed during a service visit.

6. Sharing Personal Data and Processors

We do not sell your personal data. However, we may share information with trusted third parties, known as processors, who help us run our business and deliver services. These processors are only allowed to use your data on our instructions and must keep it secure.

Examples of processors or third parties may include:

Payment providers who handle transactions securely.
IT and cloud service providers who store or support our business systems.
Accounting or bookkeeping services that support financial administration.
Scheduling or communications tools used to manage appointments and service messages.
Professional advisers such as accountants, insurers, or legal advisers where necessary.
Public authorities where we are required to provide information by law.

Where data is transferred to a processor, we take reasonable steps to ensure it is protected by appropriate contracts, confidentiality obligations, and security measures.

7. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, unless a longer retention period is required by law. The length of time we keep records depends on the type of information and the reason it was collected.

Customer booking and service records are typically retained for a period needed to manage service history and respond to queries or disputes.
Financial and tax records are retained for the period required by law and accounting rules.
Correspondence and complaints may be retained for a reasonable period to support customer service and legal protection.
Consent-based records are retained until consent is withdrawn or the information is no longer needed.

When personal data is no longer needed, we securely delete, anonymise, or archive it in accordance with our retention practices.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, limited access to records, and staff awareness of confidentiality obligations. While we take reasonable steps to protect your information, no system can be guaranteed to be completely secure.

9. Your Rights Under GDPR

You have rights over your personal data, and we respect those rights. Depending on the circumstances, these may include:

The right to be informed about how your data is used.
The right of access to request a copy of the personal data we hold about you.
The right to rectification to correct inaccurate or incomplete data.
The right to erasure, also known as the right to be forgotten, in certain situations.
The right to restrict processing in certain cases.
The right to data portability where applicable.
The right to object to processing based on legitimate interests or direct marketing.
Rights relating to automated decision-making, where applicable.

If you wish to exercise any of these rights, we will respond in line with applicable data protection law. Some requests may be limited where we have a legal obligation or a legitimate reason to retain or use the data.

10. Marketing Communications

We do not send marketing communications unless permitted by law. Where consent is needed, we will ask for it clearly. If you no longer wish to receive marketing messages, you can withdraw consent or object to such processing at any time. Service-related messages that are necessary for bookings, invoicing, or service delivery are not marketing communications.

11. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is necessary in the course of a service request and provided by a responsible adult. If we discover that we have collected information from a child without appropriate consent or legal basis, we will take steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, service practices, or business operations. The most current version will apply to your use of our services. We encourage customers to review this policy periodically so they remain aware of how their data is handled.

13. Contacting Us About Data Protection

If you have questions about this Privacy Policy, wish to exercise your rights, or are concerned about how your data has been handled, you may contact us using the usual business communication channels associated with your service arrangement. We will aim to deal with your request promptly and fairly.

Summary: Gidea Park Carpet Cleaners explains how it collects, uses, stores, shares, and protects customer data, including lawful bases, retention, processors, and GDPR rights for all area customers.