Privacy Policy - Carpetcleaning Nw1

Carpetcleaning Nw1 is committed to protecting the privacy and personal data of all customers in the NW1 area. This Privacy Policy explains how we collect, use, store, share, and protect personal data in connection with our carpet cleaning services. It applies to all Carpetcleaning Nw1 customers in area, including individuals who enquire about our services, make a booking, receive a quotation, or otherwise engage with us for cleaning-related work.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws. We aim to handle information lawfully, fairly, and transparently, while keeping it secure and using it only for legitimate business purposes.

1. Personal Data We Collect

We collect only the information necessary to provide and manage our services. Depending on your interaction with us, this may include:

Identity details such as your name, title, and any preferred contact name.
Contact details such as postal address, email address, and telephone number.
Service details including property access information, room or carpet descriptions, cleaning requirements, and appointment preferences.
Payment-related information such as transaction records and payment confirmation details. We do not keep card details unless required by a secure payment provider.
Communication records including messages, enquiries, complaints, and service-related notes.
Technical data where relevant, such as basic website usage information, device data, or IP address, if you interact with our digital systems.

We do not intentionally collect special category data unless it is necessary for a specific reason and we are legally permitted to do so. If such data is ever provided, we will handle it with additional care and only where appropriate.

2. How We Use Personal Data

We use personal data to operate our business and deliver our carpet cleaning services effectively. The purposes for which we may process your information include:

responding to enquiries and providing quotations;
arranging bookings and delivering services;
managing customer accounts, appointments, and service records;
processing payments and keeping financial records;
handling complaints, disputes, and customer support requests;
maintaining service quality, safety, and business administration;
meeting legal, tax, and accounting obligations;
preventing fraud, misuse, or unlawful activity;
improving our services and internal operations.

We will only use your personal data for the purpose for which it was collected, unless we reasonably consider that another compatible purpose applies. When that is the case, we will make sure the new use remains fair and lawful.

3. Lawful Basis for Processing

We only process personal data where we have a valid lawful basis under data protection law. The lawful bases we rely on may include the following:

Contract

We process personal data where it is necessary to take steps before entering into a contract, or to perform a contract with you. This includes managing bookings, providing cleaning services, issuing invoices, and handling service-related communications.

Legal Obligation

We may process information where it is necessary to comply with legal obligations, such as tax, accounting, insurance, or regulatory requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This can include service improvement, record keeping, security, business management, and responding to customer enquiries.

Consent

In limited cases, we may rely on your consent, for example where law requires consent for a particular type of communication or data use. Where consent is used, you may withdraw it at any time.

We always assess the processing activity and use the lawful basis that best fits the purpose.

4. Data Sharing and Processors

We may share personal data with trusted third parties where necessary for the operation of our business. These third parties act as processors or independent controllers depending on the service they provide. We require appropriate safeguards to protect your information.

Examples of processors or service providers may include:

IT and hosting providers that support data storage, email systems, and business software;
accounting and bookkeeping services that help manage invoices, payments, and tax records;
payment processing providers that handle secure transactions;
customer management systems used for scheduling and service administration;
professional advisers such as lawyers, accountants, or insurers where necessary.

We may also disclose personal data if required by law, by a court order, or to protect our legal rights, property, staff, customers, or the public. We do not sell personal data.

Where processors act on our behalf, they are only permitted to process personal data in line with our instructions and must take appropriate security measures. We aim to choose providers that maintain suitable technical and organisational protections.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, reporting, or dispute-resolution requirements. Retention periods may vary depending on the nature of the data and the reason it is held.

Customer and booking records may be kept for the period needed to deliver the service and manage follow-up matters.
Financial and accounting records are typically retained for the duration required by law.
Communication records may be retained for a reasonable period to support service history, quality control, and complaint handling.
Technical or security logs may be kept for a shorter period unless required longer for investigation or compliance.

When personal data is no longer required, we will delete, anonymise, or securely destroy it. We review retained information periodically to ensure it is not kept longer than necessary.

6. Security of Personal Data

We take reasonable and appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and data minimisation practices.

Although we take data security seriously, no system can be guaranteed completely secure. If a data breach occurs that is likely to affect your rights and freedoms, we will respond in line with applicable legal requirements.

7. International Transfers

Where personal data is transferred outside the United Kingdom or European Economic Area, we will ensure that suitable safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We will only transfer information where it is necessary and permitted by law.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to conditions and exceptions depending on the circumstances.

Right of access – you can ask for a copy of the personal data we hold about you.
Right to rectification – you can request correction of inaccurate or incomplete data.
Right to erasure – in certain cases, you can ask us to delete your personal data.
Right to restriction – you may ask us to limit how we use your data in certain situations.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to data portability – where applicable, you may request your data in a structured, commonly used format.
Right to withdraw consent – where we rely on consent, you can withdraw it at any time.

You also have the right to raise concerns about how your personal data is handled. If you believe your privacy rights have been infringed, you may contact the relevant data protection authority in the UK.

We encourage you to contact us first so we can address any issue quickly and fairly.

9. Automated Decision-Making

We do not generally use automated decision-making or profiling that produces legal or similarly significant effects on customers. If this changes in the future, we will update this Privacy Policy and explain the logic involved, the significance, and the potential consequences for you.

10. Children’s Data

Our services are intended for adult customers and property holders. We do not knowingly collect personal data from children except where it is incidental and necessary for arranging services at a property. If we become aware that we have collected personal data inappropriately, we will take steps to delete it where required.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any revised version will apply from the date it is published. We recommend reviewing it periodically to understand how your data is protected.

By using our services, requesting a quote, or making a booking, you acknowledge that you have read this Privacy Policy and understand how your personal data may be used.

Last updated: 2026