Privacy Policy - Wembley Carpet Cleaners

This Privacy Policy explains how Wembley Carpet Cleaners collects, uses, stores, shares, and protects personal data belonging to our customers in the Wembley area. It applies to all Wembley Carpet Cleaners customers in the area and to anyone who uses our services, requests a quote, books an appointment, makes an enquiry, or otherwise interacts with us. We are committed to handling personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We take your privacy seriously. This policy is written to help you understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have in relation to your personal data.

1. Information We Collect

We collect only the personal data that is necessary for us to provide our carpet cleaning services, manage customer relationships, and meet legal obligations. The types of data we may collect include:

Identity details: such as your name, and where relevant, the name of your business or property manager.
Contact details: such as your address within the Wembley area, email address, telephone number, and any preferred method of communication.
Service details: such as information about the carpets or other items to be cleaned, property access instructions, appointment times, and special service requirements.
Payment-related information: such as billing details, payment status, and transaction references. We do not usually store full card details if payment is processed by a third-party payment provider.
Communication records: such as messages, call notes, complaint details, and feedback you provide to us.
Technical information: such as limited website or device data if you use any digital channels associated with our service, including IP-related and usage data where applicable.

We do not intentionally collect special category data unless you choose to share it with us. If you provide information that may reveal health issues, access needs, or other sensitive details, we will only use it where necessary and appropriate for service delivery or legal compliance.

2. How We Use Your Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to schedule and deliver carpet cleaning and related services;
to manage customer accounts, bookings, and service records;
to process payments and issue invoices or receipts;
to communicate about appointments, service updates, or changes;
to handle complaints, disputes, and customer support requests;
to maintain business records and support operational planning;
to comply with accounting, tax, insurance, and other legal obligations;
to protect our business, staff, and customers from fraud or misuse.

We only use your personal data where we have a valid legal reason to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for every use of personal data. Wembley Carpet Cleaners relies on the following lawful bases:

Performance of a Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes handling enquiries, arranging bookings, carrying out cleaning services, processing payments, and providing customer support related to the service you requested.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing our business operations, improving customer service, keeping records, preventing fraud, and defending legal claims. We always consider the impact on your privacy before relying on this basis.

Legal Obligation

We process certain data when required to comply with legal obligations, such as tax and accounting requirements, record keeping, regulatory duties, or responding to lawful requests from authorities.

Consent

In limited situations, we may rely on your consent, especially for optional communications or certain forms of marketing where consent is required by law. Where consent is used, you have the right to withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as processors when they handle data on our instructions, or as independent controllers where they determine their own purposes for processing.

Processors we may use include:

Booking and scheduling providers: to manage appointments and customer records.
Payment processors: to securely handle transactions.
Accounting and invoicing providers: to support financial administration and tax compliance.
IT and cloud service providers: to store data securely and maintain our systems.
Communication service providers: to send service-related messages or customer notifications.

We require all processors to protect personal data, use it only for the contracted purpose, and implement appropriate security measures. We do not sell your personal data.

In some cases, we may disclose data to insurers, legal advisers, regulatory bodies, or law enforcement if necessary to protect our legal rights, comply with the law, or investigate suspected misuse or criminal activity.

5. International Transfers

If any processor stores or accesses data outside the UK, we will ensure that appropriate safeguards are in place to protect your information. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent legal protections approved under applicable data protection law.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. Retention periods may vary depending on the type of record and the reason it is held.

Customer and booking records: generally retained for the period needed to manage our relationship and any follow-up service requirements.
Financial and tax records: retained for the period required by applicable law.
Complaints and dispute records: retained for as long as needed to resolve the issue and protect our legal position.
Marketing preferences: retained until you withdraw consent or object, where applicable.

When data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention procedures.

7. Security of Your Data

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, password protection, staff awareness training, and limiting access to data on a need-to-know basis.

However, no method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security.

8. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These rights may apply in different ways depending on the legal basis for processing and the specific circumstances.

Right of access: you can ask for a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you can ask us to delete your data in certain circumstances.
Right to restriction: you can ask us to limit how we use your data in certain situations.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you can request your data in a structured, commonly used format where applicable.
Right to withdraw consent: if we rely on your consent, you may withdraw it at any time.

To exercise any of these rights, you may make a request using the details provided through our usual service channels. We may need to verify your identity before responding. We aim to respond within the time limits set by law.

9. Children’s Data

Our services are intended for adults and commercial or residential customers arranging cleaning services. We do not knowingly collect personal data from children unless it is incidental to a booking or service request and only where necessary.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review it periodically.

11. Complaints

If you have concerns about how we handle your personal data, you have the right to raise them with the relevant data protection authority. We would also encourage you to contact us first so we can review and address your concerns directly.

This Privacy Policy is intended to provide clear and transparent information about how Wembley Carpet Cleaners handles personal data for customers in Wembley and the surrounding area. By using our services, you acknowledge that your personal data may be processed as described in this policy and in accordance with applicable law.