Privacy Policy - Carpetcleaning E11

This Privacy Policy explains how Carpetcleaning E11 collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all Carpetcleaning E11 customers in area, including residential and commercial clients who request, receive, or enquire about our services. We are committed to handling personal data fairly, lawfully, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning E11 acts as the data controller for the personal data we process in connection with our services. This means we decide how and why your personal information is used. We only collect data that is relevant and necessary for delivering our services, managing our business operations, meeting legal duties, and improving customer experience.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: your name, title, and, where relevant, business name.
Contact data: your address, email address, telephone number, and service location details.
Service data: details about the cleaning work requested, property type, service preferences, access instructions, and job history.
Payment data: billing details, payment status, and transaction records. We do not store unnecessary payment information longer than required.
Communication data: messages, complaints, feedback, reviews, and records of conversations relating to bookings or service delivery.
Technical data: limited information such as IP address, browser type, and device information if you interact with us through digital systems or online forms.
Special category data: generally, we do not intentionally collect special category data. If such information is shared with us accidentally, we will handle it carefully and only when necessary and lawful.

We only collect data that is needed for legitimate business purposes. We do not gather personal information for unrelated or excessive purposes.

3. How We Collect Your Data

We collect personal data in several ways, including when you:

make an enquiry or request a quote;
book a carpet cleaning service;
communicate with us by phone, email, text, or online forms;
provide access or service instructions;
make a payment or receive an invoice;
leave feedback, a complaint, or a review;
interact with our administrative systems or service platforms.

We may also receive data from third parties where necessary, such as payment providers, referral partners, or property managers acting on your behalf.

4. Lawful Basis for Processing

We process personal data only where we have a valid lawful basis under the UK GDPR. Depending on the situation, the lawful bases may include:

Performance of a contract: to provide requested services, manage bookings, issue invoices, and carry out cleaning work.
Legitimate interests: to run and improve our business, respond to enquiries, maintain records, prevent fraud, and handle customer service matters, provided these interests do not override your rights.
Legal obligation: to comply with tax, accounting, consumer, or other regulatory requirements.
Consent: where we rely on your permission for certain optional activities, such as non-essential communications or marketing, if applicable.

Where consent is used as the basis for processing, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.

5. How We Use Your Information

We use your personal data for the following purposes:

to respond to enquiries and provide quotations;
to arrange, confirm, and deliver cleaning services;
to manage customer accounts, records, and service history;
to process payments and maintain accounting records;
to communicate about appointments, service updates, or issues;
to handle complaints, disputes, or claims;
to maintain the safety and security of our operations;
to meet legal, tax, and regulatory obligations;
to analyse business performance and improve service quality.

We will only use your data for the purposes for which it was collected, unless we reasonably determine that it is needed for another compatible lawful purpose.

6. Sharing Your Personal Data

We may share your data with trusted third parties where necessary to operate our business and provide services. These may include:

Service providers who support administration, booking management, IT systems, storage, or communications;
Payment processors and financial institutions that handle transactions;
Professional advisers such as accountants, auditors, legal advisers, or insurers;
Regulators, authorities, or law enforcement where disclosure is required by law;
Subcontractors or operational partners involved in delivering a requested service.

Any processor or third party that handles personal data on our behalf is required to act under a contract and process data only on our instructions, with appropriate security measures in place. We do not sell your personal data.

Processors

Where we use data processors, we select them carefully and require them to maintain confidentiality, security, and compliance with data protection law. Processors may only process your data to support our service delivery and may not use it for their own purposes. Typical processor obligations include:

processing data only on documented instructions;
implementing suitable technical and organisational safeguards;
restricting access to authorised personnel;
reporting data incidents without undue delay;
deleting or returning data when the service ends, where appropriate.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and in accordance with legal and business requirements. Retention periods may vary depending on the type of data and the reason for processing.

Customer and service records are retained for the period needed to manage the relationship and resolve disputes.
Financial and tax records are retained for the duration required by applicable accounting and tax laws.
Communication records may be retained to evidence instructions, handle complaints, or support service quality.
Marketing preferences are kept until you opt out or we no longer need the record.

When data is no longer required, it is securely deleted, anonymised, or destroyed. We review retention practices regularly to ensure data is not kept longer than necessary.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff confidentiality duties, restricted permissions, and regular review of our systems and procedures.

While no system can be guaranteed completely secure, we take reasonable steps to reduce risk and to respond promptly to any suspected data incident.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and lawful basis used for processing:

Right of access: you can ask for a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you may request deletion of your data in certain cases.
Right to restrict processing: you can ask us to limit how we use your data in specific situations.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you may request transfer of certain data in a structured, commonly used format where applicable.
Right to withdraw consent: if we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will assess your request in line with applicable law and respond within the required timeframes. These rights are not absolute, and some may be limited by legal obligations or the need to retain records.

10. Children’s Data

Our services are intended for adult customers and business contacts. We do not knowingly collect personal data from children unless it is necessary for a service request made by a parent, guardian, or authorised adult. If we become aware that we have collected data improperly, we will take appropriate steps to delete it.

11. International Transfers

If personal data is transferred outside the UK, we will ensure appropriate safeguards are in place so that your information remains protected to a standard consistent with UK data protection law. Such safeguards may include adequacy decisions, approved contractual clauses, or other lawful transfer mechanisms.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

13. How We Respond to Your Requests

When you contact us regarding your rights or data concerns, we may ask for information to verify your identity and to protect your privacy. We aim to handle all requests fairly, carefully, and within the applicable legal deadlines. If a request is complex or if we need more information, we will keep you informed about the process.

14. Summary of Our Commitment

Carpetcleaning E11 is committed to lawful, transparent, and secure processing of personal data. We collect only the information needed to provide services, use it for clear and legitimate purposes, retain it only as long as necessary, and share it only with trusted processors or other parties where required. Your privacy matters to us, and we aim to treat your information with care and respect at every stage of the service relationship.