Privacy Policy - Palmers Green Carpet Cleaners

This Privacy Policy explains how Palmers Green Carpet Cleaners collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all customers of Palmers Green Carpet Cleaners in the Palmers Green area, including residential and commercial clients, and to anyone who contacts us, requests a quotation, books a service, or otherwise interacts with us in connection with our services.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018. We only collect and use personal data where we have a valid legal basis to do so, and we take appropriate measures to keep data secure and accurate.

1. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data such as your name and, where relevant, business name.
Contact data such as address, email address, and telephone number.
Service data such as details of the cleaning service requested, property type, access notes, preferred appointment times, and service history.
Payment data such as payment confirmation, billing records, and transaction information. We do not store card details unless explicitly necessary and lawfully permitted.
Communication data such as emails, messages, call notes, and any information you provide when making an enquiry, complaint, or feedback submission.
Technical data in limited cases, such as basic device or browser information if you use digital communication tools, online booking forms, or messaging services.
Special category data only if you voluntarily provide it and only where it is necessary, for example information relating to allergies or access needs that may affect service delivery. We treat this information with extra care and only process it where permitted by law.

We aim to collect only the information that is necessary for the purpose it is collected for. We do not intentionally collect more data than we need.

2. How We Use Personal Data

We use personal data for the following purposes:

To provide quotations and respond to enquiries.
To arrange, deliver, and manage carpet cleaning and related services.
To communicate about bookings, changes, service updates, or follow-up matters.
To issue invoices, process payments, and keep financial records.
To maintain service records and handle complaints or disputes.
To improve our customer service, business operations, and service quality.
To comply with legal, accounting, and regulatory obligations.
To protect our business, customers, staff, and property from fraud, misuse, or security incidents.

We will only use your data for purposes that are compatible with the reason it was collected.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the circumstance, Palmers Green Carpet Cleaners may rely on one or more of the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes managing bookings, carrying out cleaning services, handling payments, and communicating about service delivery.

Legal Obligation

We may process data to comply with legal requirements, including tax, accounting, consumer protection, and record-keeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided these interests do not override your rights and freedoms. Examples include business administration, record management, service improvement, fraud prevention, and maintaining evidence of services provided.

Consent

In limited situations, we may rely on your consent, for example where you voluntarily provide optional information or agree to receive certain types of communication. Where consent is used, you may withdraw it at any time.

Vital Interests

In rare cases, we may process personal data where it is necessary to protect someone’s vital interests, for example in an emergency situation.

Where special category data is involved, we will only process it when a lawful condition under the UK GDPR applies.

4. Sharing Personal Data and Processors

We may share personal data with trusted third parties that help us operate our business. These third parties act as processors when they process data on our behalf and under our instructions.

Examples of processors and service providers may include:

Booking and appointment management systems.
Accounting and invoicing providers.
Payment processing services.
IT and cloud storage providers.
Communication service providers used for sending messages or managing enquiries.
Professional advisers such as accountants or legal advisers, where necessary.

We may also disclose personal data if required to do so by law, court order, regulatory authority, or law enforcement agency.

We do not sell your personal data. Where processors are used, they are required to keep data secure, use it only for the agreed purpose, and comply with applicable data protection law.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting obligations. The length of time we retain data depends on the nature of the information and why it was collected.

Typical retention principles include:

Quotation and enquiry records are kept for a reasonable period to manage follow-up, queries, and business administration.
Customer service records are kept for as long as needed to provide services, maintain continuity, and resolve disputes.
Financial and invoice records are retained for the period required by law and accounting practice.
Complaint or legal records may be retained longer where necessary to defend or establish legal claims.

When personal data is no longer needed, we will securely delete, anonymise, or destroy it.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, confidentiality procedures, and limiting access to data to only those who need it for business purposes.

Although no method of transmission or storage is completely secure, we take reasonable steps to reduce risk.

7. Your Rights

You have a number of rights under data protection law, subject to certain conditions and exceptions. These include:

The right to be informed about how we use your personal data.
The right of access to request a copy of the personal data we hold about you.
The right to rectification to ask us to correct inaccurate or incomplete data.
The right to erasure in certain circumstances, also known as the right to be forgotten.
The right to restrict processing in some situations, such as when accuracy is disputed.
The right to data portability where processing is based on consent or contract and carried out by automated means.
The right to object to processing based on legitimate interests or direct marketing, where applicable.
Rights relating to automated decision-making, where such processing occurs, although we do not normally rely on automated decisions that produce legal or similarly significant effects.

If we rely on consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.

We may need to verify your identity before responding to certain requests.

8. Data Accuracy and Your Responsibilities

We take reasonable steps to ensure the personal data we hold is accurate and up to date. To help us do this, please let us know if any of your details change. Accurate information helps us provide services properly and maintain correct records.

9. International Transfers

If any service provider stores or processes data outside the UK, we will ensure that appropriate safeguards are in place to protect the data in line with applicable law. This may include the use of approved contractual safeguards or transfer mechanisms.

10. Children’s Data

Our services are aimed at adults and businesses. We do not knowingly collect personal data from children unless it is necessary for service delivery and provided by a parent, guardian, or authorised adult. If we become aware that we have collected data from a child unlawfully, we will take steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or how we process personal data. Any updated version will apply from the time it is published or otherwise communicated.

12. Summary of Our Commitment

Palmers Green Carpet Cleaners respects your privacy and is committed to protecting your personal data. We collect only what we need, use it lawfully, retain it only as long as necessary, and share it only with trusted processors or where required by law. We also recognise and respect your rights under data protection law.

This Privacy Policy applies to all Palmers Green Carpet Cleaners customers in the Palmers Green area.