Privacy Policy - Carpetcleaning Kingston

This Privacy Policy explains how Carpetcleaning Kingston collects, uses, stores, and protects personal data. It applies to all Carpetcleaning Kingston customers in the area, including prospective customers, current customers, and anyone who communicates with us in connection with our carpet cleaning services. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning Kingston provides professional carpet cleaning services to customers in the local area. In relation to the personal data we collect and process, we act as the data controller. This means we decide why and how personal data is used. We take our responsibilities seriously and apply appropriate technical and organisational measures to protect the information entrusted to us.

2. Personal Data We Collect

We only collect personal data that is necessary for the purposes described in this policy. Depending on your interaction with us, we may collect the following categories of information:

Identity data such as your name and, where relevant, the name of your household or business.
Contact data such as your address, email address, and telephone number.
Service data relating to the cleaning services you request, including property details, preferred appointment times, cleaning instructions, and service history.
Payment data where needed to process transactions, invoices, or refunds.
Communication data including messages, feedback, complaints, and service-related correspondence.
Technical data such as basic device or usage information if you interact with our digital systems.

We do not intentionally collect special category data unless it is strictly necessary and you choose to provide it, or we are required to do so by law. Special category data includes information about health, religion, political opinions, or similar sensitive matters.

3. How We Use Personal Data

We use personal data only for legitimate business and legal purposes connected with our services. The main uses include:

Providing quotations and arranging appointments.
Delivering carpet cleaning and related services.
Processing payments, issuing invoices, and managing accounts.
Responding to enquiries, feedback, or complaints.
Maintaining service records and internal business administration.
Meeting legal, regulatory, and tax obligations.
Improving our services, customer experience, and operational efficiency.

We will always ensure that any use of personal data is relevant, limited, and proportionate to the purpose for which it was collected.

4. Lawful Basis for Processing

Under GDPR, we must identify a lawful basis before processing personal data. Carpetcleaning Kingston relies on the following lawful bases where appropriate:

Contract

We process your personal data when it is necessary to enter into or perform a contract with you. This includes handling bookings, carrying out cleaning services, managing payments, and providing customer support related to the service.

Legitimate Interests

We may process personal data for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing our customer relationship, improving service quality, preventing fraud, keeping appropriate records, and protecting our business operations.

Legal Obligation

We may process and retain certain personal data where required to comply with legal obligations, including tax, accounting, consumer, and regulatory requirements.

Consent

In limited cases, we may rely on your consent, for example where it is needed for optional communications or specific uses not covered by another lawful basis. Where we rely on consent, you may withdraw it at any time.

5. Data Sharing and Processors

We may share personal data with trusted third parties who act as data processors on our behalf. These processors are only permitted to use the data for specified purposes and must protect it in accordance with GDPR requirements. Typical processors may include:

Payment processors used to handle card or online transactions securely.
Booking and scheduling providers that support appointment management.
IT and cloud service providers that store data or support our internal systems.
Administrative service providers that assist with record-keeping, invoicing, or document management.
Professional advisers such as accountants or legal advisers where necessary.

We may also disclose personal data if required by law, court order, or a lawful request from public authorities. We do not sell personal data.

6. International Transfers

Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place to protect the information. These safeguards may include adequacy regulations, standard contractual clauses, or other approved legal mechanisms. We take steps to ensure that any transfer is handled securely and in line with data protection law.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Retention periods depend on the type of information and the reason it is held. In general:

Service and booking records are retained for a period necessary to manage customer relationships and service history.
Financial and accounting records are retained for the periods required by tax and accounting laws.
Correspondence and complaints may be retained for a reasonable period to resolve issues and maintain records.
Technical or security logs are retained only as long as needed for operational and security purposes.

When personal data is no longer needed, we securely delete or anonymise it. Retention periods may vary depending on legal requirements or legitimate business needs.

8. Data Security

We use appropriate security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures may include restricted access controls, secure storage, password protection, staff confidentiality obligations, and regular review of our data handling practices. While no system can be guaranteed completely secure, we work continuously to reduce risk and safeguard information.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exceptions, these rights include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to ask us to limit how we use your data.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to request transfer of data you provided to us in a structured, commonly used format, where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

10. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is provided by a parent, guardian, or authorised adult in connection with a service arrangement. If we become aware that we have collected data from a child without appropriate authority, we will take steps to delete it where required.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updated version will apply from the date it is published. We encourage customers to review this policy periodically so they remain informed about how personal data is handled.

12. Summary of Our Commitment

At Carpetcleaning Kingston, we value privacy and handle personal data with care, responsibility, and transparency. We collect only what is necessary, use it for lawful and clearly defined purposes, keep it only for as long as needed, and share it only with trusted processors or when legally required. We also respect your rights and aim to make our data practices clear, fair, and secure for every customer in the area.