Carpet Cleaning Kingston Privacy Policy
This Privacy Policy explains how Carpet Cleaning Kingston collects, uses, stores, and protects personal data relating to our customers and prospective customers in the Kingston area. It also explains the rights you have under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Carpet Cleaning Kingston customers and individuals who enquire about or use our services within the local area.
Who We Are
Carpet Cleaning Kingston is a carpet and upholstery cleaning service provider operating in the Kingston area. For the purposes of data protection law, we act as the data controller in relation to the personal data we collect and process about you when you use our services or contact us.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details: name, address, service address, and preferred contact details such as mobile number or other telephone number.
Service and booking information: details of your booking or enquiry, property type, areas to be cleaned, dates and times of visits, and any additional information you choose to provide that is relevant to the service.
Payment details: method of payment and basic transaction information. Where card payments are processed, these are handled by secure payment processors and we do not store full card details.
Communication records: copies of communications you send to us, such as messages, feedback, and any notes relating to our conversations about your booking or enquiry.
Technical information: limited technical data that may be collected if you visit our online pages, such as basic device and browsing information, and information on how you interact with our content. This may include the use of cookies or similar technologies where permitted by law.
How We Collect Your Data
We may collect personal data directly from you when you:
Make an enquiry about our services.
Request a quotation or book a service.
Communicate with us by phone, message, or other means.
Provide feedback, reviews, or complaints.
We may also receive limited information about you from third parties, for example if another person books a service on your behalf or refers you to us, or where third-party platforms pass us basic details relating to your booking request.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis to do so. Depending on the context, we may rely on the following lawful bases:
Contract: We process your data when it is necessary to enter into or perform a contract with you, for example to provide carpet cleaning or related services, manage your booking, and handle payments.
Legal obligation: We may process certain information to comply with legal and regulatory requirements, such as accounting, tax, or health and safety obligations.
Legitimate interests: We may process your data when it is necessary for our legitimate business interests and when your rights and freedoms do not override those interests. This may include managing our business operations, improving our services, keeping appropriate records, and following up on enquiries.
Consent: In some cases we may ask for your consent to process your data for specific purposes, such as sending certain types of marketing communications by electronic means where required by law. When we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To respond to your enquiries, provide quotations, and manage bookings.
To deliver our cleaning services at your property and to communicate with you regarding arrival times, access, and service details.
To process payments and maintain accurate financial records.
To manage customer relationships, including handling queries, complaints, and feedback.
To operate, evaluate, and improve our services, including service planning, staff training, and quality assurance.
To meet our legal and regulatory obligations, including maintaining accounting records and responding to lawful requests from authorities.
To send you relevant updates or marketing messages about our services where we are permitted to do so and you have not opted out.
Data Sharing and Processors
We may share your personal data with trusted third parties who act as data processors on our behalf. These may include:
IT and hosting providers who support our systems and data storage.
Scheduling, booking, or customer management tools.
Payment service providers that process payments securely.
Professional service providers such as accountants or advisers where necessary.
These processors are only permitted to use your personal data in accordance with our instructions, for the purposes detailed in this Privacy Policy, and are required to keep your data secure.
We may also share personal data where required by law or to protect our rights, such as with law enforcement or regulatory bodies, and in connection with legal claims or proceedings.
We do not sell your personal data to third parties.
International Transfers
Where any of our service providers or systems are located outside the United Kingdom or the European Economic Area, or where your data is otherwise processed in a country that does not provide the same level of protection as the UK, we will take appropriate steps to ensure that your personal data is properly protected. This may include using standard contractual clauses or relying on other legally recognised safeguards.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide our services, maintain records, comply with legal obligations, resolve disputes, and enforce agreements.
In general, service and booking information may be retained for a period consistent with local limitation and tax rules so we can meet legal and accounting requirements. Communications and enquiry records may be retained for a reasonable period after our last interaction with you in order to respond to any follow-up queries and to maintain accurate business records.
When data is no longer required, we will take steps to delete it securely or anonymise it so that it can no longer be linked to you.
How We Protect Your Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures may include access controls, secure storage, and staff training on data protection responsibilities. While we take reasonable steps to safeguard your information, no method of transmission or storage can be guaranteed as completely secure.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These include:
Right of access: You have the right to request confirmation of whether we hold personal data about you and to request a copy of that data, together with information about how it is used.
Right to rectification: You have the right to ask us to correct inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you may have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no other lawful basis to retain it.
Right to restriction: You have the right to request that we restrict the processing of your personal data in certain situations, such as while we are verifying its accuracy or considering an objection you have raised.
Right to object: You may object to our processing of your personal data where we rely on legitimate interests as our lawful basis, including for direct marketing. We will stop processing your data for these purposes unless we have compelling legitimate grounds that override your interests or where processing is necessary for legal claims.
Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request that it be transferred to another controller where technically feasible.
Right to withdraw consent: Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing based on consent before it was withdrawn.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the contact details provided on our website or other service materials.
You also have the right to lodge a complaint with the relevant data protection authority if you are concerned about how we process your personal data. In the United Kingdom, this is the Information Commissioner's Office.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any updated version will be made available through our usual communication channels. We encourage you to review this Policy periodically so that you remain informed about how we protect your personal data.