Privacy Policy
Carpet Cleaning Lambeth Privacy Policy
This Privacy Policy explains how Carpet Cleaning Lambeth collects, uses, stores, and protects personal data relating to customers and prospective customers in the Lambeth area. It is intended to comply with the UK General Data Protection Regulation, the EU General Data Protection Regulation where applicable, and relevant data protection laws. This Privacy Policy applies to all Carpet Cleaning Lambeth customers in the area, as well as individuals who contact us, request a quote, or otherwise use our services.
Data Controller
Carpet Cleaning Lambeth is the controller of the personal data described in this Privacy Policy. As the controller, we determine the purposes and means of processing your personal information and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you contact us, make a booking, or use our services:
Identification and contact details, such as your name, address, and general contact details you choose to provide.
Service and booking information, such as details of the services you request, dates and times of appointments, property access instructions you choose to share, and notes related to the delivery of our services.
Billing and payment information, such as records of payments, invoices, and relevant transaction details. Card or bank details are processed only through secure payment providers where applicable and are not stored by us beyond what is necessary and lawful.
Communication data, such as information contained in emails, forms, or other communications you send to us, including feedback, complaints, or queries about our services.
Technical and usage information where applicable, such as basic technical details about how you interact with our website or online tools. This may include IP address, browser type, approximate location, and similar data, gathered through cookies or similar technologies when permitted by law.
Lawful Bases for Processing
We will only process your personal data when we have a lawful basis to do so under the GDPR. Depending on the context, we rely on the following lawful bases:
Performance of a contract: We process your data when it is necessary to enter into or perform a contract with you, for example to provide carpet cleaning services, manage bookings, and handle payments.
Compliance with a legal obligation: We process data where necessary to comply with laws and regulations, such as record-keeping and accounting requirements.
Legitimate interests: We process data if it is necessary for our legitimate business interests, provided that these interests are not overridden by your rights and interests. This may include improving our services, preventing fraud, handling enquiries, or managing business operations.
Consent: In some cases, we may rely on your consent, for example for certain forms of direct marketing or the use of non-essential cookies. Where we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide and manage our services, including handling enquiries, preparing quotes, confirming bookings, carrying out carpet cleaning services, and managing customer relationships.
To process payments and manage billing, including invoicing, payment confirmation, and addressing any queries regarding your payments.
To communicate with you, including responding to your questions or requests, notifying you of service updates, and contacting you about changes to this Privacy Policy or other important information.
To improve and develop our business, services, and customer experience, such as through internal analysis, quality control, and staff training.
To manage legal, regulatory, and security obligations, including the prevention and detection of fraud or misuse of our services, and to exercise or defend legal claims if necessary.
Data Sharing and Processors
We may share your personal data with selected third parties where necessary and lawful, including:
Service providers and processors who act on our behalf, such as IT support, website hosting, payment processors, customer management tools, accountants, and other professional advisers. These parties are only permitted to process your data according to our instructions and are required to maintain appropriate security and confidentiality.
Regulatory bodies, law enforcement, or public authorities where we are required or permitted by law to do so.
Potential buyers or business partners in the context of a business sale, merger, or restructuring, in which case we will take appropriate steps to safeguard your personal data.
We do not sell your personal data to third parties.
International Transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, we will take appropriate steps to ensure that your personal data remains protected. These measures may include the use of standard contractual clauses or other safeguards recognised by data protection law to ensure equivalent protection of your data.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.
Customer and booking records are generally kept for as long as you remain a customer and for a reasonable period afterwards to handle potential queries, disputes, or legal claims.
Financial records linked to payments and invoices are kept for the period required by tax and accounting laws.
Communications and correspondence may be retained for a period that enables us to manage our relationship with you and maintain business records.
When data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a safe manner.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Measures may include access controls, secure storage, staff training, and procedures designed to ensure ongoing confidentiality, integrity, and availability of your personal data.
Your Data Protection Rights
Under data protection law, you have a number of rights regarding your personal data. These rights may be subject to certain conditions and legal limitations, but we will always respond to any request in accordance with applicable law.
Right of access: You have the right to request confirmation that we process your personal data and to obtain a copy of that data, along with information about how it is used.
Right to rectification: You have the right to ask us to correct inaccurate or incomplete personal data about you.
Right to erasure: In certain circumstances, you may request that we delete your personal data, for example when it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for the processing.
Right to restriction of processing: You may request that we restrict the processing of your personal data in certain situations, such as when you contest its accuracy or object to our processing.
Right to data portability: In some cases, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to request that we transmit that data to another controller where technically feasible.
Right to object: You can object to the processing of your personal data where we rely on legitimate interests as our lawful basis. If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds or where the processing is required for legal claims.
Right to withdraw consent: Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
You also have the right to lodge a complaint with the relevant data protection authority if you believe that your rights have been infringed or that your personal data has not been handled lawfully.
Policy Scope and Updates
This Privacy Policy applies to all customers and prospective customers of Carpet Cleaning Lambeth in the Lambeth area and to any individual who contacts us in connection with our services. It does not apply to third-party websites, services, or platforms that may be referenced in our communications, as we do not control their privacy practices.
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any changes will take effect when the updated policy is made available. You are encouraged to review this Privacy Policy periodically to stay informed about how we handle your personal data.