Privacy Policy - Woodside Park Carpet Cleaners

This Privacy Policy explains how Woodside Park Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Woodside Park Carpet Cleaners customers in the Woodside Park area, including prospective customers, current customers, and anyone who interacts with us in connection with our carpet cleaning services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, requesting a quotation, making an enquiry, or otherwise engaging with us, you acknowledge that your information may be processed as described in this policy.

1. Information We Collect

We collect only the information necessary to provide our carpet cleaning services, manage our business operations, and meet legal obligations. The types of personal data we may collect include:

Identity details: name and title.
Contact details: address, email address, and telephone number.
Service information: details about the property, rooms, carpet types, stains, cleaning requirements, and booking preferences.
Payment information: payment status and transaction records. Where card payments are processed, this may be handled by secure third-party payment providers rather than stored by us.
Communication records: emails, messages, call notes, complaints, and service feedback.
Technical information: limited website or device-related data where relevant, such as IP address, browser type, and usage data, if you contact us online.

We do not seek to collect special category data unless it is strictly necessary and you have provided it voluntarily, or we are otherwise permitted by law to process it. If such information is shared with us accidentally, we will handle it with extra care and only where there is a lawful basis to do so.

2. How We Use Your Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to manage bookings and deliver carpet cleaning services;
to take payments and maintain records of transactions;
to communicate about appointments, service changes, or follow-up matters;
to handle complaints, disputes, or customer service issues;
to comply with legal, accounting, and tax obligations;
to maintain the safety, quality, and effectiveness of our services;
to protect against fraud, misuse, or unlawful activity;
to improve our operations and customer experience.

We will only use your personal information for the purposes described above or for compatible purposes that are reasonably expected. We do not sell your personal data.

3. Lawful Basis for Processing

Under data protection law, we must have a valid lawful basis for processing personal data. Depending on the situation, we rely on one or more of the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging quotations, confirming bookings, carrying out cleaning services, and issuing invoices or receipts.

Legal Obligation

We may process and retain personal data when required to comply with laws and regulations, including tax, accounting, and record-keeping requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Examples include managing our customer relationships, improving our services, preventing fraud, and defending legal claims. When we rely on legitimate interests, we consider whether the processing is proportionate and privacy-friendly.

Consent

In limited situations, we may rely on your consent, for example where it is needed for optional marketing communications or for the use of certain non-essential processing activities. If consent is used, you may withdraw it at any time.

4. Sharing Your Information

We may share personal data with trusted third parties only when necessary and only to the extent required for the relevant purpose. These third parties may act as processors or independent controllers depending on the service they provide.

Payment providers: to process card or electronic payments securely.
IT and cloud service providers: to store data, manage communications, and support our systems.
Scheduling or booking tools: to organise appointments and service records.
Accountants and professional advisers: to support financial, tax, or legal obligations.
Public authorities: where required by law, court order, or lawful request.

We require processors to handle personal data only in accordance with our instructions, to keep it secure, and to use appropriate technical and organisational safeguards. Where data is transferred outside the UK, we will ensure appropriate safeguards are in place in line with data protection law.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, and reporting obligations. Retention periods depend on the type of data and the reason we hold it.

Customer and booking records: retained for as long as needed to manage the service relationship and for a reasonable period afterwards for administration and dispute resolution.
Financial and tax records: retained for the period required by law.
Communication records: retained while relevant to customer support, complaints, or operational needs.
Consent-based data: retained until you withdraw consent or it is no longer needed.

When personal data is no longer required, we will delete, anonymise, or securely destroy it.

6. Data Security

We take reasonable and appropriate measures to protect personal data from accidental loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality practices, and limited access to records on a need-to-know basis. While no system can be guaranteed completely secure, we work to reduce risks and respond promptly to any suspected data incident.

7. Your Rights

Depending on the circumstances and applicable law, you have the following rights in relation to your personal data:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete information.
Right to erasure: to request deletion of your data in certain situations.
Right to restriction: to ask us to limit how we use your data in certain circumstances.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to receive certain data in a usable format where technically feasible and legally applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise your rights, you may make a request using the appropriate channels available to you through our normal business communications. We may need to verify your identity before responding. We aim to respond within the time limits required by law.

8. Children’s Data

Our services are intended for adults and households arranging carpet cleaning. We do not knowingly collect personal data from children unless it is necessary for service delivery and provided by an adult customer. If we become aware that we have collected data from a child without a valid reason, we will take appropriate steps to remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their information is handled.

10. Complaints and Further Information

If you are concerned about how your personal data has been handled, you may raise the issue with us through our usual customer communication process. You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

This Privacy Policy is designed to be clear, fair, and consistent with data protection principles. We process personal data only where necessary, keep it for no longer than required, and take steps to ensure it is handled responsibly. Our commitment is to protect the privacy of every customer who uses Woodside Park Carpet Cleaners in the area we serve.

Summary of our approach: we collect only what is needed, use it for legitimate service and legal purposes, retain it for appropriate periods, share it carefully with trusted processors, and respect your rights under data protection law.