Privacy Policy - Carpetcleaning Kennington

This Privacy Policy explains how Carpetcleaning Kennington collects, uses, stores, shares, and protects personal data in connection with the services we provide. It applies to all Carpetcleaning Kennington customers in the area, including prospective customers, current customers, and anyone who has made an enquiry, requested a quotation, booked a service, or otherwise interacted with us.

We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take data protection seriously and aim to ensure that your information is used only where necessary and with appropriate safeguards in place.

1. Personal Data We Collect

We collect only the information needed to deliver our services, manage our business, and meet our legal obligations. Depending on your interaction with Carpetcleaning Kennington, we may collect the following types of personal data:

Identity details such as your name and, where relevant, company name.
Contact details such as your address, email address, and telephone number.
Service information including property access details, cleaning requirements, booking preferences, and service history.
Payment information such as partial card details or payment confirmation records, where required to complete a transaction.
Communication records including emails, messages, call notes, complaints, feedback, and correspondence.
Technical data such as basic website or device information if you contact us through digital channels, where applicable.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily or it is otherwise required for a legitimate reason. If such information is ever shared with us, we will handle it carefully and only in line with data protection law.

2. How We Use Personal Data

Carpetcleaning Kennington uses personal data for the following purposes:

To provide quotations, respond to enquiries, and arrange appointments.
To deliver carpet cleaning and related services effectively and safely.
To manage customer accounts, records, and service history.
To process payments, issue invoices, and keep accurate financial records.
To handle complaints, feedback, and customer support requests.
To improve our services, customer experience, and operational efficiency.
To comply with legal, tax, accounting, and regulatory obligations.
To prevent fraud, misuse, or unlawful activity.

We will only use your personal data for the purposes for which it was collected unless we reasonably believe we need to use it for a compatible purpose. If we need to use your data for a new and unrelated purpose, we will explain the legal basis for doing so where required.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Carpetcleaning Kennington relies on one or more of the following lawful bases depending on the specific situation:

Contract – where processing is necessary to provide a quote, carry out services, manage bookings, or fulfil our obligations to you.
Legal obligation – where processing is necessary to meet tax, accounting, record-keeping, or other legal requirements.
Legitimate interests – where processing is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include maintaining service records, improving services, and handling customer communication.
Consent – where we rely on your permission, for example for certain optional communications or where the law requires consent.

Where consent is used as the lawful basis, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

4. Sharing Your Data and Processors

We may share personal data with trusted third parties who assist us in running our business. These parties act as processors or independent controllers depending on the service they provide. We only share the minimum amount of information necessary and require appropriate safeguards to protect your data.

Examples of processors and service providers may include:

Payment processors that handle card or online payment transactions.
IT and cloud service providers that store data, manage email systems, or support business software.
Administrative service providers that assist with scheduling, record management, or customer communication.
Professional advisers such as accountants, insurers, or legal advisers, where necessary.

We may also disclose personal data where required by law, to enforce our terms, to protect our rights, or to prevent fraud or other unlawful conduct. We do not sell your personal data.

5. International Transfers

Where any processor or service provider stores or accesses data outside the UK, we will take appropriate steps to ensure your personal data remains protected. This may include using approved contractual safeguards or relying on adequacy regulations where applicable. We will only transfer data where lawful and where suitable protection measures are in place.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the reason it is held.

In general, we may retain:

Customer service records for a period needed to manage ongoing relationships, resolve disputes, and maintain service history.
Financial and invoicing records for the period required by tax and accounting laws.
Communication records for as long as needed to handle enquiries, complaints, or follow-up matters.

When data is no longer needed, we will securely delete, anonymise, or otherwise dispose of it. In some cases, we may retain data for a longer period if it is required for legal claims, regulatory matters, or fraud prevention.

7. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These rights may be subject to conditions or exceptions, but we will always consider your request carefully.

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – in certain circumstances, you may ask us to delete your personal data.
Right to restrict processing – you may request that we limit how we use your data in certain situations.
Right to data portability – you may request that we provide your data in a structured, commonly used format where applicable.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we may need to verify your identity before responding. We aim to respond within the time limits set by law. If your request is complex or numerous, we may need additional time, but we will keep you informed.

8. Security of Personal Data

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and restricted handling of sensitive records. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children’s Data

Our services are intended for adults and household or business customers. We do not knowingly collect personal data from children unless it is incidentally provided by an adult customer and necessary for service delivery. If we become aware that we have collected data from a child unlawfully, we will take appropriate steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updates will take effect when published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is used.

11. Summary of Key Points

Carpetcleaning Kennington collects only necessary personal data, uses it for service delivery and business administration, and processes it under lawful bases such as contract, legal obligation, legitimate interests, and consent. Data may be shared with trusted processors, retained only as long as needed, and protected with appropriate safeguards. Customers in the area have clear rights over their personal data, including access, correction, deletion, and objection.

This Privacy Policy applies to all Carpetcleaning Kennington customers in the area. By using our services or contacting us, you acknowledge that your personal data may be processed in accordance with this policy and applicable data protection laws.