Privacy Policy - Belsize Park Carpet Cleaners

This Privacy Policy explains how Belsize Park Carpet Cleaners collects, uses, stores, shares, and protects personal data in connection with our carpet cleaning and related services. It applies to all Belsize Park Carpet Cleaners customers in the area, including prospective customers, current customers, and anyone who communicates with us about a service enquiry, booking, or complaint.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only collect data that is necessary for providing our services, managing our business, and meeting legal obligations. We also take reasonable technical and organisational measures to keep personal information secure.

1. Data We Collect

We may collect and process personal data directly from you, from your household, or from third parties where appropriate and lawful. The categories of data we may collect include:

Identity information: name, title, and any relevant household or business contact details.
Contact information: address, email address, and telephone number.
Service information: details of the carpet cleaning or related service requested, service preferences, property access notes, and appointment records.
Payment information: payment method details and transaction records. We do not retain more payment information than is necessary for processing and accounting.
Communications: correspondence by phone, email, message, or written form, including complaints and service feedback.
Technical and usage data: basic information generated when you interact with our digital systems, where applicable, such as device identifiers or service logs used for security and administration.
Special category data: we do not routinely collect special category data. If such information is incidentally disclosed to us, we will only process it where a lawful condition applies and it is strictly necessary.

We do not intentionally collect more data than is needed. If you choose not to provide certain information, we may not be able to deliver some or all of our services.

2. How We Use Personal Data

We use personal data only for specific and legitimate purposes connected with our business. These purposes include:

responding to enquiries and providing quotations;
managing bookings and delivering carpet cleaning services;
confirming appointments, service changes, and completion updates;
processing payments, issuing receipts, and managing invoices;
handling customer care, complaints, and service improvements;
maintaining internal records and business administration;
meeting legal, tax, accounting, and insurance requirements;
protecting against fraud, misuse, or unlawful activity;
improving the quality, safety, and efficiency of our services.

We will not use your data for purposes that are incompatible with the reasons it was collected. Where required, we will inform you if we need to use data for a new purpose.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. Depending on the context, Belsize Park Carpet Cleaners relies on one or more of the following lawful bases:

Contract: to take steps at your request before entering into a contract and to perform our services once agreed.
Legal obligation: to comply with tax, accounting, regulatory, and record-keeping obligations.
Legitimate interests: to run and improve our business, manage customer relationships, prevent fraud, and maintain service records, provided your rights and freedoms do not override those interests.
Consent: where we ask for your consent, such as for optional marketing or for specific processing that requires consent. You may withdraw consent at any time where consent is the lawful basis.

We assess each use of data carefully to ensure the lawful basis is appropriate and documented.

4. Sharing Personal Data and Processors

We may share personal data with trusted third parties where necessary for our operations. These third parties act as processors or independent controllers depending on the service they provide. We require appropriate contractual safeguards and only share the minimum data needed.

Processors may include:

IT and system providers: for secure data storage, communication tools, and administrative systems.
Payment service providers: to process card or electronic payments securely.
Accounting and bookkeeping providers: for invoicing, tax, and financial compliance.
Customer management or scheduling services: to manage appointments and operational records.
Professional advisers: such as legal, insurance, or compliance advisers where necessary.

We may also disclose information where required by law, court order, or request from a competent authority. If our business structure changes, data may be transferred to a successor organisation under appropriate safeguards.

All processors are required to protect your data and act only on our documented instructions where applicable.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods may vary depending on the type of information and the purpose of processing.

Typical retention approach

Customer service records: retained for the duration of the customer relationship and a reasonable period afterwards for administration, dispute handling, and continuity of service.
Financial and tax records: retained for the period required by applicable accounting and tax laws.
Complaints and correspondence: retained long enough to resolve issues and demonstrate proper handling.
Consent records: retained until consent is withdrawn or no longer needed to show compliance.
Security logs: retained only as long as necessary for system protection and incident management.

When data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

6. Data Security

We use reasonable safeguards to protect personal data from unauthorised access, accidental loss, destruction, or misuse. These measures may include access controls, secure storage, staff confidentiality obligations, and limited data access based on business need.

Although no method of transmission or storage is completely secure, we work to maintain a level of protection appropriate to the nature of the data we hold.

7. Your Rights

As a data subject, you have rights under data protection law in relation to your personal data. These rights may apply in full or in part depending on the legal basis and circumstances of processing.

Right of access: you can request confirmation of whether we process your data and obtain a copy.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: in some cases, you may ask us to delete your data.
Right to restrict processing: you can request limited processing in certain situations.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: where applicable, you can request your data in a structured, commonly used format.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with legal requirements. We may need to verify your identity before acting on a request. In some cases, rights may be limited where processing is necessary for compliance with legal obligations or for the establishment, exercise, or defence of legal claims.

8. International Transfers

Where personal data is transferred outside the UK, we will ensure that suitable safeguards are in place, such as adequacy regulations, standard contractual clauses, or equivalent protection measures, depending on the destination and service involved.

9. Children’s Data

Our services are intended for adults arranging carpet cleaning in domestic or commercial premises. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data without appropriate authority, we will take steps to delete or protect it as required.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any revised version will apply from the date it is made available. We encourage customers to review it periodically so they remain informed about how their personal data is used.

11. Summary of Our Commitments

Belsize Park Carpet Cleaners will collect only necessary information, use it for clear and lawful purposes, keep it no longer than needed, and share it only with trusted processors or where required by law. We respect your rights and aim to handle all personal data responsibly, transparently, and securely.

This policy applies to all Belsize Park Carpet Cleaners customers in the area.