Privacy Policy - Carpet Cleaners Watford

This Privacy Policy explains how Carpet Cleaners Watford collects, uses, stores, and protects personal data belonging to customers and prospective customers in the Watford area. It applies to all Carpet Cleaners Watford customers in the area, including anyone who requests a quote, books a service, communicates with us, or receives carpet cleaning services from us. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpet Cleaners Watford provides domestic and commercial carpet cleaning services. In the course of delivering these services, we may act as a data controller for the personal information you provide to us. This means we decide why and how your data is processed. We take our responsibilities seriously and have implemented measures designed to protect personal information from unauthorised access, disclosure, alteration, or loss.

2. Personal Data We Collect

We may collect and process different types of personal data depending on how you interact with us. The information collected is limited to what is necessary for the purposes described in this policy.

2.1 Information you provide directly

Identity details such as your name.
Contact details such as telephone number and email address.
Service details such as the property address, cleaning requirements, preferred appointment dates, and any special instructions.
Payment-related information where needed for invoicing, receipts, or payment processing.
Communications including messages, complaints, feedback, and service-related correspondence.

2.2 Information collected automatically or indirectly

Service records such as appointment history, quotation requests, and cleaning preferences.
Technical information if you interact with digital systems we use, such as device type or basic usage data.
Third-party information that may be provided by landlords, agents, or business customers when they arrange services on behalf of another person.

We do not intentionally collect special category data unless it is necessary and you choose to provide it, for example if you mention a vulnerability or access requirement relevant to service delivery. Where such data is involved, we apply additional safeguards.

3. How We Use Your Data

We use personal data only for legitimate business and legal purposes. These include:

providing quotations and responding to enquiries;
arranging and delivering carpet cleaning services;
managing bookings, reminders, and follow-up communications;
processing payments, issuing invoices, and maintaining accounts;
handling customer service issues, complaints, and warranty matters;
improving our services, operations, and customer experience;
meeting legal, tax, accounting, and regulatory obligations;
protecting against fraud, misuse, or security incidents.

We will not use your personal data for purposes that are incompatible with the reasons it was collected, unless we have a lawful basis to do so and we inform you where required.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process personal data. Carpet Cleaners Watford relies on one or more of the following lawful bases:

4.1 Contract

We process your data where it is necessary to enter into or perform a contract with you. This includes confirming bookings, delivering services, processing payments, and communicating about your appointment.

4.2 Legitimate interests

We may process your data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights. Examples include managing customer relationships, preventing fraud, improving service quality, and maintaining internal records.

4.3 Legal obligation

We may process and retain certain records to comply with legal obligations, such as tax, accounting, and business record-keeping requirements.

4.4 Consent

Where required, we may ask for your consent, for example for certain optional communications. If we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods may vary depending on the type of information and the reason we hold it.

Customer and booking records are typically kept for the duration of the service relationship and for a reasonable period afterwards.
Invoice and accounting records are retained for the period required by tax and financial regulations.
Communication records may be kept to manage disputes, service history, and customer support.
Consent records may be retained to demonstrate compliance with GDPR obligations.

When personal data is no longer needed, we securely delete, anonymise, or archive it in line with our internal retention practices. We regularly review the data we hold to ensure it remains necessary and proportionate.

6. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as data processors or independent controllers depending on the service they provide. We only share the minimum data necessary and require appropriate safeguards.

6.1 Categories of processors

Payment service providers that handle card or bank-related transactions.
Accounting and bookkeeping providers that support invoicing and financial administration.
IT and cloud service providers that store or process business records securely.
Communication tools used to manage emails, messages, or scheduling.
Operational contractors who support service delivery where necessary.

Where we use processors, we put in place written agreements that require them to process data only on our instructions, keep it secure, and comply with applicable data protection laws. We do not sell personal data.

7. International Transfers

If any service provider processes data outside the United Kingdom, we will ensure appropriate safeguards are in place before transferring personal data. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under UK GDPR.

8. Data Security

We use suitable technical and organisational measures to protect personal data. These may include access controls, secure storage, staff confidentiality obligations, and procedures designed to reduce the risk of loss, misuse, or unauthorised disclosure. While no system can be guaranteed completely secure, we take reasonable steps to safeguard the information under our control.

9. Your Rights

As a data subject, you have rights under GDPR in relation to your personal data. These rights are not absolute and may be subject to legal restrictions or exceptions. Your rights include:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete information.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restriction - to ask us to limit how we process your data in certain situations.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to receive certain information in a structured, commonly used format, where applicable.
Right to withdraw consent - where processing is based on consent.

If you wish to exercise any of these rights, we will respond in line with applicable legal requirements. We may need to verify your identity before processing your request.

10. Complaints and Supervisory Authority

If you are concerned about how we handle your personal data, we encourage you to raise the issue with us first so we can address it. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our business practices, or the services we provide. Any updates will take effect when published, and the latest version will apply to all Carpet Cleaners Watford customers in area. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

Summary: Carpet Cleaners Watford explains how customer data is collected, used, retained, shared with processors, and protected, while outlining GDPR lawful bases and customer rights.