Privacy Policy - Carpet Cleaners Sutton

This Privacy Policy explains how Carpet Cleaners Sutton collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all Carpet Cleaners Sutton customers in the area, including individuals who request quotes, book services, receive cleaning appointments, or otherwise interact with our business. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data We Collect

We only collect personal data that is relevant and necessary for delivering our services, managing our business, and meeting legal obligations. Depending on how you interact with us, we may collect the following categories of information:

Identity details such as your name and title.
Contact details such as your address, email address, and phone number.
Service information such as the type of cleaning requested, property details relevant to the work, preferred dates, and special instructions.
Payment information such as payment status, billing records, and transaction references. We do not store full card details where secure payment providers are used.
Communication records including enquiries, complaints, appointment notes, and correspondence with our team.
Technical data such as basic website usage information if you submit forms or interact with digital services, where applicable.
Special category data only where it is voluntarily disclosed by you and necessary for service delivery, such as accessibility needs or health-related access requirements.

We do not seek to collect unnecessary information. We will only process personal data that is relevant to the service requested.

2. How We Use Personal Data

Carpet Cleaners Sutton uses personal data for the following purposes:

To provide quotes and manage bookings.
To deliver carpet cleaning and associated services at the agreed location.
To communicate with you about appointments, service changes, or follow-up matters.
To process payments, issue invoices, and maintain accounting records.
To respond to enquiries, feedback, and complaints.
To improve our service quality, operations, and customer experience.
To comply with legal, tax, accounting, and regulatory obligations.
To defend or establish legal claims where necessary.

We do not sell personal data. Any use of data will be limited to what is necessary for the purpose for which it was collected or for a compatible purpose permitted by law.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis to process personal data. The lawful bases we rely on may include the following:

a) Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging quotations, confirming bookings, completing cleaning work, and handling payment-related administration.

b) Legal Obligation

We process certain data to meet legal requirements, such as tax compliance, accounting obligations, fraud prevention, and record-keeping duties.

c) Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include service improvement, business administration, customer support, internal reporting, and maintaining secure operations.

d) Consent

Where required, we will ask for your consent before processing certain information, particularly for optional uses or special category data that is not otherwise required for service provision. You may withdraw consent at any time, although this will not affect the lawfulness of processing carried out before withdrawal.

4. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the reason for processing.

Customer and service records are generally retained for the period needed to complete the service and manage follow-up matters.
Financial and invoice records are retained for the period required under tax and accounting law.
Communication records may be kept for a reasonable period to manage queries, complaints, and service history.
Consent-based records are retained until consent is withdrawn or the information is no longer needed.

When data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe and lawful manner. Retention is limited to what is necessary and proportionate.

5. Processors and Data Sharing

We may share personal data with trusted third-party processors who help us operate our business and deliver services. These processors act on our instructions and are required to protect your data. They may include:

Payment service providers for secure transaction processing.
Accounting and bookkeeping providers for financial administration.
IT, storage, and system support providers for secure record management.
Communication service providers where messages, reminders, or service updates are sent.
Professional advisers such as legal or insurance advisers where necessary.

We may also disclose information where required by law, court order, law enforcement request, or to protect our rights, property, staff, customers, or the public. Any sharing will be limited to what is necessary and subject to appropriate safeguards.

6. International Transfers

If any processor stores or accesses data outside the United Kingdom, we will take appropriate steps to ensure your personal data remains protected. This may include using approved safeguards such as adequacy regulations, standard contractual clauses, or equivalent lawful transfer mechanisms.

7. Data Security

We use reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and restricted handling procedures. No system can be guaranteed 100% secure, but we work to keep risks low and protect data appropriately.

8. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and any legal exemptions. They include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain situations.
Right to restriction – to ask us to limit how we use your data in certain circumstances.
Right to data portability – to receive certain information in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to raise concerns about how your data is handled. If you believe your rights have been infringed, you may complain to the Information Commissioner’s Office (ICO). We encourage customers to raise concerns with us first so that we can try to resolve the issue promptly and fairly.

9. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is necessary in connection with a customer request or property access arrangement and is provided by a responsible adult. If we become aware that we have collected data inappropriately, we will take appropriate steps to delete it.

10. Automated Decision-Making

We do not use personal data for automated decision-making that produces legal or similarly significant effects. Any business decisions involving personal data are made with human oversight.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. The most current version will apply to your use of our services. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

12. Summary of Our Commitment

Carpet Cleaners Sutton is committed to protecting the privacy of every customer in the area. We collect only the data needed to provide our services, rely on clear lawful bases, retain information for no longer than necessary, use trusted processors under strict controls, and respect your data protection rights. Your trust matters to us, and we aim to handle all personal data responsibly, securely, and transparently.