Winchmore Hill Carpet Cleaners Privacy Policy
This Privacy Policy explains how Winchmore Hill Carpet Cleaners collects, uses, stores and protects personal data relating to our customers in the Winchmore Hill area. It also describes the rights you have under the UK General Data Protection Regulation and related data protection laws.
This Privacy Policy applies to all Winchmore Hill Carpet Cleaners customers and prospective customers in our service area, whether you contact us online, by post or in person, and whether you are an individual consumer or acting on behalf of a business.
Data Controller
For the purposes of data protection law, Winchmore Hill Carpet Cleaners is the data controller of the personal data described in this Privacy Policy. This means we decide how and why your personal data is processed and are responsible for keeping it safe and using it lawfully.
Personal Data We Collect
We collect only the personal data that we need to provide our carpet cleaning and related services, run our business and meet our legal obligations. The types of personal data we may collect include:
Identification and contact details, such as your name, postal address, service address, billing address and any other details you choose to provide to help us identify you as a customer.
Communication details, such as the information you provide when you contact us to request a quote, make a booking, change an appointment, ask a question or make a complaint, including the content of emails or other messages you send us.
Service information, such as details about the property where we carry out cleaning, access instructions, room layout descriptions, types of carpets, rugs or upholstery, and any notes we make that are relevant to performing the service safely and effectively.
Transaction and payment information, such as the date and amount of payments, records of invoices and receipts, and your chosen payment method. We do not store full payment card details. Where card payments are processed, they are handled by secure payment processors.
Preference information, such as your preferred appointment times, service preferences, and whether you wish to receive optional marketing communications from us.
Technical and usage information, where applicable, such as basic information about how you interact with our online content or digital services, for example pages visited and dates of contact forms submitted, to help us improve our services and resolve any technical issues.
How We Collect Your Data
We collect personal data directly from you when you contact us to request information or a quote, make a booking, use our services, pay an invoice, provide feedback or exercise your data protection rights.
We may also receive personal data about you from third parties, for example where you are introduced by a letting agent, landlord or property manager who arranges cleaning on your behalf. In such cases, the third party is responsible for ensuring they have an appropriate lawful basis for sharing your information with us.
Lawful Bases for Processing
We only process your personal data when we have a lawful basis under data protection law. Depending on the context, we rely on one or more of the following lawful bases:
Contract. We process personal data where it is necessary to enter into or perform a contract with you, for example to provide carpet cleaning services, arrange appointments, issue invoices and take payment.
Legal obligation. We process personal data where it is necessary to comply with our legal and regulatory obligations, such as record keeping, tax and accounting requirements, and responding to lawful requests from public authorities.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This may include using data to manage our operations, improve our services, handle queries and complaints, prevent fraud, and protect our staff and customers.
Consent. In limited cases, we may rely on your consent, for example for sending certain types of marketing communications. When we rely on consent, you can withdraw it at any time, and we will explain how to do this at the point we collect your data.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage our services, including assessing your cleaning needs, providing quotes, booking and carrying out appointments, and following up on any aftercare or additional work.
To manage our relationship with you, including responding to enquiries, handling feedback and complaints, notifying you about changes to our terms or policies, and maintaining accurate customer records.
To process payments and maintain financial records, including issuing invoices, recording payments, and meeting our tax and accounting obligations.
To manage and improve our business, including monitoring service quality, training staff, and analysing how customers use our services so we can plan and enhance our operations.
To send you marketing communications, where permitted by law and where you have not opted out, about services, offers or updates that we think may be relevant to you as a customer.
To protect our rights, property and safety, and that of our customers, suppliers and staff, including detecting and preventing fraud or misuse of our services, and defending legal claims.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with trusted third parties where necessary and in accordance with data protection law. These third parties act as data processors or independent controllers, depending on the circumstances.
We may share personal data with service providers that act as data processors on our behalf, such as providers of customer management systems, payment processing services, accounting software, secure data storage and IT support. These processors are only permitted to process your personal data in accordance with our instructions and must implement appropriate security measures.
We may also share personal data with professional advisers such as accountants or legal advisers, and with public authorities or law enforcement where required by law or where necessary to protect our rights or the rights of others.
Where personal data is shared with third parties that act as independent controllers, they are responsible for providing you with their own privacy information.
International Transfers
Our main operations are based in the United Kingdom. If any of our service providers transfer personal data outside the United Kingdom or European Economic Area, we require them to do so in compliance with applicable data protection law, for example by using appropriate safeguards such as standard contractual clauses or ensuring the recipient country has an adequate level of protection.
Data Retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, including meeting any legal, accounting or reporting obligations.
Customer and service records are typically kept for a period that allows us to manage ongoing relationships and respond to queries about past work. Financial records, including invoices and payment information, are retained for the period required by tax and accounting laws.
When personal data is no longer needed, we will delete it or anonymise it so that it can no longer be linked to you. In some cases we may retain anonymised or aggregated information for business analysis and planning.
Data Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures are designed to maintain the confidentiality, integrity and availability of your information and are reviewed and updated as appropriate.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply in the circumstances set out in the law and may be subject to certain conditions and exemptions.
Right of access. You can request confirmation that we process your personal data and ask for a copy of the information we hold about you.
Right to rectification. You can ask us to correct or complete personal data that is inaccurate or incomplete.
Right to erasure. You can ask us to delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected and we have no legal reason to keep it.
Right to restriction of processing. You can ask us to limit how we use your personal data in certain situations, for example while we are investigating a concern you have raised about its accuracy.
Right to data portability. In some cases, you can request that we provide your personal data in a structured, commonly used and machine readable format or transfer it to another organisation, where this is technically feasible.
Right to object. You can object to our processing of your personal data where we are relying on legitimate interests as our lawful basis, including for direct marketing. If you object to direct marketing, we will stop using your personal data for that purpose.
Right to withdraw consent. Where we rely on your consent to process your personal data, you can withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw consent.
You also have the right to lodge a complaint with a data protection supervisory authority if you are concerned about how we handle your personal data. In the United Kingdom, this is the Information Commissioner's Office.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or how we process personal data. The updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
