Sydenham Hill Carpet Cleaners Privacy Policy

This Privacy Policy explains how Sydenham Hill Carpet Cleaners collects, uses, stores and protects personal data relating to our customers and prospective customers in the Sydenham Hill area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our carpet cleaning and related services, you acknowledge that you have read and understood this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy applies to all Sydenham Hill Carpet Cleaners customers and potential customers in our service area who contact us, request a quote, make a booking or otherwise interact with us in connection with our carpet cleaning and associated services. It covers personal data collected through telephone calls, written correspondence, in-person visits, and any online or digital channels we may use for enquiries and bookings.

Types of Personal Data We Collect

We may collect and process the following categories of personal data about you:

Identification and contact details, such as your name, home or business address, and preferred contact details required to respond to your enquiry and deliver our services.

Booking and service details, such as the type of property, rooms or items to be cleaned, access instructions, preferred dates and times, and details of any special requirements or relevant information you provide about the property.

Communication records, including information contained in messages, notes taken from calls, and any feedback or complaints you send to us, so that we can manage our relationship with you and improve our services.

Payment-related information, restricted to what is necessary to process payments safely, such as confirmation that payment has been made, the amount paid, the date, and method of payment. We do not store full card details when payment is processed through secure third-party providers.

Technical and usage data, where applicable, such as basic information about how you access any online contact or booking facilities we may use, for example, date and time of interaction and the pages or forms used. This information is used to maintain and improve our services.

Lawful Bases for Processing Personal Data

We rely on several lawful bases under the UK GDPR for processing your personal data, depending on the specific purpose:

Contractual necessity. We process personal data to enter into and perform a contract with you, including providing quotes, confirming bookings, delivering cleaning services, communicating about appointments, and handling payments.

Legitimate interests. We process personal data to pursue our legitimate business interests, provided these are not overridden by your rights and interests. This includes managing our relationship with you, maintaining records of work carried out, improving our services, training our staff, and protecting our business from fraud or misuse.

Legal obligations. We may process and retain certain information to comply with legal and regulatory requirements, including accounting rules, tax obligations, and responding to lawful requests from public authorities.

Consent. In limited cases where consent is required, such as for certain types of marketing communications, we will only process your personal data for that purpose if you have given clear and specific consent. You may withdraw your consent at any time.

How We Use Your Personal Data

We use the personal data we collect for the following purposes:

To respond to enquiries, provide quotes, and manage bookings for carpet cleaning and related services.

To deliver the services you have requested, including attending your property, carrying out cleaning, and following up where necessary.

To manage our relationship with you, including handling feedback, comments, and complaints, and communicating about any changes to our services or terms.

To process and record payments, issue invoices or receipts where appropriate, and maintain accurate financial records.

To improve our services, for example by reviewing typical enquiries, the types of properties we service, and the outcomes of appointments.

To comply with legal and regulatory obligations, as well as to establish, exercise or defend legal claims where necessary.

Data Sharing and Use of Processors

We treat your personal data with care and only share it when necessary and lawful. In particular:

We may share limited personal data with carefully selected third-party service providers who act as data processors on our behalf. These may include payment processors, providers of booking or scheduling tools, secure data storage or document management providers, and information technology support services.

Where we use processors, they are only permitted to process personal data in accordance with our written instructions, must keep it secure, and are not allowed to use it for their own independent purposes.

We may share your personal data with professional advisers such as accountants or legal advisers, where this is necessary to obtain professional advice or comply with our legal obligations.

We will only disclose personal data to public authorities or law enforcement where we are under a legal obligation to do so, or where disclosure is necessary to protect our rights, property or the safety of our staff, customers or the public.

We do not sell your personal data to third parties.

Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide services to you, to meet legal, accounting or reporting requirements, and to resolve any disputes.

In general, enquiry and booking information, along with basic contact details and records of services provided, may be retained for a period that allows us to respond to repeat bookings, queries or complaints, and to maintain accurate business records. Financial records, including records of payments and invoices, are typically retained for a longer period to comply with tax and accounting obligations.

When personal data is no longer needed for the purposes for which it was collected, we will either delete it securely or anonymise it so that it can no longer be linked to an identifiable individual.

Data Security

We take appropriate technical and organisational measures to protect personal data from accidental loss, misuse, unauthorised access, disclosure, alteration or destruction. These measures are designed to ensure a level of security appropriate to the risks associated with the personal data we process.

Access to personal data is limited to those employees, contractors and service providers who need it for genuine business purposes and who are subject to duties of confidentiality. We also take steps to ensure that our data processors maintain appropriate security standards.

Your Data Protection Rights

Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include the following:

Right of access. You have the right to request confirmation that we are processing your personal data and to obtain a copy of that data, together with certain additional information about how it is used.

Right to rectification. You have the right to ask us to correct any inaccurate or incomplete personal data we hold about you.

Right to erasure. In certain circumstances, you may have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.

Right to restriction. You may request that we restrict the processing of your personal data in certain situations, such as while we are verifying its accuracy or considering an objection you have raised.

Right to object. You have the right to object to our processing of your personal data where we are relying on legitimate interests as the lawful basis and you consider that your rights and interests override those interests. You also have the right to object at any time to the use of your personal data for direct marketing.

Right to data portability. In some cases, you may request that we provide you with certain personal data in a structured, commonly used and machine-readable format, or ask us to transmit it directly to another controller where this is technically feasible.

If you wish to exercise any of these rights, we will respond in accordance with data protection legislation. We may need to request specific information from you to verify your identity and ensure your right to access or change the information.

International Data Transfers

If we ever transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect it, in line with data protection law. This may include using standard contractual clauses or ensuring that the recipient country has been recognised as providing an adequate level of data protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, the way we process personal data, or legal requirements. Any updated version will apply from the date it is made available. You are encouraged to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact and Complaints

If you have any questions about this Privacy Policy or how Sydenham Hill Carpet Cleaners handles your personal data, or if you wish to exercise your data protection rights, you may contact us using our usual contact channels.

You also have the right to raise a concern with the relevant data protection supervisory authority if you believe that your personal data has not been handled in accordance with data protection law. However, we would appreciate the opportunity to address your concerns directly in the first instance.