Privacy Policy - Barkingside Carpet Cleaners

This Privacy Policy explains how Barkingside Carpet Cleaners collects, uses, shares, stores, and protects personal data when providing carpet cleaning and related services. It applies to all Barkingside Carpet Cleaners customers in the area, including current, former, and prospective customers, as well as individuals who enquire about our services or interact with us in connection with a booking, quotation, complaint, or service visit.

We are committed to handling personal data in a lawful, fair, and transparent way. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy should be read carefully so that you understand how your personal information is managed and what rights you have.

1. Information We Collect

We only collect personal data that is necessary for providing our services, managing our business, and meeting legal obligations. The types of information we may collect include:

Identity details such as your name and title.
Contact details such as your address, phone number, and email address.
Service details including the type of cleaning requested, property access notes, preferred service dates, and related instructions.
Payment information such as billing details and transaction records. Where payment card details are processed, this is done through secure third-party payment processors.
Communication records including enquiries, complaints, feedback, and any correspondence relating to our services.
Technical data if you interact with us online, such as device information, browser type, and basic usage data, where applicable.
Verification and security information if needed to prevent fraud or confirm identity.

We do not intentionally collect special category personal data unless it is necessary and you have provided it, or it is required for a specific lawful purpose. Special category data may include information about health, disabilities, or access needs where you choose to share it with us to help us deliver services safely and appropriately.

2. How We Use Your Personal Data

We use personal data only for clear and legitimate purposes. These may include:

providing carpet cleaning and related services;
responding to enquiries and preparing quotations;
booking, scheduling, and managing appointments;
carrying out services safely and efficiently;
processing payments and maintaining financial records;
handling complaints, disputes, and aftercare matters;
meeting accounting, tax, and legal obligations;
maintaining business records and service history;
improving our service quality and customer experience;
protecting against fraud, misuse, or unauthorised access.

We will not use your personal data for purposes that are incompatible with the original reason it was collected unless we have a lawful basis to do so and we inform you where required.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for every use of personal data. Depending on the context, we rely on the following lawful bases:

Contract

We process your personal data where it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering cleaning services, issuing invoices, and managing customer requests.

Legal Obligation

We may process personal data to comply with legal duties, such as tax, accounting, record-keeping, fraud prevention, or regulatory requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This may include business administration, service improvement, internal record keeping, and limited marketing to existing customers where permitted by law.

Consent

Where required, we will ask for your consent before processing certain types of data or sending specific communications. If we rely on consent, you may withdraw it at any time.

Vital Interests and Public Interest

In rare situations, we may process data to protect someone’s vital interests or where processing is needed for a task carried out in the public interest. These bases are unlikely to apply in most customer interactions but may arise in emergency or safeguarding-related circumstances.

4. Sharing Your Personal Data

We may share personal data only when necessary and only with trusted parties who help us operate our business or comply with the law. These may include:

Service providers and processors who support our booking, administration, communication, and payment functions;
Accountants and financial professionals who assist with tax, invoicing, and financial reporting;
IT and data storage providers that help us securely store and protect records;
Professional advisers such as legal advisers, where necessary;
Public authorities if disclosure is required by law or necessary for legal claims;
Insurance providers where a claim, incident, or dispute must be handled.

All processors are required to act only on our instructions, to protect personal data, and to implement appropriate technical and organisational security measures. We do not sell your personal data.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods vary depending on the type of data and the reason for processing.

In general:

customer service and booking records are kept for as long as needed to manage the relationship and resolve any issues;
financial and tax records are retained for the period required by applicable law, which may be several years;
complaint and dispute records may be kept for a longer period where necessary to protect our legal position;
data no longer needed is securely deleted, anonymised, or archived in line with our retention practices.

When deciding how long to keep information, we consider legal requirements, the potential need to defend legal claims, and operational necessity. We aim to keep data no longer than necessary.

6. International Transfers

Where personal data is transferred outside the UK, we will only do so where appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms required by data protection law. We take reasonable steps to ensure that your data receives a level of protection equivalent to that required in the UK.

7. Data Security

We take data security seriously and use appropriate measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff training, and restricted sharing of information on a need-to-know basis.

However, no system is completely secure. While we work to protect your information, we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will take appropriate steps in line with our legal obligations.

8. Your Rights

You have a number of rights under data protection law in relation to your personal data. These rights may apply depending on the circumstances and the lawful basis used for processing. They include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – in some circumstances, you can ask us to delete your personal data.
Right to restriction – you can ask us to limit how your data is used in certain situations.
Right to data portability – where applicable, you can ask for your data in a structured, commonly used format.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – if we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we may need to verify your identity before responding. Some rights may not apply in all cases, for example where we must keep information to comply with a legal obligation or to establish, exercise, or defend legal claims.

9. Complaints and Supervisory Authority

If you are concerned about the way we handle your personal data, we encourage you to raise the issue with us first so that we can try to resolve it. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), which is the UK supervisory authority for data protection matters.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or how we process personal data. Any updated version will apply from the date it is published or otherwise communicated, and we encourage you to review it periodically.

By using our services, you acknowledge that this Privacy Policy applies to your personal data as a customer of Barkingside Carpet Cleaners in the area.

We are committed to processing your data responsibly, securely, and in accordance with applicable data protection laws.