Carpet Cleaning Bermondsey Privacy Policy
This Privacy Policy explains how Carpet Cleaning Bermondsey collects, uses, stores, and protects personal data relating to customers and prospective customers in the Bermondsey area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Carpet Cleaning Bermondsey customers and prospective customers located in the Bermondsey area who contact us, request a quote, make a booking, or otherwise use our carpet and upholstery cleaning services. It applies to personal data collected through telephone communication, written correspondence, in-person discussions, and any online forms we may provide for enquiries and bookings.
Data Controller
Carpet Cleaning Bermondsey is the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
Types of Personal Data We Collect
We only collect personal data that is relevant and necessary for the provision of our services and the running of our business. The categories of personal data we may collect include:
Identification and contact details, such as your full name, home or business address, and any other relevant address where services are to be provided.
Communication details, such as your preferred contact method, and any correspondence you send to us, including messages and notes about your service requirements.
Booking and service details, such as the date and time of your service, information about your property relevant to cleaning (for example, type of flooring, number of rooms, access instructions), and records of the services we have provided.
Payment and billing information, such as records of invoices and payment confirmations. We do not store full payment card details; where third-party payment processors are used, your card details are processed directly by them.
Technical and usage information, where applicable, such as the basic technical information provided automatically when you use online forms or digital communication tools. This may include device type and general browsing data, to the extent necessary for security and correct functioning of the service.
How We Collect Your Personal Data
We collect personal data in several ways:
Directly from you when you contact us to request information, a quotation, or a booking for carpet cleaning, upholstery cleaning, or related services.
During the provision of services, when our staff attend your property and take notes required to complete the work safely and effectively.
Through third-party service providers where they support our operations, for example, where a payment processor confirms that your payment has been completed or where a booking platform passes us your booking details.
Lawful Bases for Processing
We will only process your personal data where we have a lawful basis to do so under the UK General Data Protection Regulation. Depending on the context, we may rely on the following lawful bases:
Contract: We process personal data to enter into and perform a contract with you, such as providing a quotation, scheduling and delivering carpet cleaning services, and managing your bookings and payments.
Legitimate interests: We may process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. Examples include keeping internal records, managing customer relationships, improving our services, and protecting our business from fraud or misuse.
Legal obligation: We may process personal data where we are required to do so to comply with legal obligations, such as record-keeping for tax and accounting purposes or responding to lawful requests from authorities.
Consent: In limited cases, we may rely on your consent, for example, where we send certain types of optional marketing communications. You can withdraw your consent at any time, and we will inform you clearly whenever we rely on consent as a basis for processing.
Purposes for Which We Use Personal Data
We use personal data for the following purposes:
To provide quotations, arrange bookings, and deliver carpet cleaning and related services at your property.
To communicate with you before, during, and after the provision of services, including confirming bookings, notifying you of changes or delays, and handling any queries or complaints.
To manage our customer records, including maintaining accurate service histories, invoices, and payment records.
To improve our services and internal processes by reviewing customer feedback and service outcomes.
To meet our legal and regulatory obligations, such as maintaining financial records and cooperating with authorities when required by law.
To protect our business, staff, and customers by preventing and detecting fraud, misuse, or other unlawful activity.
Use of Data Processors and Third Parties
We may share your personal data with trusted third-party service providers who act as data processors on our behalf. These may include:
Payment processing providers that handle your payment transactions.
Service management or booking systems used to manage schedules and customer information.
Accountants and professional advisers who assist with our financial and legal obligations.
These processors are only permitted to use your personal data in accordance with our written instructions and in compliance with data protection law. We require all processors to implement appropriate security measures and to protect the confidentiality of your personal data.
We may also share personal data where required by law or where necessary to protect our legitimate interests, for example, with law enforcement authorities or regulatory bodies when strictly necessary and lawful.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. The length of time we keep different categories of personal data may vary, but we generally consider the following factors:
The duration of our relationship with you and any ongoing services or support.
The need to maintain accurate records for tax, accounting, and legal compliance.
The existence of any disputes or legal claims that may require us to retain information.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be linked back to you.
International Transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, we will take appropriate steps to ensure that your personal data receives an equivalent level of protection. This may include using standard contractual clauses or ensuring that the destination country has been recognised as providing adequate data protection standards.
Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include restricting access to personal data to those staff and processors who need it for legitimate business purposes and ensuring that they are subject to confidentiality obligations.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, you have the right to:
Access your personal data and receive a copy of the information we hold about you.
Request correction of any inaccurate or incomplete personal data.
Request erasure of your personal data where there is no good reason for us to continue processing it, for example where it is no longer needed for the original purpose and no legal obligation requires its retention.
Object to the processing of your personal data where we rely on legitimate interests and you feel that your rights and interests outweigh our reasons for processing.
Request restriction of processing of your personal data in certain circumstances, for example while we verify its accuracy or consider an objection you have raised.
Request portability of your personal data, allowing you to receive the data you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller where feasible.
Withdraw consent where we rely on your consent to process personal data. Withdrawal of consent will not affect the lawfulness of processing carried out before you withdrew your consent.
Exercising Your Rights
If you wish to exercise any of your data protection rights, please contact us using your usual communication method or through the contact details provided on our website or service materials. We may need to verify your identity before responding to your request. We aim to respond to all valid requests within one month, although complex or numerous requests may take longer as permitted by law.
Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us so we can address your concerns. You also have the right to lodge a complaint with the UK Information Commissioner's Office as the supervisory authority for data protection issues.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any changes will be effective from the date of publication. We recommend that you review this Privacy Policy periodically so that you remain informed about how we protect your personal data.