Privacy Policy - Penge Carpet Cleaners

This Privacy Policy explains how Penge Carpet Cleaners collects, uses, stores, and protects personal data when providing services to customers in the Penge area. It applies to all Penge Carpet Cleaners customers in the area, including prospective customers, current customers, and former customers who have used our carpet cleaning, upholstery cleaning, stain removal, or related domestic and commercial cleaning services.

We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take privacy seriously and only use personal data where there is a valid legal basis to do so.

1. Data We Collect

We may collect and process different types of personal data depending on how you interact with us and which services you request. The data we collect is limited to what is necessary for service delivery, administration, compliance, and customer support.

Information you provide directly

Identity data such as your name.
Contact data such as your address, email address, and telephone number.
Service details such as the property location, type of cleaning requested, preferred appointment times, access instructions, and any special service notes.
Payment-related information such as payment confirmation, billing details, and transaction records. We do not store unnecessary payment card data unless required for secure processing by our payment providers.
Communication data such as enquiries, complaints, feedback, and correspondence.

Information collected automatically

When you interact with us, we may also collect limited technical or operational information, where relevant, such as records of appointments, service history, and communication logs. If we use digital booking or customer management tools, these systems may process metadata related to scheduling and service administration.

We do not intentionally collect special category data unless it is voluntarily provided and necessary for a specific service request or safety reason. If such information is shared with us, we will only use it where a lawful basis exists and where additional safeguards are appropriate.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotes and respond to service enquiries.
To manage bookings, appointments, and service delivery.
To carry out carpet cleaning and related services safely and effectively.
To communicate about your booking, including reminders or service updates.
To process payments, refunds, and invoices where applicable.
To maintain business records and service history.
To handle complaints, claims, and customer support requests.
To meet legal, tax, accounting, and regulatory obligations.
To improve our services, training, and internal operations.

We will never sell your personal data. We only share it where necessary and permitted by law.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each use of personal data. Penge Carpet Cleaners relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps before entering into a contract. This includes providing quotes, confirming bookings, delivering cleaning services, and managing payments.

Legal obligation

We may process personal data to comply with legal obligations, including tax records, accounting requirements, and lawful requests from authorities.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests and where your rights and freedoms do not override those interests. Examples include managing customer records, preventing fraud, improving service quality, and resolving disputes. We always consider whether our interests are proportionate and privacy-friendly.

Consent

In limited cases, we may rely on your consent, for example where you choose to receive optional marketing or where you voluntarily provide certain information for a specific purpose. Where consent is used, you have the right to withdraw it at any time.

We only process personal data for the purpose for which it was collected, unless a compatible or lawful alternative purpose applies.

4. Who We Share Data With

We may share personal data with selected third parties, known as processors, who help us operate our business and deliver services. These third parties are only allowed to process data on our instructions and must protect it appropriately.

Examples of processors and service providers

Scheduling and booking systems used to manage appointments and customer records.
Payment processors used to handle transactions securely.
IT and cloud storage providers used to store and back up business information.
Communication service providers used for emails, messages, and service updates.
Professional advisers such as accountants or legal advisers where necessary.

We may also disclose personal data if required to do so by law, court order, or regulatory authority, or to protect the rights, property, or safety of our business, customers, or others.

All processors are chosen carefully and are expected to meet GDPR standards. Where required, we put appropriate contractual safeguards in place.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including service delivery, business administration, and legal compliance.

Retention approach

Customer service records are retained for a period that allows us to manage repeat services, queries, and complaints.
Financial and invoicing records are retained for the period required by tax and accounting laws.
Communication records may be kept for a reasonable period to support service management and evidence of instructions.
Where data is no longer needed, we delete it securely or anonymise it so that it can no longer identify you.

Retention periods may vary depending on the type of information, the nature of the service, and legal requirements. We periodically review the data we hold to ensure it is not kept longer than necessary.

6. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, misuse, or unlawful disclosure. These measures may include secure storage, access controls, staff confidentiality practices, and restricting data access to those who need it for legitimate business purposes.

Although we take reasonable steps to protect personal data, no method of transmission or storage is completely secure. If we become aware of a personal data breach that affects your rights and freedoms, we will act in line with legal obligations and notify the relevant authority and affected individuals where required.

7. Your Rights Under GDPR

You have a number of rights in relation to your personal data. These rights may be subject to limitations under data protection law, but we will always consider and respond to requests carefully.

Your rights include:

Right of access – to request confirmation of whether we process your personal data and to receive a copy of it.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to request limited processing in certain cases.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to make a complaint to the UK Information Commissioner’s Office if you believe your data protection rights have been breached.

We will not discriminate against you for exercising your rights. Requests will be handled in line with GDPR time limits and legal requirements.

8. Children’s Data

Our services are intended for adults or adult-managed properties and business premises. We do not knowingly collect personal data from children as part of our ordinary service operations. If we become aware that such data has been collected inadvertently, we will take appropriate steps to delete it unless there is a legal reason to retain it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

10. Summary of Key Points

We only collect personal data needed to provide and manage our cleaning services.
Our lawful bases include contract, legal obligation, legitimate interests, and consent where appropriate.
We share data only with trusted processors and where legally required.
We retain data only as long as necessary and delete it securely when no longer needed.
You have rights to access, correct, delete, restrict, object, and port your data, depending on the circumstances.

This Privacy Policy is designed to ensure transparent and fair handling of personal data for all Penge Carpet Cleaners customers in area.