Privacy Policy - Hillingdon Carpet Cleaners

Hillingdon Carpet Cleaners is committed to protecting the privacy and personal data of all customers in the area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when we provide carpet cleaning and related services. It applies to all Hillingdon Carpet Cleaners customers in area, including individuals who enquire about our services, receive a quote, book an appointment, or use our cleaning services.

1. Who We Are

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Hillingdon Carpet Cleaners acts as the data controller in relation to the personal data we process about our customers, prospects, suppliers, and other individuals whose information we handle in the course of our business.

This Privacy Policy is designed to explain, in a clear and transparent way, how and why we process personal data and what rights individuals have over that data.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing our customer relationships, and meeting legal obligations. The types of information we may collect include:

Identity data such as your name.
Contact data such as your address, telephone number, and email address.
Service information including details about your property, the type of carpet or upholstery to be cleaned, stain or damage concerns, and service preferences.
Transaction data including records of services provided, payments made, invoices, and billing history.
Communication data such as messages, enquiries, complaints, feedback, or service instructions.
Technical data if you interact with our digital systems, such as basic device or usage information where applicable.
Access and appointment data such as entry instructions or scheduling details needed to perform the service.

We do not intentionally collect special category personal data unless it is strictly necessary and you have provided it voluntarily, or there is another lawful reason for us to process it. We ask customers not to share unnecessary sensitive information.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange bookings and deliver carpet cleaning services.
To manage customer accounts and service records.
To process payments and issue invoices or receipts.
To communicate about appointments, service updates, and follow-up matters.
To handle complaints, claims, and customer support requests.
To maintain business records and improve our services.
To meet legal, regulatory, tax, and accounting obligations.

We process personal data only for specified, explicit, and legitimate purposes, and we do not use it in ways that are incompatible with those purposes.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the context, we rely on one or more of the following bases:

Performance of a contract – where processing is necessary to provide a service you have requested, such as arranging a cleaning appointment or completing work at your property.
Steps prior to entering a contract – where we process your information to provide a quote, respond to a request, or discuss service availability.
Legitimate interests – where processing is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include maintaining records, improving operations, and preventing misuse.
Legal obligation – where we must retain or disclose data to comply with tax, accounting, employment, consumer protection, or other legal requirements.
Consent – where we rely on your permission for optional activities, such as certain marketing communications, and you may withdraw consent at any time.

Where we rely on legitimate interests, we carefully balance our interests against your privacy rights. Where consent is used, it is always given freely and may be withdrawn without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Personal Data and Processors

We may share personal data with trusted third parties who help us operate our business. These third parties act as processors or, in some cases, as independent controllers. We only share data when necessary and only with appropriate safeguards in place.

Examples of processors may include:

Payment processors who handle card or electronic payments securely.
IT and cloud service providers who store or support our systems, email, or scheduling tools.
Accounting or bookkeeping providers who assist with invoices, financial records, and tax compliance.
Customer communication providers who support appointment reminders or service-related messages.
Professional advisers such as accountants, insurers, or legal advisers where required.

We may also disclose personal data if required by law, court order, regulatory authority, or to protect our rights, property, staff, customers, or the public. If a business transfer occurs, such as a reorganisation or sale, personal data may be transferred as part of that transaction where permitted by law.

All processors are required to respect the security and confidentiality of personal data and to process it only in accordance with our instructions and data protection law.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, including any legal, accounting, or reporting obligations. The retention period depends on the type of information and the reason it is held.

In general:

Customer and service records are retained for the period needed to manage the service relationship and handle any follow-up issues.
Invoice, payment, and tax records are kept for the period required by accounting and tax law.
Enquiry records may be kept for a reasonable period if there is a future business or legal reason to do so.
Records relating to disputes, complaints, or claims may be kept longer where necessary to defend legal rights.

When personal data is no longer needed, we will delete it securely, anonymise it, or otherwise dispose of it in a safe and lawful manner. Retention is always limited to what is necessary and is reviewed periodically.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include secure storage, access restrictions, password protection, and staff confidentiality obligations.

While we take security seriously, no system can be guaranteed to be completely secure. If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will act in line with legal requirements, including notifying the relevant authorities and affected individuals where necessary.

8. Your Rights Under Data Protection Law

As a data subject, you have several rights under data protection law. These rights may apply depending on the circumstances and legal basis of processing:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain situations.
Right to restrict processing – to ask us to limit how we use your data in certain cases.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests or to direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to make a complaint to the UK Information Commissioner’s Office (ICO) if you are unhappy with how your personal data has been handled. We encourage you to raise any concerns with us first so we can try to resolve them promptly.

9. Children’s Data

Our services are aimed at adults and businesses arranging domestic or commercial carpet cleaning. We do not knowingly collect personal data from children unless it is unavoidable and necessary in connection with a service request, and only then in a lawful and proportionate manner.

10. Automated Decision-Making

We do not use personal data for fully automated decision-making that produces legal or similarly significant effects on individuals. If this changes in the future, we will update this policy and ensure appropriate safeguards are in place.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

12. Summary of Our Commitment

Hillingdon Carpet Cleaners respects your privacy and aims to handle personal data fairly, lawfully, and transparently. We collect only the information needed to provide our services, use it for clear and legitimate purposes, retain it only for as long as necessary, and share it only with trusted processors or where required by law. We also recognise and support your rights under data protection law.

By using our services, you acknowledge that this Privacy Policy applies to all Hillingdon Carpet Cleaners customers in area and explains the way we manage personal information in connection with those services.