Streatham Carpet Cleaners Privacy Policy
This Privacy Policy explains how Streatham Carpet Cleaners collects, uses, stores and protects personal data relating to customers and prospective customers in the Streatham area. We are committed to handling your personal data in a lawful, fair and transparent way, in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
By using our services, contacting us, or otherwise providing your personal data, you acknowledge that you have read and understood this Privacy Policy.
Scope and Data Controller
This Privacy Policy applies to all Streatham Carpet Cleaners customers and prospective customers in the Streatham area who contact us, request a quote, make a booking, or use our carpet cleaning or related services.
Streatham Carpet Cleaners acts as the data controller for the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal data.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identity data such as name and title.
Contact data such as service address, billing address, and any contact details you provide, such as email address and communication preferences.
Booking and service data such as details of the services you request, property access information you choose to share, preferred dates and times, and records of instructions or special requests.
Payment and transaction data such as payment method details you provide to complete a transaction, amounts paid, and records of invoices and receipts. We do not store full card details when processed through secure payment providers.
Communication data such as records of communications with us, including enquiries, complaints, feedback, and notes from phone conversations where relevant to your booking.
Technical and usage data such as basic information about how you reached our service pages or made contact, including device type or referral source, where this is collected by necessary website or booking tools.
How We Collect Your Data
We collect personal data directly from you when you contact us to request information or a quote, make a booking, or communicate with us by phone, online forms, or other channels.
We may also collect data when you interact with our website, including through essential cookies or similar technologies, where this is necessary to operate and secure the website and booking process.
In limited cases, we may receive personal data from third parties, such as partner platforms that you use to make a booking or comparison sites where you have given consent for your details to be shared with local service providers.
Lawful Bases for Processing Your Data
We only process your personal data when we have a lawful basis under the UK GDPR. Depending on the context, we rely on one or more of the following lawful bases:
Contract. We process your personal data to take steps at your request before entering into a contract and to perform our contract with you. This includes providing quotes, confirming bookings, carrying out carpet cleaning services, taking payment, and communicating with you about your booking.
Legitimate interests. We may process your personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This includes managing and improving our services, keeping records of work carried out, responding to enquiries, and protecting our business from fraud and misuse.
Legal obligation. We process certain data where necessary to comply with our legal obligations, for example accounting, record keeping, and responding to lawful requests from authorities.
Consent. In situations where consent is required by law, such as for certain types of marketing, we will only process your data for that purpose if you have given clear consent, which you can withdraw at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide our carpet cleaning and related services, including processing bookings, attending properties, and completing the work.
To manage our relationship with you, including handling enquiries, sending confirmations and updates, requesting feedback, and dealing with complaints or disputes.
To process payments and manage invoices and receipts.
To maintain records of services provided for business administration, tax and accounting.
To improve our services, including analysing service trends, enhancing the customer experience, and training staff.
To send you service-related information and, where permitted, to inform you about similar services that may be of interest to you. You can opt out of marketing communications at any time.
To protect our business, staff, customers, and property, including preventing and detecting fraud or misuse of our services.
Data Sharing and Processors
We do not sell your personal data. We may share your data with carefully selected third parties who act as data processors on our behalf, solely for the purposes described in this Privacy Policy.
These processors may include:
Payment processing providers that securely handle card and other payment transactions.
IT and cloud service providers that host our systems, store data, or provide tools required to run our business.
Booking, scheduling, or customer management tools that help us manage appointments and service records.
Professional advisers such as accountants, auditors, or legal advisers where necessary for compliance and business management.
We require all processors to respect the security of your personal data and to process it only in accordance with our written instructions and applicable data protection laws.
We may also share your data where required to comply with legal obligations, to protect your vital interests or those of another person, or to establish, exercise or defend legal claims.
International Data Transfers
Where any of our service providers or their data centres are located outside the United Kingdom, we take appropriate safeguards to ensure that your personal data is afforded a level of protection essentially equivalent to that in the UK. This may include using standard contractual clauses approved for international data transfers or ensuring that providers are subject to an adequacy decision.
Data Retention
We keep your personal data only for as long as is reasonably necessary for the purposes set out in this Privacy Policy and to satisfy legal, accounting, or reporting requirements.
Typically, this means:
Basic customer and service records are retained for a period necessary to manage ongoing relationships and for a limited time afterwards in case of queries or disputes.
Financial records and supporting documentation are retained for the period required by tax and accounting laws.
Where data is processed solely on the basis of your consent, we will delete or anonymise that data if you withdraw consent and we have no other lawful basis to continue processing it.
When data is no longer required, we will securely delete or anonymise it.
Data Security
We take appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures include limiting access to personal data to staff and processors who need it for their role, using secure systems and tools, and training staff on data protection responsibilities.
While we take reasonable steps to protect your data, no system can be guaranteed to be completely secure. You are also responsible for taking reasonable steps to protect your own information when communicating with us.
Your Data Protection Rights
Under data protection law, you have certain rights in relation to your personal data. These rights may be subject to conditions and legal limitations, but we will always respond to any valid request in accordance with applicable law.
Your rights may include:
Right of access. You can request confirmation of whether we process your personal data and request a copy of that data.
Right to rectification. You can ask us to correct or complete inaccurate or incomplete personal data.
Right to erasure. In certain circumstances, you can request that we delete your personal data.
Right to restriction. You can ask us to restrict the processing of your personal data in specific situations.
Right to data portability. In some cases, you can request that we provide your personal data in a structured, commonly used format, or ask us to transmit it to another controller.
Right to object. You can object to processing based on our legitimate interests, and you can object at any time to the use of your data for direct marketing.
Right to withdraw consent. Where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing before consent was withdrawn.
To exercise any of these rights, please contact us and clearly state which right you wish to exercise and the data concerned. We may need to verify your identity before responding.
Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us so we can try to resolve the issue. You also have the right to lodge a complaint with the UK data protection supervisory authority. Details of how to do this are available from the authority directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be posted in the latest version of this Privacy Policy, which will apply from the date of publication.
We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.