Catford Carpet Cleaners Privacy Policy
This Privacy Policy explains how Catford Carpet Cleaners collects, uses, stores, and protects personal data relating to customers in the Catford area. It also sets out your rights under the UK General Data Protection Regulation and related data protection laws. By booking or using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all individual customers and prospective customers of Catford Carpet Cleaners in the Catford area. It covers personal data collected when you contact us, request a quotation, book a service, make a payment, provide feedback, or otherwise interact with our business, whether in person, by phone, or online through any form or message you choose to send.
Data Controller
Catford Carpet Cleaners is the data controller for the personal data described in this Privacy Policy. As the data controller, we decide how and why your personal data is processed and we are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data:
Identification and contact details: name, title, postal address, property access details where relevant for service delivery, and any additional contact information you choose to provide.
Communication details: information contained in enquiries, quotations, bookings, complaints, feedback, and any correspondence between you and Catford Carpet Cleaners.
Service details: information about the property or area to be cleaned, such as room types, carpet or upholstery types, and any special instructions that may be necessary to perform the service.
Transaction and payment information: date and time of bookings, services provided, amounts charged, payment method, and payment status. We do not store full payment card details; these are processed by our chosen payment service provider.
Technical and usage information: if you interact with us online, we may collect limited technical data such as basic device or browser information, and data relating to how you contacted us, to ensure our communications function correctly and securely.
Lawful Bases for Processing Your Data
We only process your personal data when we have a lawful basis to do so. Depending on the context, we rely on the following lawful bases:
Performance of a contract: We use your personal data to take steps at your request before entering into a contract and to perform our contract with you. This includes handling enquiries, providing quotations, booking appointments, delivering cleaning services, issuing invoices, and managing payments.
Legitimate interests: We may process your data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. Examples include managing and improving our services, responding to your queries, keeping records for business planning, and defending legal claims.
Legal obligations: We process personal data to comply with legal and regulatory obligations, such as maintaining tax and accounting records, and cooperating with authorities when required by law.
Consent: In some circumstances, we may rely on your consent, for example, if we wish to send you certain types of marketing communications that are not covered by legitimate interests. Where we rely on consent, you may withdraw it at any time.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To respond to your enquiries, provide quotations, and manage bookings and appointments.
To deliver carpet, upholstery, and related cleaning services safely and efficiently at your property.
To process payments, issue invoices, provide confirmations, and deal with any payment issues or queries.
To manage our relationship with you, including handling feedback, complaints, and service updates.
To improve our services, including reviewing performance, planning resources, and training staff.
To comply with our legal and regulatory obligations and to establish, exercise, or defend legal claims.
To send you service-related communications that are necessary to perform our contract or that are in our legitimate interests, such as appointment reminders or notices about material changes to our services or this Privacy Policy.
Data Sharing and Processors
We do not sell your personal data. We may share your data with selected third parties to help us provide our services and manage our business. Those third parties act as data processors and only process your data on our instructions and for the purposes described in this Privacy Policy.
Categories of data processors may include:
Payment processing providers that handle card or electronic payments on our behalf.
IT and software service providers that support our booking, communication, and record-keeping systems.
Professional advisers such as accountants or legal advisers to comply with legal, tax, or regulatory requirements.
Where required by law, we may also share personal data with public authorities or law enforcement agencies.
We require all processors to implement appropriate technical and organisational measures to protect your personal data and to process it only in accordance with our documented instructions.
International Transfers
Where any of our service providers are located outside the United Kingdom or the European Economic Area, or store data on servers in other countries, we will take steps to ensure that your personal data is afforded an equivalent level of protection. This may include using standard contractual clauses or other appropriate safeguards recognised under applicable data protection laws.
Data Retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.
In general, we retain customer records and related service information for the duration of our relationship with you and for a period afterwards as required for tax, contract, and legal purposes. The specific retention period may vary depending on the type of data and our legal obligations.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be associated with you.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction, or damage. These measures include limiting access to personal data to those employees, contractors, and processors who have a business need to know it and ensuring that they are subject to confidentiality obligations.
While we strive to protect your personal data, no transmission or storage system can be guaranteed as completely secure. You are responsible for taking reasonable steps to protect your own information when you communicate with us.
Your Data Protection Rights
Under data protection laws, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal exceptions. Your rights include:
Right of access: You can request confirmation of whether we process your personal data and obtain a copy of the data we hold about you, together with certain information about how we use it.
Right to rectification: You can request that we correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you can request that we delete or remove your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and we have no other lawful basis for processing.
Right to restriction of processing: You may request that we restrict the processing of your data in certain situations, such as while we are considering a request to rectify your data.
Right to data portability: You may request that we provide your personal data to you or to another controller in a structured, commonly used, and machine-readable format, where technically feasible and where the processing is based on consent or contract and is carried out by automated means.
Right to object: You have the right to object to processing of your personal data where we are relying on legitimate interests. You also have the right to object to direct marketing at any time.
Right to withdraw consent: Where we rely on your consent to process your personal data, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
How to Exercise Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact Catford Carpet Cleaners using the contact methods you normally use for our services. We may need to verify your identity before responding to your request.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your rights have been infringed. We encourage you to contact us first so that we can try to resolve any concerns.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any updates will take effect when the revised Privacy Policy is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.