Carpet Cleaning Elephant and Castle Privacy Policy
This Privacy Policy explains how Carpet Cleaning Elephant and Castle collects, uses, stores, and protects personal data of its customers and potential customers within the Elephant and Castle area. It is designed to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Carpet Cleaning Elephant and Castle customers in the area, as well as individuals who contact us to request information or quotations for our services.
Who we are and scope of this policy
Carpet Cleaning Elephant and Castle is a local carpet and upholstery cleaning service provider operating in the Elephant and Castle area. In this Privacy Policy, references to we, us, and our refer to Carpet Cleaning Elephant and Castle as the data controller for the personal data we collect about you. This policy covers all processing of personal data relating to our carpet cleaning and related services for residential and business customers in the Elephant and Castle area.
Personal data we collect
We only collect personal data that is necessary to provide our services, communicate with you, manage our business, and comply with legal obligations. The types of personal data we may collect include:
Identification and contact details, such as your full name, postal address, service address, and general location within the Elephant and Castle area. Communication details, such as your email address if you choose to provide it, and records of communications you send to us or that we send to you. Service information, such as details about your property relevant to the cleaning service, including type and size of areas to be cleaned, access information, and service preferences. Booking and transaction details, such as requested service date and time, booking history, and payment-related information such as confirmation of payment method used and amounts paid. Technical data, when applicable, such as basic information provided by your device when you interact with our online content, including IP address and general browser information. This is only collected where it is necessary for security, analytics, or to enable the operation of our site or online forms.
How we collect your personal data
We collect personal data in various ways, including:
Direct interactions when you contact us by phone, contact form, or other communication methods to request quotes, make bookings, or ask questions. During service delivery when our staff attend your premises to carry out cleaning services and record details necessary to complete the work safely and effectively. From third parties or publicly available sources where lawful and relevant, such as business directories, property management companies, or landlords who arrange services on your behalf.
Lawful bases for processing your data
We process personal data only when we have a lawful basis under the UK GDPR. Depending on the context, we may rely on the following lawful bases:
Performance of a contract. We process your personal data to provide carpet cleaning and related services that you have requested, including handling bookings, rescheduling, and completing the work. Legitimate interests. We may process your personal data to manage and improve our services, maintain business records, prevent fraud, ensure security, and communicate with you about similar services that may be relevant to you, provided these interests are not overridden by your rights and interests. Legal obligations. We may process and retain certain personal data where required by law, for example for tax, accounting, and insurance purposes, or to respond to lawful requests from public authorities. Consent. In specific situations, such as where required for certain types of marketing or optional communications, we may rely on your explicit consent. Where consent is the lawful basis, you can withdraw your consent at any time.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage our services, including taking bookings, planning and delivering cleaning services, following up on work completed, and handling customer support queries. To manage payments and invoicing, including processing payments, issuing receipts and invoices, and maintaining financial records. To communicate with you, including sending booking confirmations, service reminders, updates about your appointment, and responding to your enquiries. To improve and develop our services, including reviewing feedback, analysing service usage, and training our staff. To meet legal, regulatory, and insurance requirements, including record keeping, reporting, and responding to regulatory or law enforcement requests where required.
Data sharing and processors
We do not sell your personal data. We may share your personal data with trusted third parties where necessary for the purposes set out in this Privacy Policy, including:
Service providers acting as data processors who supply business support services, such as booking or scheduling tools, payment processing providers, and IT or cloud storage providers. Professional advisers, such as accountants, insurers, or legal advisers, where required for business, accounting, or legal purposes. Authorities or regulators, where we are legally required to do so, for example to comply with tax, regulatory, or law enforcement obligations.
When we use data processors, they act only on our instructions, are subject to confidentiality obligations, and are required to implement appropriate technical and organisational measures to protect your personal data.
Data retention and storage
We retain your personal data only for as long as necessary for the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of data and the context of our interactions with you.
In general, booking and service records, including associated contact and payment information, are kept for a period aligned with applicable tax, accounting, and limitation laws. Communications relating to enquiries or quotes that do not result in a booking may be retained for a shorter period, sufficient to manage follow-up and routine business records. Where data is processed based solely on your consent and that consent is withdrawn, we will delete or anonymise that data unless we are required or permitted to retain it for another lawful reason.
Personal data is stored securely using appropriate technical and organisational measures designed to protect it against unauthorised access, loss, alteration, or disclosure.
International transfers
If we use service providers that store or access personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your data, such as adequacy regulations or standard contractual clauses recognised under applicable data protection laws.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Carpet Cleaning Elephant and Castle customers in the area, subject to certain legal conditions and exemptions. Your rights include:
Right of access. You can request confirmation of whether we hold personal data about you and obtain a copy of that data, along with information about how it is processed. Right to rectification. You can request correction of personal data that is inaccurate or incomplete. Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the original purpose and there is no other lawful basis for retaining it. Right to restrict processing. You can ask us to restrict the processing of your personal data in specific situations, such as when you contest its accuracy or object to our use of it. Right to object. You can object to processing based on our legitimate interests, including any direct marketing. We will stop processing your data for these purposes unless we have compelling legitimate grounds to continue or a legal obligation to do so. Right to data portability. Where processing is based on consent or a contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format, or that we transmit it to another controller where technically feasible.
To exercise any of your rights, you may contact us using the contact details provided on our website or through the usual communication channels you have used previously. We may need to verify your identity before responding to your request. We aim to respond within the time limits set by law.
Security of your personal data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it. These measures are designed to prevent unauthorised or unlawful processing, accidental loss, destruction, or damage. Access to personal data is limited to personnel and service providers who need it to perform their duties and who are subject to confidentiality obligations.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our data processing practices. When we make significant changes, we will take reasonable steps to inform you. The latest version of this Privacy Policy will always apply to the personal data we hold and process about you.
Contact and complaints
If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us using the details published on our website or through the usual communication channels. You also have the right to raise a concern or lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed. We would, however, appreciate the opportunity to address your concerns directly before you approach a supervisory authority.