Privacy Policy
Carpet Cleaning Notting Hill Privacy Policy
This Privacy Policy explains how Carpet Cleaning Notting Hill collects, uses, stores, and protects your personal data when you use our carpet cleaning and related services. It applies to all Carpet Cleaning Notting Hill customers in the Notting Hill area and anyone who contacts us to request information, quotations, or services.
We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation, the EU General Data Protection Regulation where applicable, and relevant UK data protection laws.
Data Controller
Carpet Cleaning Notting Hill is the data controller for the personal data that we collect and process in connection with our services. This means we decide how and why your personal data is used and are responsible for ensuring that your data is handled lawfully and securely.
Personal Data We Collect
We may collect and process the following categories of personal data when you interact with us or use our services:
Identification and contact details, such as your full name, address, and general location information within the Notting Hill area. Communication details, such as your preferred method of contact and records of your communications with us, including enquiries, booking requests, and feedback. Service-related information, such as property access details relevant for carrying out the service, details about the items to be cleaned, and any specific instructions you provide. Transaction information, such as service bookings, amounts charged, dates of payments, and payment status. We do not store full payment card details; these are processed securely by our chosen payment processors. Technical and usage data, where applicable, such as basic information about how you access and interact with our website or online booking tools, including device type, approximate location, and pages visited.
We do not routinely collect special category data such as health information or data about children. If you voluntarily provide such information in the context of your booking or enquiry, we will only use it where strictly necessary and in line with data protection law.
How We Collect Your Data
We collect personal data directly from you when you contact us by phone, online form, or other communication channels to request a quote, make a booking, or ask a question. We may also collect data when you use our website or online tools, for example when you complete a booking form or request a call back. In some cases, we may receive basic contact and booking information from trusted business partners or platforms where we advertise our services, where you have requested our services through them.
Lawful Bases for Processing
We rely on several lawful bases under the GDPR to process your personal data, depending on the context:
Performance of a contract. We process your personal data to provide you with our carpet cleaning and related services, including handling bookings, accessing your property for cleaning, communicating with you about the service, and processing payments.
Legitimate interests. We may process your data where it is necessary for our legitimate interests and does not override your rights and freedoms. These interests include managing and improving our services, responding to general enquiries, handling complaints, ensuring security and fraud prevention, and maintaining business records.
Legal obligations. We may process your data where we are required to do so by law, for example to maintain financial records, comply with tax obligations, or respond to requests from public authorities.
Consent. In limited situations, we may ask for your consent, for example to send you certain forms of marketing communications that are not covered by our legitimate interests. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage our services, including scheduling and carrying out carpet cleaning and related services in the Notting Hill area and confirming and updating bookings. To communicate with you, including responding to your enquiries, sending booking confirmations and reminders, providing updates about your service, and handling feedback or complaints. To manage billing and payments, including issuing invoices, processing payments through secure payment processors, and managing refunds or disputes. To improve our services, including monitoring service quality, training staff, and analysing service usage trends to enhance our offerings. To ensure security and prevent misuse, including verifying identity when appropriate and preventing and detecting fraud or other unlawful activities. To comply with legal and regulatory requirements, including maintaining appropriate business and financial records.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements.
Customer and booking records are typically kept for as long as you remain an active customer and for a reasonable period thereafter to manage our relationship and deal with any queries or disputes. Financial and transaction records are retained for the period required by applicable tax and accounting laws. Communications and service enquiries are kept for a period that allows us to respond to your requests and maintain service quality records.
When we no longer need your personal data, we will securely delete or anonymise it so that it can no longer be associated with you.
Data Processors and Third Parties
We may share your personal data with trusted third party service providers who act as data processors on our behalf. These processors help us deliver and manage our services and operate our business. They may include:
Payment processing providers who handle card payments and other transactions securely. Information technology and hosting providers who support our websites, booking tools, and data storage systems. Customer relationship management and communication service providers who assist with managing bookings, sending service communications, and handling customer interactions. Professional advisers such as accountants or legal advisers where necessary for compliance and business management.
These service providers may only process your personal data in accordance with our instructions and must provide appropriate security measures to protect your data. They are not permitted to use your data for their own purposes.
We may also need to share your data where required by law, for example with law enforcement or regulatory authorities, or in connection with legal proceedings.
International Transfers
Some of our service providers may be located outside the United Kingdom or the European Economic Area. Where this is the case, we will ensure that appropriate safeguards are in place to protect your personal data, such as the use of standard contractual clauses or other legally recognised transfer mechanisms. We will take steps to ensure that your data is afforded a level of protection essentially equivalent to that provided in the United Kingdom and the European Economic Area.
Security of Your Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, secure storage systems, and staff training on data protection responsibilities.
Although we take reasonable steps to protect your data, no transmission of information over the internet or method of electronic storage is completely secure. You are responsible for ensuring that any personal data you send to us is provided through channels you consider secure.
Your Data Protection Rights
Under the GDPR and applicable data protection laws, you have a number of rights in relation to your personal data. These rights include:
Right of access. You have the right to request confirmation of whether we hold personal data about you and to receive a copy of that data, together with information about how it is processed.
Right to rectification. You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction. You have the right to request that we restrict the processing of your personal data in certain situations, such as while we verify the accuracy of the data or assess an objection you have raised.
Right to object. You may object to our processing of your personal data where we rely on legitimate interests as the lawful basis. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is needed for legal claims. You also have the right to object to direct marketing at any time.
Right to data portability. Where our processing is based on your consent or on a contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format, or transfer it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with a supervisory authority if you are concerned about how we handle your personal data. In the United Kingdom, this is typically the Information Commissioner's Office.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, applicable laws, or data protection practices. The latest version will always apply to the processing of your personal data. We encourage you to review this policy periodically to stay informed about how we protect your information.