Privacy Policy - Cockfosters Carpet Cleaners

This Privacy Policy explains how Cockfosters Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Cockfosters Carpet Cleaners customers in the area, including people who request a quote, book a service, receive cleaning services, or otherwise interact with us in connection with our carpet cleaning and related services.

We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to help you understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have in relation to your personal information.

1. Data We Collect

We collect only the information that is reasonably necessary for delivering our services, managing our business, and meeting our legal obligations. The types of personal data we may collect include:

• Identity information: your name, and where relevant, your title.
• Contact information: your address, telephone number, and email address.
• Service information: details about the cleaning service requested, property access arrangements, preferred dates, and notes relevant to the job.
• Payment information: payment status, billing records, and transaction details. We do not store unnecessary payment card details if these are processed by a third-party payment provider.
• Communication records: emails, messages, call notes, complaints, and feedback.
• Technical data: limited information such as device identifiers, browser type, or IP address if you contact us through digital systems or if our website tools collect this information.
• Special category data: in the ordinary course of business, we do not seek to collect special category data. If such data is inadvertently provided, for example in a message about health access needs or allergies, we will only process it where permitted by law and where necessary.

We do not collect more information than we need. If you choose not to provide certain information, we may still be able to help, but some services may be limited.

2. How We Use Your Data

We use personal data for the following purposes:

• to provide quotes and arrange carpet cleaning services;
• to communicate with you about bookings, service updates, and invoices;
• to carry out the service you requested;
• to process payments and keep financial records;
• to handle complaints, queries, and customer support;
• to manage our business operations, accounting, and record keeping;
• to comply with legal, tax, and regulatory obligations;
• to protect against fraud, misuse, or security incidents;
• to improve our services and customer experience.

We only use personal data where we have a valid lawful basis to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the context, we rely on one or more of the following bases:

Contract

We process your information when it is necessary to enter into or perform a contract with you. This includes arranging appointments, carrying out carpet cleaning services, confirming service details, and issuing invoices.

Legitimate Interests

We may process your data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing customer records, responding to enquiries, improving our services, preventing fraud, and maintaining secure systems.

Legal Obligation

We process certain information to comply with legal obligations, including tax law, accounting requirements, insurance obligations, and record-keeping duties.

Consent

In limited situations, we may rely on your consent, for example if we ever ask to use information for a purpose that is not covered by another lawful basis. Where consent is used, you may withdraw it at any time.

Vital Interests and Public Task

These bases are rarely relevant to our day-to-day services. However, if there were an emergency or a legal requirement to protect someone’s safety, we would process information as permitted by law.

4. How We Share Data and Processors We Use

We may share personal data with trusted third parties who help us run our business. These organisations act as processors when they process data on our instructions and only for the purposes we define.

• Payment processors: for taking and recording payments securely.
• Booking and scheduling providers: for organising appointments and managing service calendars.
• Email and communication providers: for sending messages and managing correspondence.
• IT and cloud storage providers: for hosting data, backups, and secure document storage.
• Accounting and bookkeeping providers: for invoicing, tax administration, and financial reporting.
• Professional advisers: such as accountants, insurers, or legal advisers where necessary.

We may also disclose data if required by law, by a court order, or to public authorities where necessary and lawful.

All processors are required to protect your data. We take reasonable steps to ensure that any third party handling personal data implements appropriate technical and organisational security measures.

5. International Transfers

Some of our processors may store or access data outside the UK. If this happens, we will ensure appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or equivalent lawful transfer mechanisms, to protect your information to a level consistent with UK GDPR requirements.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Retention periods can vary depending on the type of data and the reason it was collected.

• Customer and booking records: kept for the duration of the business relationship and for a reasonable period afterwards in case of follow-up queries or disputes.
• Financial and tax records: retained for the period required by law, typically several years.
• Communication records: retained for as long as needed to resolve matters or maintain customer service history.
• Security and audit logs: retained for limited periods to protect systems and investigate incidents.

When data is no longer needed, we will delete it securely or anonymise it so it can no longer identify you. We do not keep information indefinitely.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures may include access controls, secure storage, role-based permissions, and limited data sharing on a need-to-know basis.

Although no system can be guaranteed completely secure, we work to reduce risks and review our practices regularly. If a personal data breach occurs and it is likely to result in a risk to your rights and freedoms, we will take steps required by law, which may include notifying the Information Commissioner’s Office and affected individuals.

8. Your Rights

Under data protection law, you have several rights regarding your personal data. These rights may apply depending on the circumstances and any legal exemptions:

• Right of access: you can ask for a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct inaccurate or incomplete data.
• Right to erasure: you can ask us to delete your data in certain situations.
• Right to restrict processing: you can ask us to limit how we use your data in certain cases.
• Right to data portability: you can ask for certain data to be provided in a machine-readable format where applicable.
• Right to object: you can object to processing based on legitimate interests or direct marketing, where relevant.
• Right to withdraw consent: if we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we may need to verify your identity before responding. We aim to respond within the time limits set by law.

9. Children’s Data

Our services are generally intended for adults. We do not knowingly collect personal data from children except where it is necessary in the context of a service request and with appropriate adult involvement. If we become aware that we have collected data from a child without proper basis, we will take reasonable steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how we protect personal data.

11. Summary of Our Commitments

Cockfosters Carpet Cleaners is committed to handling personal data responsibly, securely, and lawfully. We collect only the information needed to provide services and manage our business, use it only where we have a lawful basis, keep it only for as long as necessary, and share it only with trusted processors or where the law requires it. We also respect your rights and will deal with requests fairly and transparently.

This Privacy Policy applies to all Cockfosters Carpet Cleaners customers in area.