Privacy Policy - Tottenham Hale Carpet Cleaners

This Privacy Policy explains how Tottenham Hale Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Tottenham Hale Carpet Cleaners customers in area, including anyone who requests a quotation, books a service, receives a service, makes an enquiry, or otherwise interacts with us in connection with carpet cleaning, upholstery cleaning, stain removal, rug cleaning, and related cleaning services.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to help you understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your personal data.

1. Data We Collect

We may collect and process the following categories of personal data depending on how you use our services:

Identity details, such as your name.
Contact details, such as your address, email address, and telephone number.
Service information, including the type of cleaning requested, property access details, preferred appointment times, and notes about the work required.
Billing and payment information, such as payment status, invoice details, and transaction references.
Communication records, including messages, complaints, feedback, and any correspondence relating to your booking or service.
Technical information, such as basic website usage data if you contact us through digital channels, where applicable.
Photographic records, where needed to document the condition of items or areas before and after cleaning, with care taken to avoid unnecessary personal details.

We do not intentionally collect special category data unless it is clearly necessary and you have provided it, or unless another lawful condition applies. We ask that you do not share sensitive information unless it is relevant to your request.

2. How We Use Your Data

We use personal data only where permitted by law and only for purposes that are relevant to our services. Typical uses include:

responding to enquiries and providing quotes;
arranging and delivering cleaning services;
managing appointments, access arrangements, and service changes;
issuing invoices and recording payments;
handling complaints, disputes, and after-service support;
maintaining accurate business records;
meeting legal, tax, and accounting obligations;
improving the quality, reliability, and safety of our services.

We only use your data in ways that are necessary and proportionate. We do not sell your personal data. We also do not use it for unrelated purposes without first ensuring that we have a valid lawful basis.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each type of processing. Depending on the situation, we rely on one or more of the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes taking bookings, confirming service details, completing cleaning work, and handling payment arrangements.

Legal Obligation

We process certain records when required to comply with legal duties, such as tax, accounting, insurance, fraud prevention, or record-keeping obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights. Examples include managing customer relationships, preventing misuse of our services, improving operations, and maintaining security. We always consider whether the processing is necessary and whether it is reasonable in the circumstances.

Consent

In limited situations, we may rely on your consent, for example where it is appropriate to retain optional information or to use certain images or communications for specific purposes. Where consent is used, you can withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

4. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, and in line with legal and business requirements. The length of retention depends on the type of information and the reason it is held.

Booking and service records are generally kept for a reasonable period after the service has been completed, to allow for follow-up, dispute handling, and service history.
Financial and tax records are retained for the period required by law.
Complaints and correspondence may be retained for as long as needed to resolve the issue and demonstrate proper handling.
Marketing preferences, if any are collected, are kept until you opt out or the information is no longer needed.

When personal data is no longer required, we will securely delete, anonymise, or archive it as appropriate. Retention periods may vary depending on legal obligations and the nature of the service, but we always aim to keep data only for the minimum necessary period.

5. Processors and Data Sharing

We may use trusted third parties to process personal data on our behalf. These processors act under our instructions and are required to protect your information and use it only for agreed purposes. Depending on the service involved, processors may include:

payment processors for handling card or electronic payments;
accounting or bookkeeping providers for financial administration;
IT and cloud service providers for secure data storage and system support;
communication tools for sending service-related messages;
subcontracted cleaning operatives where needed to deliver the service.

We may also disclose personal data where required by law, regulation, court order, or government authority. In some cases, we may share information to protect our rights, property, staff, customers, or the public. If personal data is transferred outside the UK, we will ensure appropriate safeguards are in place so that it remains protected to the required standard.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, disclosure, or alteration. These measures may include access controls, secure storage, limited access on a need-to-know basis, and staff awareness of data protection responsibilities. While no system can be guaranteed completely secure, we take reasonable steps to reduce risks and protect your information.

7. Your Rights

As a data subject under UK GDPR, you have several rights regarding your personal data. These rights may be subject to legal limitations in some cases.

Right of access - you can ask whether we hold personal data about you and request a copy.
Right to rectification - you can request correction of inaccurate or incomplete data.
Right to erasure - in certain circumstances, you can request deletion of your data.
Right to restriction - you can ask us to limit how we use your data in some situations.
Right to object - you can object to processing based on legitimate interests, where applicable.
Right to data portability - you may request certain data in a portable format where the legal conditions are met.
Right to withdraw consent - where processing is based on consent, you can withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable data protection law. We may need to verify your identity before taking action, to protect your privacy and prevent misuse of your data.

8. Data Accuracy and Your Responsibility

We aim to keep the personal data we hold accurate and up to date. You can help by informing us of any changes to your contact details, service instructions, or other relevant information. Accurate information helps us provide a reliable service and maintain correct records.

9. Complaints and Further Information

If you have concerns about how your personal data is handled, we encourage you to raise them with us so that we can review the matter. You also have the right to complain to the relevant data protection authority if you believe your data protection rights have not been respected. In the UK, this is the Information Commissioner's Office (ICO).

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is issued. We encourage customers to review this policy periodically so they remain informed about how their data is used.

In summary, Tottenham Hale Carpet Cleaners processes personal data responsibly, lawfully, and only for clear business and legal purposes. We are committed to respecting your privacy, keeping your information secure, and ensuring that all Tottenham Hale Carpet Cleaners customers in area are treated fairly and transparently under data protection law.