Privacy Policy - Upminster Carpet Cleaners

This Privacy Policy applies to all customers of Upminster Carpet Cleaners in the Upminster area. It explains how we collect, use, store, share, and protect personal data when you use our carpet cleaning and related services. We are committed to handling personal information in a lawful, fair, and transparent way, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Upminster Carpet Cleaners provides carpet cleaning and related cleaning services to customers in and around Upminster. For the purpose of data protection law, we are the data controller of the personal data we collect from you in connection with our services, unless we clearly tell you otherwise.

2. Information We Collect

We only collect personal data that is necessary for us to provide our services, manage our business, and meet our legal obligations. The types of information we may collect include:

Identity details such as your name and title.
Contact details such as your address, phone number, and email address.
Service details such as the type of cleaning requested, property access instructions, appointment preferences, and service notes.
Payment information such as payment confirmation, billing records, and limited transaction details. We do not store full card details where payments are processed securely by third-party providers.
Communication records such as messages, complaints, feedback, and service-related correspondence.
Technical and usage data if you interact with our website or online forms, such as IP address, browser type, and basic usage information, where applicable.

We do not intentionally collect special category data unless it is necessary and you provide it voluntarily, for example where you mention an allergy, mobility issue, or other relevant condition that affects the cleaning service. Where this occurs, we will only process such data if we have an appropriate lawful basis.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

To respond to enquiries and provide quotations.
To schedule, deliver, and manage cleaning services.
To communicate with you about appointments, changes, or service updates.
To process payments, invoices, and refunds where applicable.
To keep business and financial records.
To handle complaints, disputes, and customer service requests.
To improve our services, training, and internal operations.
To comply with legal and regulatory requirements.

We do not sell your personal data.

4. Lawful Basis for Processing

We process personal data only where we have a lawful basis under UK GDPR. Depending on the situation, we may rely on one or more of the following:

Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes providing quotations, arranging appointments, completing cleaning services, and managing payments.

Legal Obligation

We may process and retain certain information to meet our legal obligations, such as tax, accounting, and record-keeping requirements.

Legitimate Interests

We may use personal data where it is necessary for our legitimate business interests and where your rights and freedoms do not override those interests. This can include service improvement, fraud prevention, customer communication, and internal administration.

Consent

In limited circumstances, we may rely on your consent, for example if you voluntarily provide optional information or agree to receive certain types of communication. Where consent is used, you may withdraw it at any time.

5. Sharing Your Data and Processors

We may share your personal data with trusted third parties when necessary to provide our services or operate our business. These third parties act as processors or independent controllers depending on the circumstances. Examples may include:

Payment processors that securely handle transactions.
IT and cloud service providers that store or support our systems.
Accounting or bookkeeping providers that assist with financial records.
Customer communication tools used to manage messages or appointment reminders.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

All processors are required to handle personal data securely and only on our instructions, using appropriate technical and organisational measures. We do not allow processors to use your data for their own purposes unless they are acting as separate controllers and we have informed you accordingly.

We may also disclose personal data where required by law, court order, regulatory request, or to protect our rights, property, staff, or customers.

6. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods may vary depending on the type of information and the reason for processing.

Customer and service records are generally kept for the duration of the customer relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by UK law, typically six years.
Complaints, correspondence, and claims-related records may be kept longer where needed to resolve disputes or defend legal claims.

When data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

7. Data Security

We take the security of personal data seriously and use suitable measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures may include access controls, password protection, secure storage, staff confidentiality obligations, and minimisation of the data we collect.

While we do our best to protect your information, no system is completely secure. If a data breach occurs that is likely to pose a risk to your rights and freedoms, we will take appropriate action in line with applicable law.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances:

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – in certain cases, you may ask us to delete your data.
Right to restrict processing – you may ask us to limit how we use your data in certain situations.
Right to object – you may object to processing based on legitimate interests, and in some cases direct marketing.
Right to data portability – in certain cases, you may request your data in a structured, commonly used format.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached. We encourage you to contact us first so we can try to resolve any concerns promptly.

9. Children’s Data

Our services are intended for adults arranging cleaning services for homes or premises. We do not knowingly collect personal data from children. If we become aware that such data has been collected without appropriate authority, we will take reasonable steps to delete it.

10. International Transfers

Where any of our service providers store or process data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your personal data and maintain a level of protection required under applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is published, and we encourage customers to review it periodically.

12. Summary of Our Commitment

Upminster Carpet Cleaners is committed to treating your personal data responsibly, transparently, and lawfully. We collect only what we need, use it for clear business purposes, keep it only as long as necessary, and share it only with trusted processors or where required by law. This policy applies to all customers in the Upminster area who use our services.

By using our services, you acknowledge that you have read and understood this Privacy Policy.