Privacy Policy - Ruislip Carpetcleaning

This Privacy Policy explains how Ruislip Carpetcleaning collects, uses, stores, shares, and protects personal data. It applies to all Ruislip Carpetcleaning customers in area, including prospective customers, current customers, and anyone who interacts with our services in connection with carpet cleaning, upholstery cleaning, stain treatment, and related domestic or commercial cleaning work.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only process personal information where there is a valid legal basis to do so, and we take reasonable steps to protect the privacy of the people whose data we hold.

1. Information We Collect

We collect only the personal data that is necessary for providing and managing our services. Depending on your interaction with us, this may include:

Identity details: your name and, where relevant, business or property name.
Contact details: address, email address, and telephone number.
Service information: details about the cleaning service requested, property access instructions, job notes, and service preferences.
Billing and payment information: records needed to process invoices, payments, refunds, and accounting entries. We do not store unnecessary payment details.
Communication records: messages, complaints, feedback, service updates, and correspondence with us.
Technical information: if you contact us electronically, we may receive limited device or usage information necessary to maintain service security and record communications.

We do not intentionally collect special category data unless it is necessary and you have provided it voluntarily, for example if you tell us about a medical, mobility, or access requirement that affects service delivery. In such cases, we will only use that information for the purpose for which it was shared.

2. How We Use Your Data

We use personal data to provide our services and manage our relationship with customers. This includes:

Arranging and delivering cleaning appointments.
Providing quotations, confirmations, and service updates.
Managing customer accounts and service records.
Handling payments, invoices, and refunds.
Responding to questions, complaints, and requests.
Meeting legal, tax, accounting, and insurance obligations.
Maintaining records for quality assurance, internal administration, and dispute resolution.
Protecting our business, staff, and customers from fraud, misuse, or security risks.

We only use your data for the purposes for which it was collected, unless we reasonably determine that another compatible purpose applies or we are required by law to use it differently.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for every use of personal data. Ruislip Carpetcleaning relies on the following lawful bases:

Performance of a Contract

We process your personal data where it is necessary to enter into or perform a contract with you. This includes arranging services, confirming appointments, completing cleaning work, and processing payments.

Legal Obligation

We may process and retain certain information to comply with legal duties such as tax, accounting, record-keeping, consumer law, and insurance requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include managing our operations, improving service quality, preventing fraud, securing systems, and keeping internal records. We ensure that any such processing is proportionate and limited to what is necessary.

Consent

Where consent is needed, we will ask for it clearly and separately. You may withdraw consent at any time. If consent is withdrawn, this will not affect processing that has already taken place lawfully before withdrawal.

Vital Interests

In rare circumstances, we may process information to protect someone’s vital interests, such as where there is an emergency or safety concern.

4. Data Sharing and Processors

We may share personal data with trusted third parties who act as data processors on our behalf. These processors are only permitted to use your data according to our instructions and must keep it secure. Typical processors may include:

Payment providers that process transactions and support billing.
Accounting or bookkeeping services that assist with financial administration and tax compliance.
IT and cloud service providers that host data, email, or scheduling systems.
Communication service providers that help us send confirmations, service messages, or administrative notices.
Insurance, legal, or dispute-handling advisers where necessary to manage claims or legal obligations.

We may also disclose personal data if required by law, regulation, court order, or request from a lawful authority. We do not sell personal data.

Where any processor is used, we take reasonable steps to ensure appropriate contractual safeguards are in place, including data processing terms, security obligations, and restrictions on further disclosure.

5. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by law. Retention periods may vary depending on the type of information and why it is held.

Customer and service records are usually retained for the duration of the customer relationship and for a reasonable period afterward for administration, accounting, and dispute resolution.
Financial and tax records are retained for the period required by applicable law.
Communication records may be kept for a period necessary to manage queries, complaints, and service history.
Consent-based data is kept only until consent is withdrawn or no longer needed for the stated purpose.

When data is no longer required, we will delete, anonymise, or securely destroy it where appropriate.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and restricted access to information on a need-to-know basis.

Although no system can be guaranteed completely secure, we work to maintain a level of protection that is suitable for the nature of the data we process.

7. Your Rights

As a data subject, you have a number of rights under data protection law. These rights may apply depending on the circumstances and the legal basis for processing. You may have the right to:

Access the personal data we hold about you.
Rectification of inaccurate or incomplete data.
Erasure of your data in certain circumstances.
Restriction of processing in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability where processing is based on consent or contract and is carried out by automated means.
Withdraw consent where processing is based on consent.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully. We encourage you to contact us first so we can try to resolve any concerns promptly.

8. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is necessary in connection with a household booking or similar lawful service arrangement. Where children’s data is involved, we will process it only where lawful and appropriate.

9. International Transfers

Where personal data is transferred outside the UK, we will ensure that suitable safeguards are in place to protect the information in line with applicable law. This may include the use of approved contractual terms or transfers to countries with adequate legal protections.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is published. We encourage customers to review this policy periodically to stay informed about how their data is used.

11. Summary of Our Commitment

Ruislip Carpetcleaning respects the privacy of every customer and handles personal data with care, transparency, and accountability. We collect only what we need, use it for clear and lawful purposes, retain it only as long as necessary, and ensure it is shared only with trusted processors or where required by law. If you are a customer in the area, your rights under data protection law remain fully protected.

This policy is intended to provide a clear and accessible explanation of our data practices and to support compliance with applicable privacy law.