Carpet Cleaners BR3 Privacy Policy
This Privacy Policy explains how Carpet Cleaners BR3 collects, uses, stores and protects personal data of its customers and prospective customers. It applies to all Carpet Cleaners BR3 customers and service users in the BR3 area, including anyone who contacts us to request a quote, make a booking, or otherwise interact with our services.
We are committed to complying with the UK General Data Protection Regulation and the Data Protection Act 2018. This Policy describes our role as data controller, the lawful bases on which we process personal data, and the rights you have in respect of your information.
Data Controller
Carpet Cleaners BR3 is the data controller in relation to the personal data processed for the purposes set out in this Privacy Policy. This means we determine the purposes and means of processing your personal data.
If you have any questions about this Policy or about how we handle your data, you can contact us using the details provided on our website or through any of our usual communication channels.
Scope of this Privacy Policy
This Privacy Policy applies to all personal data processed by Carpet Cleaners BR3 in connection with the provision of carpet and upholstery cleaning and related services in the BR3 area. It covers information collected when you use our services, make an enquiry, request a quote, visit our website, communicate with us, or otherwise interact with Carpet Cleaners BR3 as a customer or prospective customer.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us. The data we may collect includes:
Identification and contact details, such as your name, address, property location, and other relevant contact details used for scheduling and delivering services.
Service and booking information, such as details about the services you request, appointment dates and times, access instructions, and notes relating to your specific cleaning requirements.
Communication records, including information you provide when you contact us by phone, through our website, or by other communication channels, and any correspondence we have with you.
Payment-related information, such as payment method and payment status. We do not store full card details where payments are processed through third-party payment providers; those providers process card data on our behalf.
Technical and usage data, such as information about how you use our website or online booking tools, including basic device and browsing information collected through standard logs or similar technologies, where applicable and to the extent permitted by law.
Purposes and Lawful Basis for Processing
We only process your personal data where we have a lawful basis under the UK GDPR. The purposes for which we process personal data, and the lawful bases we rely upon, include:
Providing services and managing bookings. We use your data to provide carpet and upholstery cleaning and related services, manage appointments, and communicate about your bookings. The lawful basis is performance of a contract or taking steps at your request prior to entering into a contract.
Customer communication and support. We use your contact details to respond to your enquiries, provide quotes, send booking confirmations and reminders, and deal with any queries or issues. The lawful basis is performance of a contract or legitimate interests in running our business and ensuring good customer service.
Billing and payments. We process your data to issue invoices, manage payments, and maintain financial records. The lawful basis is performance of a contract and compliance with legal obligations relating to tax and accounting.
Service improvement and business operations. We may use non-excessive customer data to help improve our services, manage our workforce, and plan routes and schedules. The lawful basis is our legitimate interests in operating and improving our business, provided that your rights and freedoms are not overridden.
Marketing communications. Where we send you occasional updates or promotions about our services by electronic means, we will rely on your consent where required by law or, in some cases, our legitimate interests where the law allows, and you have not opted out. You can opt out of marketing communications at any time.
Legal and regulatory compliance. We may process your data to comply with legal obligations, respond to lawful requests from authorities, or establish, exercise, or defend legal claims. The lawful basis is compliance with legal obligations and, where relevant, our legitimate interests.
Data Retention
We keep personal data for no longer than is necessary for the purposes for which it was collected and to meet any legal, accounting, or reporting requirements.
In general, we retain customer and booking records for a period that allows us to manage repeat services, resolve complaints, and comply with applicable limitation periods for legal claims. Financial records, such as invoices, are retained in accordance with tax and accounting laws, which usually require retention for several years.
Where we no longer need your personal data for the purposes described in this Policy, we will securely delete or anonymise it.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors only process your data under our instructions and are required to implement appropriate technical and organisational measures to protect it.
Categories of processors and third parties may include:
Payment processing providers, who handle card and electronic payments on our behalf.
IT and hosting providers, who supply, maintain, and support our website, booking tools, communication systems, and data storage.
Customer management and scheduling systems, which we may use to manage bookings, reminders, and service records.
Professional advisers, such as accountants or legal advisers, where necessary for compliance, accounting, or legal purposes.
We do not sell your personal data to third parties. Where required by law or in connection with legal proceedings, we may also share data with relevant authorities, regulatory bodies, or courts.
International Data Transfers
Where any of our service providers are located outside the United Kingdom or the European Economic Area, or where data may be stored or accessed from outside those regions, we will ensure that appropriate safeguards are in place. These may include the use of recognised standard contractual clauses or other lawful transfer mechanisms to protect your personal data to a standard essentially equivalent to UK data protection law.
Security of Your Personal Data
We take reasonable and proportionate steps to protect personal data from unauthorised access, loss, misuse, or disclosure. These measures include restricting access to personal data to personnel and service providers who need it to perform their duties, and using technical and organisational measures appropriate to the nature of the data and the risks involved.
While no system can be completely secure, we aim to ensure that the level of security is appropriate to the risk and that personal data is treated with confidentiality and care.
Your Data Protection Rights
Under the UK GDPR, you have several rights in relation to your personal data. These rights may be subject to certain conditions and exemptions, but we will respect and facilitate them where they apply.
Right of access. You have the right to request confirmation as to whether we process your personal data and to request a copy of that data.
Right to rectification. You have the right to request that inaccurate or incomplete personal data about you is corrected or updated.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected and we have no other lawful basis to retain it.
Right to restriction of processing. You may have the right to request that we restrict the processing of your personal data in certain situations, for example while we verify its accuracy or consider an objection.
Right to data portability. Where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a commonly used, machine-readable format and to have it transmitted to another controller, where technically feasible.
Right to object. You have the right to object at any time to processing of your personal data based on our legitimate interests, including profiling on that basis. We will stop such processing unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms or the processing is required for legal claims. You also have an absolute right to object to direct marketing.
Right to withdraw consent. Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
Exercising Your Rights
If you wish to exercise any of your data protection rights or have questions about how your personal data is handled, you can contact us using the contact details provided on our website or via our usual communication methods. We may need to verify your identity before acting on your request, to protect your data from unauthorised access.
You also have the right to lodge a complaint with the relevant data protection authority if you are unhappy with how we handle your personal data. In the United Kingdom, this is the Information Commissioner's Office.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any changes will be posted on our website and will take effect from the time they are published. We encourage you to review this Policy periodically to stay informed about how we protect your information.
