Privacy Policy - East Barnet Carpet Cleaners

This Privacy Policy explains how East Barnet Carpet Cleaners collects, uses, stores, shares, and protects personal data relating to customers, prospective customers, and other individuals whose information we process in connection with our carpet cleaning, upholstery cleaning, rug cleaning, stain treatment, and related services. This policy applies to all East Barnet Carpet Cleaners customers in the area. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

By using our services, making an enquiry, requesting a quote, booking an appointment, or communicating with us in any way, you acknowledge that we may process your personal data as described in this policy.

1. Who We Are

East Barnet Carpet Cleaners provides domestic and commercial cleaning services in East Barnet and surrounding local areas. For the purposes of data protection law, we act as the data controller for the personal data we collect and process about our customers, prospective customers, and service recipients. This means we decide how and why your personal data is used.

2. Personal Data We Collect

We only collect personal data that is necessary for delivering our services, responding to enquiries, managing bookings, maintaining records, and meeting legal obligations. The categories of data we may collect include:

Identity data: your name, title, and, where relevant, business name.
Contact data: address, email address, telephone number, and any preferred contact details.
Service data: details of the cleaning services requested, property access information, appointment times, and job history.
Payment data: transaction details, payment status, and limited financial information needed to process payments or refunds.
Communication data: messages, emails, call notes, complaints, and feedback.
Technical data: basic information such as IP address, browser type, and device data when you interact with our online systems, where applicable.
Special category data: in normal circumstances, we do not intentionally collect special category data. If such data is provided incidentally, for example within notes about health, access needs, or allergies, we will only process it where necessary and with appropriate safeguards.

We do not knowingly collect more information than we need. If you choose not to provide certain data, we may be unable to provide some services or respond fully to your request.

3. How We Use Your Personal Data

We use personal data for the following purposes:

to provide quotations, confirm bookings, and deliver cleaning services;
to communicate with you about appointments, service changes, or follow-up matters;
to process payments, refunds, and billing-related administration;
to manage customer records and service histories;
to respond to queries, complaints, or requests for support;
to improve our services, training, and customer experience;
to maintain internal business records and comply with legal or tax obligations;
to detect and prevent fraud, misuse, or security incidents.

We do not sell your personal data. Any use of your information is limited to the purposes described in this policy or to purposes that are otherwise permitted by law.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis to process personal data. Depending on the context, we rely on one or more of the following bases:

Contract

We process your data where it is necessary to enter into or perform a contract with you, such as providing a quote, booking a service, or completing a cleaning appointment.

Legal obligation

We process data where necessary to comply with legal duties, including accounting, tax, recordkeeping, and responding to lawful requests from public authorities.

Legitimate interests

We may process your data where it is in our legitimate interests and those interests are not overridden by your rights and freedoms. This includes managing bookings, improving services, maintaining customer records, and handling operational communications. When we rely on legitimate interests, we consider the impact on your privacy and only use data in ways that are proportionate and reasonable.

Consent

In limited situations, we may rely on your consent, for example where consent is required for a particular type of communication or processing. Where we rely on consent, you may withdraw it at any time, although this will not affect processing already carried out before withdrawal.

5. How We Share Personal Data

We may share personal data with trusted third parties where necessary for the operation of our business and the delivery of services. These third parties act as processors or, in some cases, independent controllers. We only share data when there is a lawful and appropriate reason to do so.

Typical categories of recipients include:

Payment processors that help us collect and manage payments securely.
IT and cloud service providers that host our systems, email, storage, or booking tools.
Accountants and professional advisers who support compliance and business administration.
Customer communication tools used to manage messages and appointment reminders.
Service partners or subcontractors where needed to carry out cleaning work or related tasks on our behalf.
Regulators, law enforcement, or courts where disclosure is required by law.

Where we use processors, they are contractually required to keep your data secure, process it only on our instructions, and comply with data protection law. We take reasonable steps to ensure that any third party handling personal data on our behalf provides appropriate protections.

6. International Transfers

If any of our service providers process data outside the UK, we will ensure that appropriate safeguards are in place before transferring personal data. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under data protection law.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations. Retention periods depend on the type of data and the reason for processing.

Customer service records are normally retained for a period that allows us to manage follow-up queries, service history, and business administration.
Financial and invoicing records are kept for the period required under tax and accounting rules.
Communication records may be kept for as long as needed to resolve disputes, maintain customer service standards, or preserve relevant business evidence.
Where data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

We regularly review retained data to ensure it is not kept longer than necessary.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the lawful basis relied upon. They include:

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: in certain cases, you may request that we delete your data.
Right to restriction: you may ask us to limit how we use your data in some situations.
Right to object: you may object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request a copy in a structured, commonly used format.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we may need to verify your identity before responding. We will respond within the time limits required by law unless a lawful exception applies.

9. Security of Your Data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and confidentiality obligations. While no system can be guaranteed to be completely secure, we take data protection seriously and review our safeguards regularly.

10. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data directly from children unless it is necessary in connection with a household booking or service arrangement and is provided by an adult responsible for the booking. If we become aware that we have collected data improperly, we will take appropriate steps to delete or protect it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or how we process personal data. Any revised version will apply from the date it is made available. We encourage customers to review the policy periodically so they remain informed about how their information is used.

12. Summary of Key Principles

In summary, East Barnet Carpet Cleaners processes personal data only when it has a valid lawful basis, uses the information for clear business and service purposes, stores it for no longer than necessary, and shares it only with carefully selected processors or where required by law. We aim to be transparent, respectful, and responsible in all dealings with personal data.

Your privacy matters to us. If you are a customer in the area served by East Barnet Carpet Cleaners, this policy sets out the standards we follow when handling your personal information.