Privacy Policy - Carpet Cleaning Barnes

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected for all Carpet Cleaning Barnes customers in the area. It applies to customers, prospective customers, website visitors, and any individual who makes an enquiry, requests a service, or otherwise interacts with Carpet Cleaning Barnes in relation to carpet cleaning, upholstery cleaning, stain treatment, or related household and commercial services.

We are committed to processing personal data in a lawful, fair, and transparent way in accordance with the UK GDPR and the Data Protection Act 2018. This policy is designed to help you understand what data we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your information. By using our services, you acknowledge that your data may be handled as described in this policy.

1. Who This Policy Applies To

This policy applies to all Carpet Cleaning Barnes customers in area, including individuals and businesses located within the local service area who:

request a quotation or make an enquiry;
book carpet cleaning or related cleaning services;
receive follow-up communication before or after a service;
submit feedback, complaints, or service requests;
interact with us through phone, email, messaging, or other communication methods;
visit or use any online or offline service channel linked to our operations.

2. Personal Data We Collect

We only collect personal data that is necessary for operating our services, managing customer relationships, meeting legal obligations, and improving service quality. The categories of data we may collect include:

2.1 Identity and contact details

name
address
phone number
email address
preferred communication method

2.2 Service and transaction information

details of the cleaning service requested or provided
appointment dates and times
service location
service history
billing and payment records
records of quotes, invoices, receipts, and completed work

2.3 Communication records

messages sent to us
notes from calls or enquiries
complaints and feedback
customer service correspondence

2.4 Technical and usage data

device or browser information where applicable
basic online interaction data
usage statistics relating to service forms or online booking tools

2.5 Special category data

We do not intentionally collect special category data, such as information about health, religion, ethnicity, or political views, unless you choose to provide it and it is strictly necessary for a specific service issue. If such data is shared with us accidentally or in relation to a service concern, it will be handled with extra care and only where a valid legal basis exists. We ask customers not to share unnecessary sensitive information.

3. How We Use Personal Data

We use personal data only for legitimate business and legal purposes. These include:

providing quotations and managing bookings;
carrying out carpet cleaning and related services;
confirming appointments and service details;
processing payments and issuing invoices;
responding to enquiries and complaints;
maintaining internal records;
improving customer experience and service quality;
meeting legal, tax, accounting, and regulatory obligations;
preventing fraud, misuse, or unauthorised access;
defending legal claims or responding to official requests.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis before processing personal data. Depending on the context, we rely on the following bases:

4.1 Contract

We process personal data when it is necessary to take steps before entering into a contract or to perform a contract with you. This includes handling bookings, delivering cleaning services, sending service confirmations, and managing invoices.

4.2 Legitimate interests

We may process personal data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. Examples include improving operations, maintaining internal records, responding to customer requests, and protecting our business from fraud or misuse.

4.3 Legal obligation

We process certain information where required to comply with legal obligations, such as accounting, tax, consumer protection, or record-keeping requirements.

4.4 Consent

In limited cases, we may rely on your consent, for example where you have agreed to receive optional marketing messages. You can withdraw consent at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We do not sell personal data. However, in order to operate efficiently and deliver our services, we may share limited information with trusted third-party processors who act on our behalf and under our instructions. These may include:

payment processing providers;
booking and scheduling software providers;
email and communication service providers;
IT support and cloud storage providers;
accounting or bookkeeping service providers;
professional advisers such as lawyers, insurers, or auditors;
subcontractors or service partners where necessary to complete a job.

All processors are required to handle personal data securely and only for the purposes we specify. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with data protection law.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods may vary depending on the type of information and the reason it is held.

Customer booking and service records: retained for a reasonable period after service completion for administration, warranty handling, and dispute resolution.
Financial and tax records: retained for the period required by law.
Communication records: retained for as long as needed to respond to queries, manage complaints, or maintain service history.
Marketing consent records: retained until consent is withdrawn or the data is no longer needed.

When data is no longer required, it is securely deleted, anonymised, or destroyed. We review retention practices regularly to ensure information is not kept longer than necessary.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access restrictions, secure storage, password protection, staff confidentiality obligations, and careful control over who can access customer records.

Although we take reasonable steps to safeguard information, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we aim to protect your data to a high standard at all times.

8. Your Rights

As a data subject under the UK GDPR, you have important rights regarding your personal data. These include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to ask us to limit how we use your data in certain situations.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent: where processing is based on consent.
Right to complain: to raise concerns with the UK data protection authority if you believe your rights have been infringed.

We may need to verify your identity before responding to a rights request. Some rights may not apply in every situation, as legal exemptions can limit what we are able to do.

9. Marketing Communications

We may only send optional marketing messages where permitted by law and, where required, with your consent. You can opt out of marketing communication at any time. If you do so, we will stop sending such messages while continuing to send important service-related communication where necessary.

10. Children’s Data

Our services are intended for adults or for adults arranging services on behalf of a household or business. We do not knowingly collect personal data from children unless it is incidental to a household booking and supplied by an adult customer. If we become aware that we have collected a child’s data without proper justification, we will take appropriate steps to remove it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, service practices, or operational needs. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

12. Summary of Our Commitment

Carpet Cleaning Barnes is committed to respecting your privacy, using personal data responsibly, and maintaining transparency about how information is processed. We collect only what we need, use it for clear and lawful purposes, store it safely, and retain it only for as long as necessary. We also work with carefully selected processors who are required to protect your data and act only on our instructions.

In short: if you are a customer in the area, your personal data is handled with care, in line with legal requirements, and with respect for your privacy rights.