Privacy Policy - Barnet Carpet Cleaners

Barnet Carpet Cleaners is committed to protecting your privacy and handling your personal data in a lawful, fair, and transparent way. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use our carpet cleaning services. It applies to all Barnet Carpet Cleaners customers in the area, including prospective, current, and former customers, as well as anyone who contacts us on behalf of a property owner, tenant, landlord, business, or managing agent.

We may update this Privacy Policy from time to time to reflect changes in law, regulation, or our services. When we do, we will ensure that the most current version clearly explains how your information is processed.

1. Personal Data We Collect

We collect only the personal data that is necessary to provide our services, manage our relationship with you, and meet our legal obligations. Depending on your interactions with us, we may collect the following categories of information:

Identity details, such as your name.
Contact details, such as your telephone number and email address.
Address details, such as the service address and billing address.
Service information, including the type of cleaning requested, property access instructions, preferred appointment times, and notes relevant to the job.
Payment information, such as transaction records and invoice details. We do not normally store full payment card information if payment is processed through a secure payment provider.
Communication records, such as emails, messages, call notes, and service-related correspondence.
Technical information, if you interact with us online, such as device data, IP address, or browser information where applicable.

We generally do not seek to collect special category data. However, if you voluntarily provide information that could reveal health or access needs, we will only process it where necessary and appropriate for service delivery and with suitable safeguards.

2. How We Use Your Personal Data

We use your data only for specific, legitimate business purposes. These include:

Providing quotes, arranging bookings, and delivering carpet cleaning services.
Managing communications before, during, and after a service visit.
Processing payments, issuing invoices, and keeping accurate accounting records.
Handling complaints, service queries, cancellations, and follow-up requests.
Improving our services, customer experience, and operational efficiency.
Meeting legal, tax, insurance, and regulatory obligations.
Protecting against fraud, misuse, or unlawful activity.

We only use your personal data in ways that are compatible with the purposes described in this policy. We do not sell your personal data.

3. Lawful Basis for Processing

Under the UK GDPR and the Data Protection Act 2018, we must have a valid lawful basis to process personal data. Barnet Carpet Cleaners relies on the following bases depending on the situation:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing a quote, confirming a booking, carrying out the cleaning service, and handling payment or post-service matters.

Legal Obligation

We may process and retain certain data to comply with legal requirements, such as tax, accounting, insurance, fraud prevention, and record-keeping duties.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include maintaining service records, improving our business operations, responding to enquiries, and protecting our business from misuse.

Consent

Where required, we will rely on your consent. For example, if you choose to receive certain marketing communications, we will only do so where consent is appropriate and can be withdrawn at any time.

4. Data Sharing and Processors

We may share personal data with carefully selected third parties who act as processors or, in some cases, independent controllers. We only share data where necessary and on an appropriate legal basis. Our processors may include:

Payment processors that securely handle card or electronic payments.
IT and cloud service providers that support secure storage, communication, and business administration.
Accounting and bookkeeping providers that help us maintain financial records.
Scheduling or booking systems that assist with appointment management.
Professional advisers, such as accountants, insurers, or legal advisers, where necessary.

All processors are required to handle personal data securely, act only on our instructions, and comply with data protection law. Where personal data is shared with independent controllers, they will be responsible for their own processing practices.

We may also disclose data if required by law, court order, or lawful request from a public authority.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason we hold it.

Customer and service records are generally retained for the period needed to manage the service and resolve any follow-up issues.
Financial and tax records are retained for the period required by law.
Communication records may be kept for a reasonable period to support service history and customer care.
Marketing data is retained until you withdraw consent or object to processing, where applicable.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are designed to reflect the nature of the data we hold and the risks involved in processing it.

While no system can be guaranteed completely secure, we work to ensure that personal data is handled with care and that access is limited to those who need it for legitimate business purposes.

7. Your Rights

You have rights under data protection law in relation to your personal data. These rights may be exercised subject to legal limits and exemptions.

Right of access — you can request a copy of the personal data we hold about you.
Right to rectification — you can ask us to correct inaccurate or incomplete information.
Right to erasure — in certain circumstances, you can ask us to delete your personal data.
Right to restriction — you can ask us to limit how we use your data in some cases.
Right to object — you can object to processing based on legitimate interests and, in some cases, direct marketing.
Right to data portability — you may request certain data in a structured, commonly used, machine-readable format.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable data protection law. We may need to verify your identity before acting on your request.

8. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it. This may include the use of approved contractual protections or transfers to countries recognised as providing adequate protection under applicable law.

9. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is necessary in the context of a property booking or service arrangement made by a parent, guardian, or authorised adult. In such cases, we will only process the information needed for the service.

10. Changes to This Policy

We may update this Privacy Policy to reflect operational changes or legal developments. Any updates will be made available in a clear and accessible manner. We encourage customers to review the policy periodically so they remain informed about how their data is processed.

11. Summary of Our Commitment

Barnet Carpet Cleaners respects your privacy and processes personal data responsibly. We collect only what we need, use it for legitimate service-related purposes, keep it no longer than necessary, share it only with trusted processors or where legally required, and uphold your rights under GDPR. Our commitment is to maintain lawful, secure, and transparent data practices for every customer in the Barnet area.

This policy applies to all Barnet Carpet Cleaners customers in area.