Privacy Policy - Abbey Wood Carpet Cleaners

This Privacy Policy explains how Abbey Wood Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Abbey Wood Carpet Cleaners customers in the area, including individuals who request quotes, make bookings, receive cleaning services, or otherwise interact with our business. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Abbey Wood Carpet Cleaners provides carpet cleaning and related cleaning services. In the context of this Privacy Policy, we act as the data controller for the personal data we collect and use for our own business purposes. This means we decide how and why your personal data is processed.

We take privacy seriously and only collect information that is necessary to deliver services, manage our business, meet legal obligations, and improve the customer experience. We aim to keep all information accurate, secure, and retained only for as long as needed.

2. Personal data we collect

We may collect the following categories of personal data:

Identity details such as your name.
Contact details such as address, telephone number, and email address.
Service details including property access instructions, cleaning preferences, and information about the areas to be cleaned.
Payment information where needed to process invoices, payments, refunds, or accounting records.
Communication records including messages, complaints, enquiries, and feedback.
Technical information such as limited website or device data if you interact with our online services, where applicable.
Usage and service history including records of appointments, previous services, and customer notes relevant to delivering future services.

We do not intentionally collect special category data unless it is necessary and you choose to provide it, or it is relevant to a specific service issue. Special category data includes information such as health details, religious beliefs, or biometric data. If such information is ever provided, we will handle it with additional safeguards and only where a lawful basis applies.

3. How we use your personal data

We use personal data for the following purposes:

To provide quotes and manage bookings.
To carry out cleaning services at the requested property.
To communicate with you about appointments, service updates, or customer queries.
To issue invoices, process payments, and manage our accounts.
To handle complaints, disputes, and customer support requests.
To maintain business records and improve our services.
To meet legal, tax, and insurance obligations.
To protect against fraud, misuse, or security incidents.

We only use personal data in ways that are compatible with the reasons it was collected. Where we need to use your data for a new purpose, we will ensure that a valid lawful basis exists.

4. Lawful basis for processing

Under data protection law, we must have a lawful basis for each type of processing. Abbey Wood Carpet Cleaners relies on the following lawful bases:

Contract

We process your personal data where it is necessary to enter into or perform a contract with you. This includes managing quotes, confirming appointments, carrying out cleaning services, and handling payment or billing arrangements.

Legitimate interests

We may process your data where it is necessary for our legitimate business interests, provided your rights do not override those interests. Examples include maintaining records, improving our services, responding to customer enquiries, and protecting our business from fraud or abuse. We always consider whether such processing is proportionate and respectful of your privacy.

Legal obligation

We may process and retain certain information to comply with legal obligations, such as tax rules, accounting requirements, consumer law, and insurance or regulatory obligations.

Consent

In limited situations, we may rely on your consent, for example where it is required for a specific optional communication or data use. If we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

5. Sharing your personal data and processors

We may share personal data with trusted third parties who help us operate our business. These parties act as processors when they process data on our instructions. They are required to protect your information and use it only for the agreed purpose.

Examples of processors and other recipients may include:

Payment processors that handle card or electronic payments.
Accounting and bookkeeping providers that assist with financial records and tax compliance.
IT and cloud service providers that store or support business systems.
Communication service providers that help us send messages or manage customer correspondence.
Insurance providers or advisers where necessary for claims, risk management, or legal advice.
Regulators, courts, law enforcement, or public authorities where disclosure is required by law.

We do not sell your personal data. Any sharing is limited to what is necessary and only with parties that have appropriate data protection safeguards in place. If data is transferred outside the UK, we will ensure that suitable legal protections are used.

6. Data retention

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, including for legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the context in which it was provided.

As a general approach:

Customer service and booking records are retained for a reasonable period after the service ends.
Financial and tax records are kept for the period required by law.
Complaint or dispute records may be retained longer where needed to defend legal claims.
Information collected with consent is retained until consent is withdrawn or it is no longer needed.

When personal data is no longer required, we will delete it securely or anonymise it so it can no longer identify you. We review retention regularly to avoid keeping information longer than necessary.

7. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality duties, and limiting access to information on a need-to-know basis.

While we take reasonable steps to safeguard data, no system can be guaranteed completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will respond in line with legal requirements.

8. Your rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can ask us to delete your personal data in certain circumstances.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to data portability – you may request certain data in a structured, commonly used format.
Right to object – you can object to processing based on legitimate interests or direct marketing, where applicable.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

Not all rights apply in every situation, and some requests may be limited where we must keep data for legal reasons or where we have overriding legitimate grounds. We will always assess requests carefully and respond within the legal timeframe.

9. Children’s data

Our services are intended for adults and general household or commercial customers. We do not knowingly collect personal data from children unless it is provided incidentally in connection with a service request and only where necessary. If we become aware that we have collected data from a child without appropriate authority, we will take steps to delete it where required.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or how we process personal data. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how their information is handled.

11. Summary of our commitments

We collect only the data needed to provide and manage our services.
We use personal data under a valid lawful basis, including contract, legitimate interests, legal obligation, and consent where appropriate.
We share data only with trusted processors or where legally required.
We retain data only for as long as necessary and securely delete it when no longer needed.
We respect your rights and aim to handle all requests promptly and fairly.

Abbey Wood Carpet Cleaners is committed to protecting your privacy and treating your personal information with care, confidentiality, and respect. This policy applies to all Abbey Wood Carpet Cleaners customers in the area and is designed to ensure that your data is handled responsibly at every stage.