Carpet Cleaning Sutton Privacy Policy
This Privacy Policy explains how Carpet Cleaning Sutton collects, uses, stores and protects personal data relating to our customers in the Sutton area. It also explains your rights under the UK General Data Protection Regulation and applicable data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope and who this policy applies to
This Privacy Policy applies to all Carpet Cleaning Sutton customers in the Sutton area, including individuals, households and businesses who engage us for carpet cleaning or related services. It covers personal data collected through our service bookings, quotations, enquiries, and any other interactions with us in connection with our services.
Data controller responsibility
Carpet Cleaning Sutton is the data controller for the personal data we collect and process about you in connection with our services. As data controller, we decide how and why your personal data is used and are responsible for ensuring that it is handled in a lawful and transparent manner.
Personal data we collect
We collect and process different categories of personal data depending on how you interact with us and which services you use. The main types of personal data we may collect are:
Identity and contact details, such as your name, address, property location, and any other contact details you choose to provide. Booking and service information, such as details of the services you request, dates and times of appointments, access instructions and details about the areas or items to be cleaned. Communication records, such as information you provide when you contact us with questions, feedback or complaints, and notes we make to manage your enquiry or booking. Payment-related information, such as payment method details and transaction records. We do not store full card details. Technical and usage data, such as basic information about how you interact with any online forms or digital tools used to submit enquiries or bookings, where applicable.
We collect this information directly from you when you contact us, request a quotation, book a service, or otherwise communicate with us in relation to our services.
Lawful basis for processing your data
We only process your personal data when we have a lawful basis to do so under data protection law. Depending on the context, we may rely on one or more of the following lawful bases:
Contract performance. We process personal data to take steps at your request before entering into a contract for services, and to perform and manage the contract once in place. This includes arranging appointments, providing cleaning services and handling payments. Legal obligations. We may process personal data to comply with legal and regulatory requirements, such as maintaining business records and accounts. Legitimate interests. We may process personal data where it is necessary for our legitimate business interests, and where these interests are not overridden by your rights and freedoms. This may include managing and improving our services, responding to enquiries, and protecting our business against fraud and misuse. Consent. In limited circumstances, we may rely on your consent, for example, if we choose to send certain types of marketing communications. Where we rely on consent, you can withdraw it at any time.
How we use your personal data
We use the personal data we collect for the following purposes:
To provide and manage our services, including handling enquiries, providing quotations, scheduling and carrying out cleaning services, and communicating with you about your bookings. To take and process payments, manage invoices and handle any related financial administration. To communicate with you about changes to our services, terms or policies where necessary. To respond to your questions, feedback, or complaints and to resolve any issues that may arise. To maintain internal records, including for accounting, reporting and operational purposes. To improve our services, for example by reviewing feedback or usage information to help us understand how our services are used and how we can make them more effective. To protect our business, including preventing fraud, misuse or security incidents, and defending legal claims where necessary.
Data processors and third party service providers
We may use carefully selected third party service providers to help us deliver our services and manage our business. These providers may act as data processors and process personal data on our behalf. Examples of such processors include:
Payment processing providers who handle card transactions or other electronic payments. IT and systems support providers who host or maintain our digital systems, booking tools or communication platforms. Professional advisers, such as accountants or legal advisers, who may access limited personal data where strictly necessary for their services.
We ensure that our processors only process your personal data following our instructions, that they keep it secure and that they are bound by appropriate data protection obligations through written agreements.
Data retention and storage
We keep personal data only for as long as it is reasonably necessary for the purposes for which it was collected, and to meet any legal, accounting or reporting requirements. The length of time we retain data will depend on the type of information and the reasons for which we process it.
As a general guide, we usually retain booking and service records for a period consistent with applicable legal limitation periods, to enable us to respond to queries or disputes that may arise. Financial and transaction records may be retained for a longer period where required by tax or accounting laws. When personal data is no longer needed, we will either delete it securely or anonymise it so that it can no longer be used to identify you.
Data sharing
We do not sell your personal data. We may share your data with:
Our authorised staff and contractors where necessary to provide our services, for example to attend your property and carry out cleaning work. Our data processors and service providers as described above. Public authorities, regulators or law enforcement agencies where we are required to do so by law or in order to protect our rights or the safety of others. Professional advisers where necessary in connection with legal or business matters.
Any sharing of personal data is done in a controlled manner and only to the extent necessary for the relevant purpose.
International transfers
Where possible, we aim to keep your personal data within the United Kingdom or the European Economic Area. If we ever need to transfer personal data to a country outside these areas, we will ensure that appropriate safeguards are in place so that your personal data remains protected, in line with data protection laws.
Security of your personal data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures may include access controls, secure systems and staff training. While we take reasonable steps to protect your data, no system can be completely secure, and we cannot guarantee absolute security of information transmitted to us.
Your data protection rights
Under data protection law, you have a number of rights in relation to the personal data we hold about you. Subject to certain conditions and exceptions, these include:
Right of access. You can request confirmation that we process your personal data and obtain a copy of the information we hold about you. Right to rectification. You can ask us to correct or complete any inaccurate or incomplete personal data. Right to erasure. In certain circumstances, you can ask us to delete your personal data. Right to restriction. You can ask us to restrict the processing of your personal data in specific situations. Right to data portability. In certain cases, you may request a copy of your personal data in a structured, commonly used and machine readable format, and ask that it is transmitted to another organisation where technically feasible. Right to object. You can object to our processing of your personal data based on our legitimate interests, including any direct marketing activities.
If we are relying on consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
Exercising your rights
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the details provided on our website or through the usual communication channels you use with us. We may need to verify your identity before responding to your request to ensure your data is protected.
We aim to respond to all valid requests within one month. If your request is particularly complex or you have made several requests, it may take us longer, but we will keep you updated.
Complaints and further information
If you are unhappy with how we have handled your personal data, we encourage you to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the law, our services or how we process personal data. Any updated version will be made available through our usual customer information channels and will take effect from the date it is issued. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
This Privacy Policy applies to Carpet Cleaning Sutton customers in the Sutton area and is intended to provide clear information about how we handle personal data in connection with our carpet cleaning and related services.