Privacy Policy - Carpetcleaning Westminster

Carpetcleaning Westminster is committed to protecting the privacy and personal data of all customers in the Westminster area. This Privacy Policy explains how we collect, use, share, store, and protect personal information when providing carpet cleaning services. It applies to all Carpetcleaning Westminster customers in the area, including residential and commercial clients, and is designed to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

For the purposes of data protection law, Carpetcleaning Westminster acts as the data controller for the personal information we collect and process in connection with our services. This means we decide how and why your personal data is used. We only process personal data where we have a lawful basis to do so and where it is necessary for a specific and legitimate purpose.

2. Personal data we collect

We may collect and process the following categories of personal data:

Identity data such as your name and title.
Contact data such as your address, email address, and telephone number.
Service data including details of the carpet cleaning services requested, the type of property, and service preferences.
Billing and transaction data such as payment records, invoices, and service history.
Technical data such as IP address, browser type, device information, and basic usage details if you interact with our digital services.
Communication data including any messages, enquiries, complaints, feedback, or correspondence with us.

We do not intentionally collect special category personal data unless it is necessary and lawful to do so. Where such information is provided, we will process it only in line with data protection law and appropriate safeguards.

3. How we use your data

We use personal data for the following purposes:

To provide carpet cleaning services and manage bookings.
To communicate with you about appointments, service updates, and customer care.
To process payments, issue invoices, and maintain financial records.
To respond to questions, complaints, and service-related requests.
To maintain accurate business and service records.
To improve our services, operations, and customer experience.
To comply with legal, accounting, and regulatory obligations.

We process personal data only to the extent necessary for these purposes and use a data-minimisation approach wherever possible. This means we collect only the information needed to deliver services properly and fairly.

4. Lawful basis for processing

Under UK GDPR, every use of personal data must have a lawful basis. Carpetcleaning Westminster relies on the following lawful bases depending on the context:

Contract

We process your personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes managing bookings, delivering cleaning services, and handling payments.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining service records, improving service quality, preventing fraud, and responding to customer enquiries.

Legal obligation

We process certain data to comply with legal obligations, such as tax requirements, accounting rules, and recordkeeping duties.

Consent

Where we rely on your consent, for example for optional communications or non-essential processing, you have the right to withdraw consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before it was withdrawn.

5. Sharing your information and processors

We may share personal data with trusted third parties who act as processors on our behalf. These processors only process data under our instructions and are required to protect it appropriately. They may include:

Payment service providers.
Accounting and bookkeeping providers.
IT support, hosting, and data storage providers.
Customer communication and administration service providers.

We may also disclose information where required by law, by a court order, or to law enforcement or regulatory authorities. Any processor we engage must provide suitable technical and organisational measures to protect personal data. We do not sell personal data.

6. Data retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. Retention periods may vary depending on the type of record and the reason for processing.

Service and booking records are typically retained for the period needed to manage the customer relationship and resolve any disputes.
Financial records are retained for the duration required by tax and accounting law.
Communication records may be retained for a reasonable period to support service continuity and complaint handling.

When personal data is no longer required, we will securely delete, anonymise, or archive it in a way that prevents unauthorised access. We regularly review retention needs to ensure information is not kept longer than necessary.

7. Data security

We take appropriate technical and organisational measures to protect personal data against accidental loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include restricted access controls, secure storage, staff confidentiality obligations, and safe handling procedures. While no system can guarantee complete security, we work to reduce risks and to respond promptly if a data incident occurs.

8. Your rights under GDPR

As a data subject, you have a number of rights regarding your personal information. Subject to legal limitations, these include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can request deletion of your data in certain circumstances.
Right to restriction – you can ask us to limit how we use your data in some situations.
Right to data portability – you can request certain data in a structured, commonly used format.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data rights have been breached. We encourage you to raise any concerns with us first so we can try to resolve them promptly and fairly.

9. Children’s data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is incidentally provided in the course of normal service delivery, for example in relation to a property occupied by a family. Where this occurs, we handle the information with care and only where there is a lawful basis to do so.

10. International transfers

If any processor or service provider stores or accesses data outside the UK, we will ensure appropriate safeguards are in place so that your information receives a level of protection consistent with UK data protection standards. These safeguards may include adequacy regulations, contractual protections, or other lawful transfer mechanisms.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any revised version will apply from the date it is issued. We recommend reviewing it periodically to stay informed about how personal data is handled.

12. Our commitment to lawful processing

Carpetcleaning Westminster is committed to processing personal data fairly, transparently, and securely. We aim to ensure that all customers in Westminster can use our services with confidence, knowing that their information is handled responsibly and in accordance with data protection principles. Privacy, accountability, and respect for user rights remain central to how we operate.

This Privacy Policy applies to all Carpetcleaning Westminster customers in area and is intended to provide clear information about our data practices.