Carpet Cleaning Islington Privacy Policy

This Privacy Policy explains how Carpet Cleaning Islington collects, uses, stores, and protects personal data belonging to its customers in the Islington area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act. This policy applies to all Carpet Cleaning Islington customers in the Islington area who use our carpet cleaning and related services, whether you contact us online, by phone, or in person.

Who We Are and Scope of This Policy

Carpet Cleaning Islington is a local carpet and upholstery cleaning service operating in the Islington area. For the purposes of data protection law, Carpet Cleaning Islington acts as the data controller in relation to the personal data of its customers and prospective customers. This Privacy Policy applies to personal data we process in connection with providing our services to private individuals, tenants, landlords, property managers, and business customers located in the Islington area.

Types of Personal Data We Collect

We only collect personal data that is necessary to provide our services and run our business. The categories of personal data we may collect include:

Identification and contact data, such as your name, address, service address if different, and communication preferences. Booking and service data, such as details of the services you request, dates and times of appointments, access instructions, property type, and details about the areas to be cleaned. Communication data, such as your correspondence with us, including enquiries, complaints, feedback, and any information you choose to provide when communicating with us. Payment and transaction data, such as payment confirmations and records of services purchased. We do not store full payment card numbers or security codes; these are processed securely by our chosen payment processors. Usage and technical data, where applicable, such as information about how you interact with our website, including IP address, browser type, and approximate location data.

How We Collect Your Personal Data

We collect personal data in a variety of ways, including:

Directly from you when you request a quote, make a booking, contact us with a question, or provide feedback. During the provision of services, when our staff attend your property and record details relevant to delivering and improving our services. Automatically through our website, using technologies such as cookies and similar tools, which help us understand how our website is used and improve user experience. From third parties, such as property managers, letting agents, or landlords, where they arrange services on your behalf and provide your contact details and service address.

Purposes and Lawful Bases for Processing

We process your personal data only where we have a lawful basis to do so under the UK GDPR. The main purposes and corresponding lawful bases are:

To provide our services, including managing enquiries, providing quotes, confirming bookings, attending your property, and completing carpet cleaning and related services. The lawful basis for this is the performance of a contract or taking steps at your request prior to entering into a contract. To manage our relationship with you, including sending service confirmations, rescheduling appointments, handling complaints, and responding to your communications. The lawful basis is performance of a contract and our legitimate interest in maintaining good customer relations. To process payments and maintain accounting records, including issuing invoices and handling refunds where applicable. The lawful bases are performance of a contract and our legal obligations in relation to financial and tax records. To improve and develop our services, by analysing feedback, service history, and website usage data to help us understand customer needs and improve quality. The lawful basis is our legitimate interest in running and improving our business, provided this does not override your rights and freedoms. To send you service-related information, such as reminders about upcoming appointments or necessary follow-up visits. The lawful basis is performance of a contract and our legitimate interests. To send occasional marketing communications about similar services, where permitted by law. The lawful basis is our legitimate interest, and where required, your consent. You can opt out of marketing at any time. To comply with legal and regulatory obligations, including responding to lawful requests from authorities and maintaining required records. The lawful basis is compliance with a legal obligation.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. In general:

Customer and booking records are typically kept for up to six years after the last service, to comply with accounting and tax requirements and to support our legitimate interest in managing potential queries or disputes. Communication data, such as emails and messages, is normally retained for up to three years after resolution of the relevant issue, unless a longer period is needed for legal reasons. Website usage data is retained for a shorter period, usually up to two years, in order to analyse trends and improve the website. When personal data is no longer required, we take reasonable steps to delete or anonymise it securely.

Data Sharing and Processors

We do not sell your personal data. We share your data only when necessary and with appropriate safeguards. Categories of recipients may include:

Service delivery staff and contractors, who need access to your contact and booking details to attend your property and provide the agreed services. Payment service providers, who process your payments securely on our behalf. We share only the information necessary to process the transaction. IT and systems providers, including website hosting, booking systems, and data storage providers, who may process your data as our data processors under written contracts that require them to protect your data and act only on our instructions. Professional advisers, such as accountants or legal advisers, where necessary for compliance, business management, or the establishment, exercise, or defence of legal claims. Public authorities, regulators, or law enforcement agencies, where we are legally required or permitted to share data.

Where any data processing takes place outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other approved mechanisms, to protect your personal data.

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include limiting access to personal data to staff and contractors who need it to perform their duties, using secure storage and communication methods where appropriate, and reviewing our security practices regularly. While we strive to protect your information, no transmission of data over the internet or any storage system can be guaranteed to be completely secure. You should also take care to keep your own devices and communication methods secure when dealing with us.

Your Data Protection Rights

Under the UK GDPR, you have several important rights in relation to your personal data. Subject to certain conditions and exemptions, you have the right to:

Access your personal data and obtain a copy of the information we hold about you. Request correction of inaccurate or incomplete personal data. Request erasure of your personal data where there is no good reason for us to continue processing it, for example where it is no longer necessary for the purposes for which it was collected and we have no legal obligation to retain it. Request restriction of processing of your personal data, for example while we verify its accuracy or consider an objection you have raised. Object to processing based on our legitimate interests, including certain forms of profiling, where you believe your rights and interests outweigh our reasons for processing. Object to direct marketing at any time. If you object, we will stop processing your personal data for marketing purposes. Request data portability, where applicable, allowing you to receive personal data you have provided to us in a structured, commonly used and machine-readable format and transmit it to another controller where technically feasible. Withdraw consent where we rely on your consent for a specific processing activity. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You also have the right to lodge a complaint with a supervisory authority if you believe that we have not handled your personal data in accordance with data protection law. In the United Kingdom, this is typically the Information Commissioner's Office. We encourage you to contact us first so we can address your concerns directly where possible.

Children's Data

Our services are primarily directed at adults responsible for properties in the Islington area. We do not knowingly collect personal data from children for marketing or contractual purposes. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or changes in legal requirements. Any updates will be effective from the date of publication. We recommend that you review this policy periodically to stay informed about how we protect your personal data.