Privacy Policy - Kingston Vale Carpet Cleaners

This Privacy Policy explains how Kingston Vale Carpet Cleaners collects, uses, stores, shares, and protects personal data relating to our customers in the Kingston Vale area. It applies to all Kingston Vale Carpet Cleaners customers in the area and to anyone who uses our services, requests a quote, makes an enquiry, or otherwise interacts with us in connection with our carpet cleaning services. We are committed to handling personal information in accordance with the UK GDPR, the Data Protection Act 2018, and other applicable privacy laws.

1. Who we are

Kingston Vale Carpet Cleaners provides professional carpet cleaning services to residential and commercial customers in the Kingston Vale area. In this policy, we, us, and our refer to Kingston Vale Carpet Cleaners. We act as a data controller in relation to the personal data we collect and use for our business operations.

2. Personal data we collect

We only collect personal data that is necessary for the purposes described in this policy. Depending on your relationship with us, the information may include:

Identity details such as your name and title.
Contact details such as address, telephone number, and email address.
Service details such as the type of cleaning requested, property access notes, preferred appointment times, and service history.
Payment information such as billing details and transaction records. We do not store full card details where card payments are processed through secure third-party payment providers.
Communication records such as emails, messages, call notes, complaint records, and feedback.
Technical data if you interact with our digital systems, which may include IP address, device information, browser type, and basic usage information.
Special category data only where strictly necessary and limited, for example where access needs or health-related information is shared to support safe service delivery. Where this occurs, we apply additional safeguards.

We do not seek to collect more data than is required to provide our services and manage our relationship with you.

3. How we collect your data

We may collect personal data directly from you when you:

request a quote or booking;
communicate with us by phone, email, or messaging;
provide feedback or raise a complaint;
enter into a service agreement;
make a payment or request an invoice.

We may also receive data from third parties where necessary for the performance of our services, such as payment processors, booking tools, business administration providers, or referral partners acting on your behalf.

4. How we use personal data

We use personal data for the following purposes:

to provide carpet cleaning and related services;
to arrange bookings, access, quotations, and service delivery;
to process payments and issue invoices;
to communicate with customers about appointments, service updates, or follow-up matters;
to manage customer records and maintain service quality;
to respond to enquiries, complaints, or disputes;
to meet legal and regulatory obligations;
to protect our business, staff, customers, and property;
to improve our services and customer experience.

We will only use your personal data in ways that are compatible with the purposes for which it was collected, unless we reasonably determine that we need to use it for a related compatible purpose.

5. Lawful basis for processing

Under the UK GDPR, we must have a lawful basis for each processing activity. Depending on the situation, we may rely on one or more of the following:

Performance of a contract

We process personal data when it is necessary to provide our services, manage bookings, send invoices, and fulfil our obligations under a service agreement.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms. This may include managing our customer relationships, keeping internal records, improving service quality, preventing fraud, and protecting our business operations.

Legal obligation

We may process personal data where required to comply with a legal or regulatory obligation, including tax, accounting, and record-keeping requirements.

Consent

In limited cases, we may ask for your consent, for example where we need to process special category data, or where consent is the most appropriate basis for a specific optional activity. Where consent is used, you may withdraw it at any time.

6. Sharing and processors

We may share personal data with trusted third parties who support our business operations. These parties act as processors or independent controllers depending on the service they provide. Examples may include:

payment processing providers;
booking and scheduling software providers;
IT support and cloud storage providers;
accounting and bookkeeping services;
customer communication and email service providers;
professional advisers such as lawyers, insurers, or auditors;
public authorities, where disclosure is required by law.

Where a third party acts as a processor, they are only permitted to handle personal data on our instructions and must keep it secure. We use appropriate contracts and safeguards to protect your information. We do not sell personal data.

7. Data retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the purpose for which it is used.

Customer service records are generally retained for a reasonable period after the last service interaction.
Financial and invoicing records are typically retained for the period required by tax and accounting law.
Complaint records and correspondence may be retained for a period necessary to resolve disputes and demonstrate compliance.
Where data is no longer required, it is securely deleted, anonymised, or destroyed.

We review retention regularly to ensure that data is not kept longer than necessary. In some cases, we may retain information for longer where required to defend legal claims or meet statutory obligations.

8. Security of personal data

We take the security of personal data seriously and use appropriate technical and organisational measures to protect it. These measures may include access controls, secure storage, staff confidentiality requirements, regular review of data handling practices, and the use of reputable service providers. While no system is completely secure, we aim to reduce risks of unauthorised access, loss, misuse, or disclosure.

9. International transfers

If personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it. This may include using approved contractual protections or relying on adequacy regulations where applicable.

10. Your rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to conditions or exceptions. They include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can request deletion of your data in certain circumstances.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests, and in some cases to direct marketing.
Right to data portability – you can request transfer of certain data to you or another provider where technically feasible.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

To exercise your rights, we may need to verify your identity before responding. We aim to respond within the time limits required by law.

11. Complaints and supervision

If you have concerns about how we handle your personal data, we encourage you to raise them with us so that we can address the issue. You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically.

13. Scope of this policy

This policy applies to all Kingston Vale Carpet Cleaners customers in the area and to anyone whose personal data we process in connection with our carpet cleaning services. By using our services, you acknowledge that you have read and understood this Privacy Policy.

Last updated: This policy is maintained to reflect current data protection requirements and our operational practices.