Privacy Policy - White City Carpet Cleaners

White City Carpet Cleaners is committed to protecting the privacy and personal data of our customers. This Privacy Policy explains how we collect, use, store, share, and protect personal information when we provide carpet cleaning and related services. It applies to all White City Carpet Cleaners customers in the area, including residential and commercial clients who use our services, make enquiries, or otherwise interact with us.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws. This policy is intended to be clear, transparent, and fair so that you can understand how your information is handled.

1. Personal Data We Collect

We only collect information that is necessary for the delivery, administration, and improvement of our services. The types of personal data we may collect include:

Identity information such as your name and, where relevant, business name.
Contact details such as address, email address, and telephone number.
Service information including details of the cleaning services requested, property access instructions, preferred appointment times, and service history.
Payment information such as billing details and payment confirmation records. We do not intentionally store full card details unless required by a secure payment provider.
Communication records such as messages, enquiries, complaints, feedback, and any instructions you provide to us.
Technical information where applicable, such as device or browser information if you contact us through digital channels that automatically capture limited technical data.

We do not collect more information than is reasonably required for the purposes described in this policy. If we need to collect sensitive data in exceptional circumstances, we will only do so where permitted by law and only when necessary for a specific service or legal requirement.

2. How We Use Your Personal Data

We use personal data for the following purposes:

To provide and manage carpet cleaning and related services.
To respond to enquiries, quotes, bookings, and customer support requests.
To issue invoices, receive payments, and keep financial records.
To manage appointments, access arrangements, and service delivery logistics.
To maintain internal records and improve the quality and efficiency of our services.
To deal with complaints, disputes, or insurance matters.
To comply with legal, regulatory, accounting, and tax obligations.
To protect our business, staff, customers, and property from fraud, misuse, or unlawful activity.

We will only use your personal data for purposes that are compatible with those set out in this policy or for other purposes that we are legally permitted to carry out.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Depending on the context, we rely on one or more of the following lawful bases:

Performance of a Contract

We process personal data when it is necessary to perform our contract with you or to take steps at your request before entering into a contract. This includes managing bookings, delivering cleaning services, processing payments, and communicating about your service.

Legal Obligation

We may process and retain certain information to meet legal requirements, such as tax, accounting, record-keeping, health and safety, or fraud prevention obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing service records, improving operations, responding to customer issues, and protecting our business from misuse.

Consent

In limited cases, we may rely on your consent, for example where we need permission to use certain optional communication methods or where specific information is not otherwise covered by another lawful basis. Where we rely on consent, you have the right to withdraw it at any time.

4. How We Share Personal Data

We only share personal data where necessary and with appropriate safeguards in place. We may share information with the following categories of recipients:

Service providers and processors who help us operate our business, such as payment processors, scheduling tools, IT support providers, and secure record storage services.
Professional advisers such as accountants, auditors, legal advisers, and insurers, where required.
Authorities and regulators where disclosure is required by law or necessary to protect our rights, staff, or customers.

When we use third parties to process personal data on our behalf, they act as processors and must only process data according to our instructions and in compliance with data protection law. We do not sell personal data.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, insurance, and reporting requirements. Retention periods depend on the type of information and the reason it is held.

Customer and service records are typically retained for a reasonable period after the service ends so we can manage follow-up queries, disputes, and business records.
Financial and tax records are retained for the period required by applicable law.
Communication records may be retained for as long as needed to respond to issues or maintain accurate service history.

When data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in a safe manner.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality practices, and limiting access to data on a need-to-know basis.

Although we take reasonable steps to safeguard information, no system can be guaranteed to be completely secure. If we become aware of a personal data breach that poses a risk to your rights and freedoms, we will handle it in line with applicable legal obligations.

7. Your Rights

As a data subject under GDPR, you have several important rights in relation to your personal data. Subject to certain legal conditions and exemptions, you may have the right to:

Access the personal data we hold about you.
Rectification of inaccurate or incomplete information.
Erasure of your data in certain circumstances, also known as the right to be forgotten.
Restriction of processing in specific situations.
Object to processing based on legitimate interests or direct marketing, where applicable.
Data portability for data you have provided to us where processing is based on consent or contract and carried out by automated means.
Withdraw consent at any time where consent is the lawful basis for processing.

You also have the right to make a complaint to the UK Information Commissioner’s Office if you believe your data protection rights have been breached. We encourage you to raise any concerns with us first so we can address them promptly and fairly.

8. Processors and Third Parties

We may use trusted third-party processors to assist with business operations. These processors may handle data on our behalf for tasks such as:

secure payment processing,
appointment and diary management,
email or messaging systems,
accounting and bookkeeping support,
cloud storage or document management,
IT maintenance and technical support.

All processors are required to protect personal data, keep it confidential, and use it only for the agreed purpose. Where relevant, we carry out reasonable due diligence before engaging a processor and require appropriate contractual protections.

9. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place in accordance with data protection law. This may include the use of approved contractual protections or other lawful transfer mechanisms. We only transfer data internationally where necessary for service provision or business operations.

10. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is necessary in the context of a customer relationship and lawful to do so. If we become aware that we have collected information from a child without an appropriate lawful basis, we will take steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any updated version will apply from the date it is published or otherwise communicated to you. We encourage customers to review the policy periodically to stay informed about how we handle personal data.

12. Summary of Our Commitment

White City Carpet Cleaners is committed to processing personal data fairly, lawfully, and transparently. We collect only the information we need, use it for clear and legitimate purposes, keep it only as long as necessary, and apply suitable safeguards when sharing it with trusted processors. We respect your privacy rights and will work to address requests or concerns in a timely and professional manner.

This Privacy Policy applies to all White City Carpet Cleaners customers in the area.