Privacy Policy - Wembley Park Carpet Cleaners

This Privacy Policy explains how Wembley Park Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Wembley Park Carpet Cleaners customers in the area, including individuals who request quotations, book services, receive cleaning services, or otherwise interact with us in connection with carpet cleaning and related services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Wembley Park Carpet Cleaners provides professional carpet cleaning and related household cleaning services. In the course of delivering these services, we may process personal data about customers, prospective customers, and other individuals connected to service bookings. This policy explains what data we collect, why we collect it, how long we keep it, and the rights available to individuals whose data we process.

2. Personal Data We Collect

We collect only the personal data that is necessary for business, legal, and operational purposes. Depending on how you interact with us, we may collect the following categories of information:

• Identity details such as your name and title.
• Contact details such as phone number and email address.
• Address details including the property address where services are to be performed.
• Booking information including appointment dates, service type, special instructions, and service history.
• Payment-related information such as billing records and transaction references. We do not retain card details unless necessary for payment processing by a secure payment provider.
• Communication records including messages, enquiries, complaints, and feedback.
• Technical data where relevant, such as basic device or browser information if collected through digital forms or website analytics tools used by third parties.

We do not intentionally collect special category data unless it is strictly necessary and you choose to provide it. Special category data may include information about health, disability, or other sensitive matters. If such data is ever provided to help us tailor a service, it will be handled with additional care and only where a lawful basis and, where necessary, explicit consent apply.

3. How We Use Personal Data

We use personal data for the following purposes:

• To respond to enquiries and provide quotations.
• To manage bookings and deliver carpet cleaning services.
• To communicate about appointments, changes, and service updates.
• To process payments and maintain accounting records.
• To handle complaints, refunds, and customer support requests.
• To maintain internal records and improve our services.
• To comply with legal obligations, including tax and record-keeping requirements.
• To prevent fraud, misuse, or other unlawful activity.

We will only use your personal data for the purposes for which it was collected unless we reasonably consider that we need to use it for a compatible purpose. If we need to use your data for a new purpose that is unrelated, we will notify you and explain the legal basis where required.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Wembley Park Carpet Cleaners relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes managing bookings, delivering cleaning services, handling payments, and communicating service-related information.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms. Examples include maintaining customer records, improving service quality, responding to enquiries, and protecting our business from misuse or fraud.

Legal Obligation

We process some personal data where required to comply with legal obligations, such as accounting, tax, insurance, and regulatory record-keeping.

Consent

In limited cases, we may rely on your consent, for example where you voluntarily agree to receive certain optional communications or where special category data is provided and explicit consent is appropriate. Where processing is based on consent, you may withdraw it at any time.

5. How We Share Personal Data

We do not sell personal data. We may share personal data with trusted third parties when necessary to run our business and provide services. These parties act as data processors or, in some cases, independent controllers. They are required to protect your information and use it only for the agreed purposes.

Typical processors may include:

• Payment processors that handle secure transactions.
• Booking and scheduling providers that help manage appointments.
• Accounting and bookkeeping providers that support financial administration.
• IT and cloud service providers that store or secure business data.
• Communication service providers that enable email, messaging, or telephone systems.

We may also disclose personal data where required by law, court order, or lawful request from public authorities. If a business transfer occurs, such as a merger or sale, personal data may be transferred as part of that transaction, subject to appropriate safeguards.

6. International Transfers

Where any processor stores or accesses data outside the UK, we will take steps to ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent protections permitted under applicable law. We aim to ensure your data receives a level of protection that is essentially equivalent to that provided in the UK.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Retention periods vary depending on the type of data and why we hold it.

• Booking and service records are typically retained for a reasonable period to support customer service and business administration.
• Financial and tax records are retained in line with legal requirements.
• Communication records may be retained for a period needed to resolve queries, manage complaints, or evidence agreements.
• Where data is no longer needed, it is securely deleted, anonymised, or archived in a way that prevents further identification.

When determining retention periods, we consider the volume, nature, and sensitivity of the data, the risk of harm from unauthorised use or disclosure, and our legal obligations. We do not keep personal data indefinitely unless a lawful reason requires it.

8. Your Rights

As a data subject, you have a number of rights under the UK GDPR. These rights may apply depending on the circumstances and any legal exemptions.

• Right of access - you may request a copy of the personal data we hold about you.
• Right to rectification - you may ask us to correct inaccurate or incomplete data.
• Right to erasure - in certain cases, you may request deletion of your data.
• Right to restriction - you may ask us to limit how we use your data.
• Right to object - you may object to processing based on legitimate interests or direct marketing.
• Right to data portability - in some circumstances, you may request a structured copy of data you provided to us.
• Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.

We will respond to valid requests within the timeframe required by law. To protect privacy, we may need to verify your identity before acting on a request. These rights are not absolute and may be limited where retention or disclosure is necessary for legal, contractual, or legitimate business reasons.

9. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of data handling practices. While no system can be guaranteed completely secure, we work to reduce risk and maintain robust safeguards.

10. Cookies and Similar Technologies

If digital tools are used in connection with our services, cookies or similar technologies may be placed by us or by third-party providers. These may be necessary for basic functionality, security, or analytics. Where required by law, we will seek consent before using non-essential cookies. You can also control cookies through your browser settings.

11. Children

Our services are intended for adults. We do not knowingly collect personal data from children except where it is provided by an adult customer for service-related purposes, such as access arrangements or household instructions. If we become aware that we have collected personal data from a child without appropriate authority, we will take steps to delete it where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. Any updates will take effect when published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their information is handled.

13. Summary of Our Commitment

At Wembley Park Carpet Cleaners, we respect your privacy and aim to handle personal data responsibly. We collect only what we need, use it for clear and lawful purposes, keep it only as long as necessary, and share it only with trusted processors or where the law requires it. All Wembley Park Carpet Cleaners customers in the area are covered by this policy, and we will continue to process personal data in a way that is lawful, fair, transparent, and secure.

By using our services, you acknowledge that you have read this Privacy Policy and understand how your personal data may be processed.