Privacy Policy - Hadley Wood Carpet Cleaners

This Privacy Policy explains how Hadley Wood Carpet Cleaners collects, uses, shares, and protects personal data when providing services to customers in Hadley Wood and the surrounding area. It applies to all customers, prospective customers, website users, and anyone who contacts us, requests a quotation, books a service, or receives our cleaning services in the Hadley Wood area. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Hadley Wood Carpet Cleaners is the data controller for the personal data processed in connection with our carpet cleaning, upholstery cleaning, rug cleaning, stain treatment, and related services. This means we decide how and why your personal data is used for the purposes described in this policy.

We take privacy seriously and aim to collect only the data we need to deliver our services, manage our business, and meet legal obligations. We do not sell personal data.

2. Information We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, and any details you provide when making an enquiry or booking.
Contact data: address, email address, telephone number, and preferred method of communication.
Service data: details about the cleaning services requested, property access information, special instructions, and appointment history.
Payment data: payment status, transaction details, and billing records. We do not normally store full card details where a third-party payment provider is used.
Communication data: emails, messages, call notes, feedback, complaints, and customer service records.
Technical data: IP address, browser type, device information, and basic usage information if you interact with our digital platforms.
Marketing preferences: your choices regarding receiving marketing or service-related updates.

In limited circumstances, we may also receive information from third parties, such as referral partners, subcontractors, or public sources, where this is necessary to provide our services or meet our obligations.

3. How We Use Your Personal Data

We process personal data for the following purposes:

to respond to enquiries and provide quotations;
to schedule and deliver cleaning services;
to manage customer accounts, appointments, and service records;
to process payments and maintain financial records;
to communicate about bookings, updates, service changes, and customer support;
to improve our services, training, and customer experience;
to deal with complaints, disputes, or insurance claims;
to comply with legal, tax, accounting, and regulatory duties;
to send marketing communications where permitted and where you have the right to object or withdraw consent.

We only use personal data for the purposes for which it was collected, unless we reasonably believe another compatible purpose applies or we are required to do otherwise by law.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the situation, we rely on one or more of the following:

4.1 Contract

We process data when it is necessary to enter into or perform a contract with you. This includes taking bookings, carrying out cleaning services, issuing invoices, and managing related communications.

4.2 Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include service administration, record keeping, business improvement, fraud prevention, and limited internal analytics.

4.3 Legal Obligation

We may process data to comply with legal requirements, such as tax, accounting, insurance, and record-keeping obligations.

4.4 Consent

Where required, we rely on your consent, for example for certain marketing communications or specific optional processing activities. You may withdraw consent at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

4.5 Vital Interests and Public Interest

These bases are unlikely to apply in most of our routine activities, but may be used in rare circumstances where necessary to protect someone’s life or safety or where required by law.

5. Sharing and Processors

We may share personal data with trusted third parties, but only where necessary and subject to appropriate safeguards. These parties may act as processors or independent controllers depending on the service they provide.

Processors may include:

Payment service providers who handle secure payment processing;
IT and cloud service providers who store data or support our systems;
Booking, scheduling, and customer management providers who help manage appointments and records;
Accountants and professional advisers who assist with financial and legal obligations;
Subcontractors or operational partners who may need limited information to deliver services on our behalf;
Insurance providers or claims handlers when necessary for incident handling;
Regulators, courts, law enforcement, or public authorities where disclosure is required by law.

When we use processors, we ensure they are bound by appropriate data processing agreements and are only permitted to act on our instructions, unless they are independently responsible for their own processing. We take reasonable steps to ensure any third party handling personal data maintains adequate security and complies with data protection law.

We do not permit processors to use your personal data for their own unrelated purposes.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the reason for processing.

As a general approach:

Customer and service records are kept for as long as needed to manage the service relationship and handle follow-up queries or disputes;
Financial and tax records are retained for the period required by law;
Correspondence and complaint records may be retained for a reasonable period to help resolve issues and improve services;
Marketing preferences are retained until you unsubscribe, object, or the information becomes outdated.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limiting access to personal data to those who need it to perform their duties.

While we strive to protect your information, no system can be guaranteed completely secure. If a personal data breach occurs and we are required to notify you or a regulator, we will do so in accordance with applicable law.

8. Your Rights

Depending on the circumstances and legal basis for processing, you may have the following rights under data protection law:

Right of access: to request a copy of the personal data we hold about you;
Right to rectification: to ask us to correct inaccurate or incomplete data;
Right to erasure: to request deletion of your data in certain situations;
Right to restriction: to ask us to limit the way we use your data in certain circumstances;
Right to data portability: to receive certain data in a structured, commonly used format where applicable;
Right to object: to object to processing based on legitimate interests or direct marketing;
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time;
Right to complain: to raise concerns with the UK Information Commissioner’s Office if you believe your data has been mishandled.

These rights are not absolute and may be subject to legal limitations or exceptions. If you exercise a right, we may need to verify your identity before responding.

9. International Transfers

Where personal data is transferred outside the United Kingdom, we will take appropriate steps to ensure an adequate level of protection, such as using approved contractual safeguards or relying on an adequacy decision where available.

10. Children’s Data

Our services are intended for adults and business or household customers. We do not knowingly collect personal data from children in the normal course of our services. If we become aware that such data has been collected without appropriate authority, we will take steps to delete it where required.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is made available. We encourage customers in the Hadley Wood area to review this policy periodically so they remain informed about how their personal data is handled.

12. How to Exercise Your Rights

If you wish to exercise any of your rights, or if you have concerns about how your personal data is used, you may make a request through our usual customer service channels. We will respond in line with applicable legal requirements and within the timeframes set by law.

Summary: Hadley Wood Carpet Cleaners processes customer data lawfully, securely, and transparently for service delivery, legal compliance, and limited business purposes, with safeguards for sharing, retention, and rights.