Maida Vale Carpet Cleaners Privacy Policy
This Privacy Policy explains how Maida Vale Carpet Cleaners collects, uses, stores, and protects personal data relating to our customers in the Maida Vale area. It also describes your rights under the UK General Data Protection Regulation and the Data Protection Act 2018 and how you can exercise those rights. By using our carpet cleaning and related services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all customers and prospective customers of Maida Vale Carpet Cleaners located in the Maida Vale area who contact us, request a quote, make a booking, or otherwise use our services. It covers personal data collected through phone calls, text messages, online enquiries, in-person interactions, and any other method by which you choose to communicate with us.
Data Controller
Maida Vale Carpet Cleaners is the data controller in respect of the personal data we collect and process about you. As data controller, we decide how and why your personal data is used, and we are responsible for ensuring that it is handled lawfully and securely.
Types of Personal Data We Collect
We only collect personal data that is relevant and necessary for the provision of our services and the running of our business. The categories of data we may collect include:
Identification and contact details such as your full name, home or business address, service address, and preferred contact details. Booking and service information such as details of the premises to be cleaned, property access information, dates and times of bookings, service preferences, and records of past services. Communication records such as notes from phone calls, messages, and any correspondence relating to quotes, bookings, feedback, or complaints. Payment-related information such as the method of payment and confirmation that payment has been made. We do not store full payment card numbers or security codes; payments are processed through secure payment processors. Technical and usage information if you interact with us via our website or online platforms, such as basic device and browser details, and information about how you use our site.
How We Collect Your Personal Data
We collect personal data directly from you when you contact us to request information, obtain a quote, make a booking, or provide feedback. This can occur via telephone calls, text messages, online enquiry forms, or face-to-face conversations. We may also collect personal data from third parties where you have given permission for them to share it with us, for example if a landlord, letting agent, or other third party arranges a cleaning service on your behalf.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis under the UK GDPR. Depending on the context, we may rely on one or more of the following bases:
Performance of a contract: We process your personal data when it is necessary to provide our services, manage your booking, take payment, and communicate with you regarding your service. Legal obligations: We may process certain data to comply with legal requirements, for example financial record-keeping, tax obligations, and responding to lawful requests from public authorities. Legitimate interests: We may process your data for our legitimate business interests, such as managing our customer relationships, improving our services, handling queries and complaints, and protecting our business from fraud or misuse. When relying on legitimate interests, we balance those interests against your rights and freedoms. Consent: In situations where we wish to send you certain types of marketing communications or where no other lawful basis is available, we will ask for your explicit consent. You have the right to withdraw your consent at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage carpet cleaning and related services you have requested. To create and manage bookings and appointments, including confirming or rescheduling services. To respond to your enquiries, provide quotes, and offer advice on appropriate services. To process and confirm payments and maintain financial records. To maintain internal records of our services provided to you and to manage customer relationships. To handle complaints, feedback, and requests for support. To improve our services, for example by analysing patterns in bookings or customer feedback. To comply with legal and regulatory obligations and to protect our rights, property, or safety, and those of our customers and staff.
Sharing Your Personal Data and Use of Processors
We do not sell your personal data. We may share your personal data with trusted third parties where necessary to provide our services or to run our business. These may include:
Service providers and contractors that support our operations, such as payment processors, IT service providers, and bookkeeping or accounting providers. These third parties act as data processors and are only permitted to use your data in accordance with our instructions and for specified purposes. Professional advisers such as accountants or legal advisers, where necessary for compliance, legal claims, or business management. Public authorities, regulators, or law enforcement where we are required to comply with legal obligations or to protect our rights or the rights of others.
When we use data processors, we ensure that appropriate contracts and safeguards are in place to protect your personal data, including requirements around confidentiality, security, and data retention.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Factors that influence our retention periods include:
The duration of our relationship with you, for example how long you remain an active customer. Legal obligations, for example rules requiring us to keep certain financial and tax records for a specified period. The need to maintain records of services provided to handle potential queries, complaints, or legal claims.
In general, customer and booking records are kept for a reasonable period after the last service has been completed. When data is no longer needed, it will be securely deleted or anonymised so that it can no longer be linked to you.
International Transfers
Where we use third-party service providers that store or process personal data outside the United Kingdom, we take steps to ensure that your data is protected with appropriate safeguards. These may include using service providers in countries that have been recognised as providing an adequate level of data protection, or entering into contracts incorporating standard data protection clauses approved for international transfers.
Data Security
We take appropriate technical and organisational measures to protect your personal data from accidental loss, unauthorised access, alteration, or disclosure. These measures may include access controls, security software, secure disposal of records, and staff awareness of data protection responsibilities. While we strive to maintain a high standard of security, no method of transmission or storage is completely secure. However, we continually review and update our security practices to reduce risks.
Your Rights Under Data Protection Law
Under the UK GDPR, you have several rights in relation to the personal data we hold about you. These include:
Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how it is used. Right to rectification: You can request that inaccurate or incomplete personal data be corrected or updated. Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the original purpose or where you withdraw consent and no other lawful basis applies. Right to restrict processing: You can ask us to restrict the use of your data in certain situations, such as while we are verifying its accuracy or assessing an objection you have raised. Right to object: You can object to our processing of your personal data where we rely on legitimate interests, including any direct marketing activities. Right to data portability: In certain circumstances, you can request that we provide your personal data in a structured, commonly used, machine-readable format, or transfer it to another controller where technically feasible. Right to withdraw consent: Where we rely on consent as our lawful basis, you can withdraw that consent at any time. This will not affect the lawfulness of any processing that took place before consent was withdrawn.
Exercising Your Rights and Complaints
If you wish to exercise any of your rights or have questions about how your personal data is handled, you can contact Maida Vale Carpet Cleaners using the contact details available on our usual communication channels. We will respond to your request in accordance with applicable data protection laws. You also have the right to lodge a complaint with the Information Commissioner's Office if you believe your data protection rights have been infringed. You are encouraged to contact us first so that we can attempt to resolve any concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any changes will be effective from the date the updated policy is made available. You are encouraged to review this Privacy Policy periodically to stay informed about how we protect your personal data.
