Privacy Policy - Arnos Grove Carpet Cleaners

Arnos Grove Carpet Cleaners is committed to protecting the privacy and personal data of all customers in the Arnos Grove area and surrounding local service area. This Privacy Policy explains how we collect, use, store, share, and protect personal data when providing carpet cleaning and related services. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Policy applies to all Arnos Grove Carpet Cleaners customers in area, including private households, landlords, letting agents, commercial clients, and anyone who enquires about or receives our services. By using our services, you acknowledge that your personal data may be handled in accordance with this Policy.

1. Who We Are

For the purposes of data protection law, Arnos Grove Carpet Cleaners acts as the data controller for the personal data we collect and use in connection with our services. This means we decide why and how your personal data is processed.

We only process personal data where we have a lawful basis to do so and where it is necessary, proportionate, and consistent with the principles of data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

2. Personal Data We Collect

We collect only the personal data that is reasonably necessary to provide our services, manage customer relationships, and meet legal or operational requirements. The types of data we may collect include:

Identity details such as your name and title
Contact details such as your address, email address, and phone number
Service details including property access information, cleaning requirements, preferred appointment times, and service history
Payment-related information such as billing records and transaction details
Communication records including emails, messages, booking notes, complaints, and service feedback
Technical data if you interact with digital systems, such as basic device or browser information, where relevant
Special category data only where necessary and only if you voluntarily provide it, for example if it is relevant to access needs, allergies, or property-specific conditions

We do not intentionally collect more data than needed. If you provide information that is unnecessary for our service, we will only use it where there is a lawful and relevant reason to do so.

3. How We Collect Personal Data

We may collect data directly from you when you:

Request a quote or make a booking
Communicate with us by phone, email, or other channels
Provide information before, during, or after a cleaning service
Submit feedback, queries, or complaints

We may also receive personal data from third parties where it is necessary for service delivery, such as landlords, managing agents, tenants, or payment service providers. Where we receive information from a third party, we will treat it in accordance with this Policy and applicable law.

4. How We Use Your Data

We use your personal data for the following purposes:

To provide carpet cleaning and related services
To manage bookings, quotations, and customer accounts
To communicate with you about appointments or service updates
To issue invoices, process payments, and keep financial records
To respond to questions, complaints, or requests
To maintain records of work carried out
To improve service quality, safety, and operational efficiency
To comply with legal, tax, insurance, and regulatory obligations

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose and this is permitted by law.

5. Lawful Basis for Processing

We process personal data only where at least one lawful basis under UK GDPR applies. Depending on the circumstances, the lawful basis may be:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes booking services, confirming appointments, carrying out cleaning work, and handling payment-related matters.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include record keeping, service improvement, fraud prevention, and managing customer communications.

Legal Obligation

We may process data where necessary to comply with legal obligations. This includes accounting, tax, insurance, and record retention requirements.

Consent

Where required by law, we rely on your consent. If we ever ask for consent, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing before withdrawal.

Vital Interests and Public Task

These bases are unlikely to apply in the ordinary course of our carpet cleaning services, but may be relevant in exceptional circumstances.

6. Sharing Your Data and Processors

We may share personal data with trusted third parties who assist us in running our business. These parties act as processors when they process data on our behalf and under our instructions. They are contractually required to keep your data secure and only use it for specified purposes.

Processors and service providers may include:

Booking and administration providers
Payment processors
IT and cloud storage providers
Accounting and bookkeeping providers
Customer communication tools
Professional advisers such as insurers, auditors, or legal advisers where necessary

We may also disclose personal data if required by law, by a court order, or to protect our rights, customers, staff, or property. We do not sell personal data.

7. International Transfers

If any processor stores or accesses personal data outside the United Kingdom, we will ensure appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We aim to keep personal data within secure and compliant environments.

8. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods may vary depending on the type of data and the nature of the service provided.

As a general approach:

Customer and service records are retained for a reasonable period after completion of services
Financial and tax records are kept for the period required by accounting and tax law
Communications and complaints are retained for as long as needed to handle the matter and maintain records
Consent records are kept while consent is valid and for a short period thereafter to demonstrate compliance

When data is no longer required, we will securely delete, anonymise, or dispose of it.

9. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limiting access to those who need it for legitimate business purposes.

Although we take data security seriously, no system can be guaranteed to be completely secure. If a personal data breach occurs and we are legally required to do so, we will notify the relevant supervisory authority and affected individuals.

10. Your Rights

Under data protection law, you have several rights regarding your personal data. These rights may be subject to conditions or exceptions:

Right of access - you can request a copy of the personal data we hold about you
Right to rectification - you can ask us to correct inaccurate or incomplete data
Right to erasure - you can ask us to delete your data in certain circumstances
Right to restrict processing - you can ask us to limit how we use your data in certain situations
Right to data portability - you can request certain data in a structured, commonly used format
Right to object - you can object to processing based on legitimate interests or direct marketing
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time

You also have the right to raise concerns with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to contact us first so we can try to resolve the issue promptly and fairly.

11. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is incidentally provided by an adult customer and is necessary for service delivery. If we become aware that we have collected data from a child without appropriate justification, we will take reasonable steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practice, or service arrangements. The latest version will apply from the date it is published or otherwise made available. We encourage customers to review this Policy periodically so they remain informed about how their data is handled.

13. Contact and Further Information

This Policy is intended to provide a clear and fair explanation of how Arnos Grove Carpet Cleaners handles personal data for customers in the area. If you wish to exercise your rights, request clarification, or discuss any privacy concern, your request will be handled in accordance with applicable data protection law and our internal procedures.

We are committed to processing personal data lawfully, fairly, and transparently, and to respecting the privacy of every customer we serve.