Privacy Policy - Wimbledon Carpetcleaning

This Privacy Policy explains how Wimbledon Carpetcleaning collects, uses, stores, shares, and protects personal data in connection with our carpet cleaning services. It applies to all Wimbledon Carpetcleaning customers in the area, including prospective customers, active customers, former customers, and anyone who interacts with us in relation to our services.

We are committed to handling personal data in a lawful, fair, transparent, and secure manner. This policy is designed to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data We Collect

We collect only the information necessary to provide our services, manage our customer relationships, and meet legal and operational obligations. The types of personal data we may collect include:

• Identity data: name, title, and any information needed to identify you as a customer or property contact.
• Contact data: address, email address, and telephone number.
• Service data: details of the cleaning services requested, property type, access instructions, appointment preferences, and service history.
• Payment and billing data: invoicing details, transaction records, and payment status.
• Communication data: records of emails, messages, call notes, complaints, feedback, and service enquiries.
• Technical data: limited information gathered through our digital systems, such as device identifiers or usage logs, where relevant to the operation of our services.
• Special category data: we do not actively seek special category data. However, if you voluntarily provide information that may reveal health, accessibility, or other sensitive details, we will only use it where necessary and with appropriate safeguards.

We usually collect personal data directly from you, but we may also receive it from third parties where lawful, for example from a property manager, landlord, letting agent, or another person authorised to arrange services on your behalf.

2. How We Use Personal Data

We use personal data for the following purposes:

• to provide carpet cleaning and related services;
• to manage bookings, appointments, and service delivery;
• to issue quotes, invoices, receipts, and payment reminders;
• to communicate with customers about service arrangements or changes;
• to respond to enquiries, complaints, and customer support requests;
• to keep internal records and maintain service quality;
• to comply with legal, tax, accounting, and regulatory obligations;
• to protect our business, staff, customers, and property from fraud, misuse, or security risks;
• to improve our services, processes, and customer experience.

We do not sell personal data. We only use it for legitimate business and service purposes, or where you have given consent and consent is the appropriate legal basis.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the situation, we rely on one or more of the following legal bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging services, confirming appointments, carrying out cleaning work, and managing payments.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. Examples include maintaining records, improving service delivery, preventing fraud, and managing customer communications.

Legal Obligation

We may process personal data where required to comply with legal obligations, including accounting, tax, insurance, health and safety, and other regulatory duties.

Consent

In limited circumstances, we may rely on your consent, for example if you choose to receive certain optional communications or if you provide sensitive information that requires your express permission for a particular use. Where consent is used, you may withdraw it at any time.

Where special category data is processed, we will only do so where a valid condition under UK GDPR applies and suitable safeguards are in place.

4. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including for the satisfaction of legal, accounting, tax, insurance, and dispute-resolution requirements. Retention periods vary depending on the type of data and the reason for processing.

• Customer service records: retained for a period that enables us to manage repeat services, respond to queries, and maintain accurate business records.
• Financial and tax records: retained for the period required by law and standard accounting practice.
• Communication records: retained for as long as necessary to handle enquiries, complaints, or service follow-up.
• Consent records: retained while consent remains valid and for a reasonable period afterwards to demonstrate compliance.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices. Retention periods are reviewed periodically to ensure data is not kept longer than necessary.

5. Processors and Third Parties

We may share personal data with trusted processors and third parties that help us operate our business and deliver services. These parties process data on our behalf and are required to protect it through appropriate contractual and technical safeguards.

• Payment service providers: to process transactions and manage payment-related records.
• Accounting and bookkeeping providers: to handle financial records, invoices, and tax reporting.
• IT and software providers: to support email, scheduling, data storage, and operational systems.
• Customer communication services: to assist with appointment confirmations, service updates, and administrative messages.
• Professional advisers: such as insurers, auditors, legal advisers, or consultants where necessary.
• Public authorities: where disclosure is required by law or necessary for legal proceedings.

We only disclose the minimum personal data necessary for the relevant purpose. Any processor engaged by us must act under our instructions and must not use your data for its own purposes.

6. Data Security

We use appropriate technical and organisational measures to help protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures may include access controls, secure storage, staff confidentiality obligations, and restricted sharing of information. Although no system can be guaranteed completely secure, we take data protection seriously and review our safeguards regularly.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply in whole or in part depending on the circumstances and the legal basis for processing.

• Right of access: you can request a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct inaccurate or incomplete data.
• Right to erasure: you can ask us to delete your data in certain situations.
• Right to restriction: you can ask us to limit how we use your data in certain circumstances.
• Right to data portability: you can ask for certain information in a structured, commonly used format where applicable.
• Right to object: you can object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with data protection law. We may need to verify your identity before taking action to protect your information.

8. Marketing Communications

We may send service-related communications that are necessary for scheduling, billing, or service updates. Where we send optional marketing messages, we will do so only where permitted by law and, if required, with your consent. You can opt out of marketing communications at any time.

9. Cookies and Similar Technologies

Where we use websites, digital forms, or online tools in support of our services, limited technical data may be collected through cookies or similar technologies. These tools help us understand how systems are used and support functionality and security. Any such data is handled in accordance with this policy and applicable law.

10. International Transfers

If personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms designed to protect your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data-handling practices. Any updates will take effect when published in the revised version. We encourage customers to review this policy periodically.

12. Summary of Our Commitment

Wimbledon Carpetcleaning is committed to respecting privacy and processing personal data responsibly. We collect only what we need, use it for clear and lawful purposes, keep it only as long as necessary, and share it only with trusted processors or where required by law. This Privacy Policy applies to all Wimbledon Carpetcleaning customers in area.

By using our services, you acknowledge that your personal data may be processed as described in this Privacy Policy.