Privacy Policy - Woolwich Carpet Cleaners

Woolwich Carpet Cleaners is committed to protecting the privacy and personal data of all customers in our area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our services. It applies to all Woolwich Carpet Cleaners customers in area, including anyone who enquires about, books, receives, or pays for our cleaning services.

1. Who We Are

For the purposes of data protection law, Woolwich Carpet Cleaners acts as a data controller in relation to the personal data we collect and use for our own service operations. This means we decide why and how your personal data is processed. Where we use third-party providers to support our business, they may act as data processors or, in some cases, independent controllers depending on the service they provide.

2. Personal Data We Collect

We only collect personal data that is necessary to provide and manage our services. The types of information we may collect include:

Identity information such as your name and title.
Contact details such as your address, email address, and telephone number.
Service information including details about the cleaning service requested, property type, access instructions, and preferred appointment times.
Payment information such as payment status and transaction reference details. We do not store full card details unless explicitly required by a secure payment provider.
Communication records including enquiries, complaints, feedback, and messages sent to us.
Technical data such as limited information collected through our systems for security, performance, and service administration.

We do not intentionally collect special category data unless it is provided by you and is relevant to the service, for example where you disclose health-related access needs. If such information is provided, we will only use it where necessary and with appropriate safeguards.

3. How We Use Your Data

We use personal data to operate our services effectively and lawfully. This may include:

Responding to enquiries and providing quotations.
Managing bookings, schedules, and service delivery.
Processing payments and maintaining financial records.
Communicating with you about appointments, changes, or service-related matters.
Handling complaints, aftercare, and customer support.
Maintaining internal records, business administration, and accounting.
Improving the quality, efficiency, and safety of our services.
Meeting legal, tax, accounting, and regulatory obligations.

We only process personal data to the extent necessary for these purposes, and we take care to ensure the processing is fair, transparent, and proportionate.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing personal data. Depending on the context, Woolwich Carpet Cleaners relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes arranging services, confirming bookings, carrying out cleaning work, and managing payment arrangements.

Legal Obligation

We may process and retain certain information where required by law, including tax, accounting, insurance, and record-keeping obligations.

Legitimate Interests

We may process personal data where it is reasonably necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. This may include managing our operations, preventing fraud, improving service quality, and keeping accurate internal records.

Consent

In some situations, we may rely on your consent, such as where you voluntarily provide optional information or agree to certain types of communication. Where we rely on consent, you can withdraw it at any time.

We do not use your personal data for purposes that are incompatible with those described in this policy.

5. Who We Share Data With

We may share personal data with trusted third parties only where necessary to provide our services or comply with legal obligations. These third parties may include:

Payment service providers who process transactions securely.
Accounting and bookkeeping providers who assist with financial administration.
IT and cloud service providers who support secure storage, email, scheduling, and system maintenance.
Customer management or communication tools used to organise bookings and service records.
Professional advisers such as insurers, legal advisers, or auditors where necessary.
Public authorities where disclosure is required by law or to protect legal rights.

Where these parties process personal data on our behalf, they do so under appropriate contractual arrangements and only in line with our instructions. We require processors to apply suitable security measures and to keep data confidential.

6. International Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place. These may include adequacy regulations, approved contractual terms, or equivalent protection measures. We will only transfer data where it is lawful and necessary for service delivery or operational support.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and to meet any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason it was collected.

Customer and service records are generally retained for a reasonable period after the service has ended in order to manage queries, complaints, and service history.
Financial and invoice records are retained for the period required by tax and accounting law.
Communication records may be retained for a limited period to support customer service and dispute resolution.

When personal data is no longer required, we will securely delete, anonymise, or destroy it.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include restricted access, secure storage, password protection, and confidentiality controls. While no system can be guaranteed completely secure, we take data protection and security seriously and regularly review our practices.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to legal limits, these rights may include:

The right to be informed about how your data is used.
The right of access to request a copy of the personal data we hold about you.
The right to rectification if your information is inaccurate or incomplete.
The right to erasure in certain circumstances, sometimes called the “right to be forgotten.”
The right to restrict processing in certain situations.
The right to data portability where applicable.
The right to object to processing based on legitimate interests or direct marketing.
Rights related to automated decision-making, where applicable.

You also have the right to withdraw consent at any time where consent is the basis for processing. Exercising this right will not affect the lawfulness of processing carried out before withdrawal.

10. How We Respond to Requests

We aim to respond to rights requests within the time limits required by law. To protect your privacy, we may need to verify your identity before acting on a request. If a request is complex or if multiple requests are made, a lawful extension may apply as permitted by the UK GDPR.

11. Complaints

If you have concerns about how we handle your personal data, we encourage you to raise them with us first so we can review the matter and respond appropriately. You also have the right to lodge a complaint with the relevant data protection authority if you believe your data protection rights have been breached.

12. Children’s Data

Our services are intended for adult customers or individuals acting on their behalf. We do not knowingly collect personal data from children except where it is necessary in the context of a service arrangement and provided by an adult with authority to do so. Where children’s data is involved, we apply extra care and process it only when lawful and necessary.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

Summary of our commitment: Woolwich Carpet Cleaners collects only necessary personal data, uses it lawfully, keeps it securely, shares it carefully with processors, retains it for limited periods, and respects your rights under data protection law.