Kidbrooke Carpet Cleaners Privacy Policy
This Privacy Policy explains how Kidbrooke Carpet Cleaners collects, uses, stores and protects personal data relating to our customers. It applies to all Kidbrooke Carpet Cleaners customers in our service area and is designed to comply with the UK General Data Protection Regulation and the Data Protection Act 2018.
Who We Are
Kidbrooke Carpet Cleaners is a carpet and upholstery cleaning service operating in the local area. For the purposes of data protection law, we are the data controller in respect of the personal data that we collect and use about our customers. This means we determine the purposes and means of processing your personal data.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us. The categories of data we may collect include:
Identification and contact details, such as name, address, postcode, and any other contact information you choose to provide to allow us to deliver our services.
Booking and service information, such as details of the property or premises where the cleaning is to be carried out, preferred dates and times, access instructions where relevant, and information about the type and condition of carpets or upholstery.
Communication records, such as notes of telephone conversations, records of messages or correspondence, and any feedback you provide about our services.
Billing and payment information, such as details needed to process payments and issue invoices or receipts. We do not store full card details where payment is processed through third party payment providers.
Technical information, such as basic device and browser information and general usage data where you interact with us online. This may include logs of visits to our online pages and information about how you use our online contact or booking forms.
How We Collect Your Data
We collect data directly from you when you contact us to make an enquiry, request a quotation, book a service, provide feedback, or otherwise communicate with us. This may be over the phone, in person, or through online contact methods.
We may also generate data in the course of providing our services, such as job notes about the work carried out, and records of payments received or refunds issued.
Lawful Basis for Processing
We only process your personal data when we have a valid legal basis to do so under data protection law. The main legal bases we rely on are:
Performance of a contract. We process your personal data when it is necessary to take steps at your request before entering into a contract and to provide our carpet cleaning services to you once you have made a booking.
Legitimate interests. We may process your data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. These interests include managing and improving our services, maintaining accurate records, handling customer queries, and protecting our business against fraud or misuse.
Legal obligations. We process certain personal data to comply with legal and regulatory requirements, including tax, accounting, and safeguarding obligations.
Consent. In limited cases, where required by law, we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you may withdraw it at any time.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide and manage our carpet cleaning services, including handling enquiries, issuing quotations, arranging visits, and carrying out the work at your property or premises.
To communicate with you about your bookings, including confirming appointments, notifying you of any changes, and responding to your questions or complaints.
To process payments, issue invoices and receipts, and maintain accurate financial and business records.
To improve our services, including training staff, monitoring service quality, and analysing typical customer requirements or service patterns.
To comply with legal and regulatory obligations, respond to lawful requests from public authorities, and protect our rights in the event of disputes.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with trusted third parties where this is necessary for the purposes described in this Privacy Policy, and where there is an appropriate data processing agreement in place.
These third parties may include payment processing providers who handle card and electronic payments on our behalf, accounting or bookkeeping services who assist with financial record keeping, and information technology or customer management service providers who host or support our business systems.
All such service providers act as data processors and are only permitted to process your personal data in accordance with our instructions and applicable data protection law. They must keep your data secure and cannot use it for their own independent purposes.
We may also need to share personal data where we are under a legal duty to do so, for example with law enforcement agencies or regulatory bodies, or where sharing is necessary to establish, exercise or defend legal claims.
Data Retention
We keep your personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected and to meet legal, accounting or reporting requirements.
In general, customer records, booking details, and associated financial records are retained for a period that allows us to respond to queries, handle any complaints, and comply with tax and accounting rules. After the relevant retention period has expired, we will securely delete or anonymise your personal data so that it can no longer be linked back to you.
The specific retention period may vary depending on the nature of the data and our legal obligations. We review our retention practices regularly to ensure that we do not keep personal data longer than necessary.
Data Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures include restricting access to personal data to those staff and contractors who need it for their work, using secure systems where appropriate, and providing guidance and training on data protection responsibilities.
While we take reasonable steps to keep your personal data secure, no transmission or storage system can be guaranteed to be completely secure. You should take care when sharing personal information and contact us if you suspect any misuse of your data in connection with our services.
International Transfers
Our primary data processing activities take place within the United Kingdom. If we ever need to transfer personal data to a country outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place, such as using standard contractual clauses or relying on an adequacy decision, to protect your personal data in line with data protection law.
Your Data Protection Rights
Under data protection law, you have certain rights in relation to your personal data. These rights may be subject to conditions and legal exceptions, but they generally include:
The right of access. You can request a copy of the personal data we hold about you, together with information about how we use it.
The right to rectification. You can ask us to correct inaccurate or incomplete personal data concerning you.
The right to erasure. In certain circumstances, you can request that we delete your personal data where there is no good reason for us to continue processing it.
The right to restrict processing. You may ask us to suspend the processing of your personal data in specific situations, for example if you contest its accuracy.
The right to data portability. In some cases, you can request that we provide your personal data in a structured, commonly used and machine readable format, and transfer it to another controller where technically feasible.
The right to object. You can object to certain types of processing, including processing based on our legitimate interests, where you believe your rights and freedoms override those interests.
The right to withdraw consent. Where we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
Exercising Your Rights
If you wish to exercise any of your data protection rights in relation to Kidbrooke Carpet Cleaners, you can contact us using the usual contact methods you use to reach our business. We may need to verify your identity before responding to your request. We aim to respond within the time limits set by data protection law.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are unhappy with how we handle your personal data. We would, however, appreciate the chance to address your concerns first, so we encourage you to contact us in the first instance.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any updated version will apply to all Kidbrooke Carpet Cleaners customers in our service area from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
