Carpet Cleaners Soho Privacy Policy

This Privacy Policy explains how Carpet Cleaners Soho collects, uses, stores and protects personal data relating to customers and prospective customers in the Soho area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. By using our cleaning services or contacting us about our services, you acknowledge that you have read and understood this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy applies to all Carpet Cleaners Soho customers and potential customers in our service area, including individuals and businesses who contact us, request a quotation, make a booking, or otherwise interact with us in relation to our carpet and upholstery cleaning services. It covers personal data collected through telephone communications, written correspondence, online enquiries, and in-person interactions.

Personal Data We Collect

We may collect and process different types of personal data depending on how you interact with us and which services you use. The categories of personal data we typically collect include:

Identification and contact details, such as your name, address, property access information, and general location details necessary to deliver our services.

Communication data, including the content of any enquiries, quotations, booking details, feedback, and complaints you send to us, as well as notes from our conversations.

Service and transaction data, including details of the cleaning services you request or receive, dates and times of appointments, pricing information, payment status, and related billing records. We do not store full payment card details; where card payments are processed, they are handled by secure payment processors.

Technical and usage data, where applicable, including limited information about how you use any online enquiry forms or digital booking tools, such as date and time of access and basic technical information provided by your browser. We do not seek to identify individuals from this information unless required for security or legal reasons.

Lawful Bases for Processing

We only process personal data when we have a lawful basis to do so under applicable data protection laws. The lawful bases we rely on include:

Contract performance. We process your personal data when it is necessary to enter into or perform a contract with you, for example to provide carpet cleaning services, arrange appointments, manage your bookings, and handle payments.

Legitimate interests. We may process personal data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This includes managing our relationship with you, improving our services, maintaining business records, and protecting our business from fraud and misuse.

Legal obligations. We process personal data when it is necessary to comply with legal and regulatory obligations, such as accounting, tax, and record-keeping requirements, or to respond to lawful requests from public authorities.

Consent. In limited circumstances, we may rely on your consent to process your personal data, for example for certain types of direct marketing. Where we rely on consent, you have the right to withdraw it at any time.

How We Use Personal Data

We use the personal data we collect for the following purposes:

To provide, manage, and improve our carpet cleaning services, including handling enquiries, preparing quotations, scheduling and carrying out cleaning visits, and following up on completed work.

To communicate with you regarding your bookings, appointments, changes to our services, invoices, and any queries or complaints you raise.

To manage our business operations, including accounting, internal reporting, quality control, staff training, and service development.

To protect our rights, property, and safety, and that of our customers and staff, including the detection and prevention of fraud and misuse of our services.

To comply with applicable laws, regulations, and guidance, and to respond to lawful requests and legal claims.

Data Sharing and Processors

We do not sell your personal data. We may share your personal data only when necessary and in accordance with data protection laws. Categories of recipients may include:

Service providers and data processors who act on our behalf and under our instructions to help us deliver our services. These may include payment processors, accounting and invoicing service providers, information technology and cloud service providers, and customer management tools. These organisations are required to handle your data securely, use it only for the purposes we specify, and comply with applicable data protection laws.

Professional advisers, such as accountants, auditors, or legal advisers, where necessary for the provision of their services to us and subject to professional duties of confidentiality.

Public authorities, regulators, law enforcement bodies, or courts, when we are legally required or permitted to do so, or when sharing is necessary to protect our rights or the rights of others.

If any data transfers take place outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with data protection law.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide our services, meet legal, accounting, or reporting requirements, and resolve disputes. When determining the appropriate retention period, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and any applicable legal obligations.

In general, customer and booking records, including basic contact details and service history, may be retained for several years after the end of our relationship to comply with tax and accounting rules and to maintain accurate business records. Where data is no longer needed, we will either securely delete it or irreversibly anonymise it.

Data Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, secure storage, restricted access to personal data to those who have a legitimate need to know it, and staff awareness of data protection responsibilities. While we strive to protect your personal information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Data Protection Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exceptions, these rights include:

Right of access. You have the right to request confirmation that we process your personal data and to receive a copy of the data we hold about you.

Right to rectification. You have the right to request that we correct or complete any inaccurate or incomplete personal data.

Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where the data is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.

Right to restriction. You may request that we restrict the processing of your personal data in certain situations, such as while we verify its accuracy or assess an objection you have raised.

Right to object. You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including any direct marketing we carry out. We will stop processing your data unless we have compelling legitimate grounds that override your interests and rights or we need the data for legal claims.

Right to data portability. Where our processing is based on your consent or on a contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request that it is transmitted to another controller where technically feasible.

You also have the right to lodge a complaint with a supervisory authority if you believe we have not handled your personal data in accordance with data protection law. We encourage you to contact us first so that we can try to resolve your concerns.

Children

Our services are aimed at adults responsible for residential or commercial properties. We do not knowingly collect personal data relating to children, and our services are not directed to individuals under the age of 18.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any updates will be effective from the date of publication. You should review this Policy periodically to stay informed about how we protect your personal data.