Privacy Policy - Neasden Carpet Cleaners

This Privacy Policy explains how Neasden Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Neasden Carpet Cleaners customers in the area, including anyone who requests a quote, books a service, receives a visit, makes an enquiry, or otherwise interacts with us in connection with carpet cleaning and related services.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy should be read carefully so you understand what information we process, why we process it, and what rights you have.

1. Information We Collect

We may collect and process different types of personal data depending on how you interact with us. The information we collect may include:

Identity details, such as your name.
Contact details, such as your address, telephone number, and email address.
Service details, such as the type of cleaning requested, property access details, booking preferences, and service history.
Payment-related information, such as transaction records and limited billing details.
Communication records, including messages, complaints, feedback, and correspondence.
Technical information, if you contact us electronically, such as device or browser details where relevant for security or service administration.
Special instructions you provide, for example access notes, cleaning priorities, or relevant property conditions.

We generally collect this data directly from you when you request services, make an enquiry, agree a booking, or communicate with us. In some cases, we may receive information from third parties where this is necessary to provide our services, for example from a property manager, landlord, tenant, or another person arranging a service on your behalf.

2. How We Use Your Data

We use your personal data only where we have a lawful reason to do so. The main purposes for which we process personal data include:

responding to enquiries and providing quotations;
managing bookings and delivering cleaning services;
communicating with you about appointments, changes, and service updates;
processing payments and keeping financial records;
handling complaints, disputes, or service issues;
maintaining business records and internal administration;
meeting legal, tax, accounting, and insurance obligations;
improving service quality, training, and customer support;
preventing fraud, misuse, and security incidents.

We only process data that is relevant and necessary for the purpose for which it was collected. We do not use your personal data for unrelated purposes without a lawful basis or, where required, your permission.

3. Lawful Basis for Processing

Under data protection law, we must identify a lawful basis before processing personal data. Depending on the situation, we may rely on one or more of the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes taking bookings, providing cleaning services, arranging access, issuing invoices, and managing customer records linked to the service.

Legal Obligation

We may process and retain certain information to comply with legal obligations, including tax laws, accounting requirements, record-keeping duties, and responses to lawful requests from public authorities.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include service administration, improving operations, keeping records, preventing fraud, and managing customer communications. When we rely on legitimate interests, we consider whether the processing is necessary and proportionate.

Consent

In limited circumstances, we may rely on your consent, for example for certain optional communications or particular processing activities not covered by another lawful basis. Where consent is used, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

4. Sharing Your Information and Processors

We may share personal data with trusted third parties where necessary to operate our business and provide our services. These third parties act as processors or, in some cases, independent controllers. We ensure appropriate contractual and security safeguards are in place.

Processors may include:

Payment providers, which help us process card or electronic payments.
Accounting and bookkeeping providers, which help us maintain financial records.
IT and cloud service providers, which support data storage, email, scheduling, and system security.
Customer communication providers, which may assist with messages and service notifications.
Administrative support providers, where necessary for booking management or operational support.

We may also disclose personal data to professional advisers such as insurers, legal advisers, or auditors, where necessary for business administration, risk management, or compliance. Additionally, we may share data where required by law, regulation, court order, or a lawful request from a public authority.

We do not sell your personal data. If data is transferred outside the United Kingdom, we will only do so where appropriate safeguards are in place to protect your information to the standard required by law.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, insurance, and reporting requirements. The retention period may vary depending on the type of data and the reason it is held.

Booking and service records are normally retained for a reasonable period to manage customer history, resolve disputes, and support future service requests.
Financial records are retained for the period required by tax and accounting law.
Correspondence and complaint records may be kept for as long as needed to handle the matter and demonstrate proper resolution.
Technical and security logs are retained only as long as necessary for operational and security purposes.

When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in a safe and lawful manner.

6. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights are not absolute and may only apply in certain circumstances. Subject to applicable law, you may have the right to:

Access the personal data we hold about you.
Rectification of inaccurate or incomplete information.
Erasure of your data in certain circumstances.
Restriction of processing in certain situations.
Object to processing based on legitimate interests or direct marketing, where applicable.
Data portability for information you provided to us, where the legal conditions are met.
Withdraw consent where processing is based on consent.

If you wish to exercise any of these rights, we may need to verify your identity before responding. We will respond within the time limits required by law, usually within one month, although this may be extended where requests are complex or numerous.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated. We encourage you to raise concerns with us first so we can try to resolve the issue directly.

7. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, disclosure, or alteration. These measures may include access controls, secure storage, staff awareness, and limiting access to personal data to those who need it for legitimate business purposes.

Although we work to protect your data, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we continually review our safeguards to improve protection where appropriate.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or the way we process personal data. Any updated version will apply from the date it is issued. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

9. Summary of Key Points

We collect only the personal data needed to provide and manage our cleaning services.
We process data under lawful bases including contract, legal obligation, legitimate interests, and, in limited cases, consent.
We may share data with trusted processors who support payments, accounting, IT, and administration.
We retain data only as long as necessary and delete it securely when no longer needed.
You have rights over your personal data, including access, correction, deletion, objection, and portability in some cases.

This Privacy Policy applies to all Neasden Carpet Cleaners customers in area. By using our services, you acknowledge that your personal data will be processed in accordance with this policy and applicable data protection law.