Privacy Policy - Watford Carpet Cleaners

This Privacy Policy explains how Watford Carpet Cleaners collects, uses, stores, shares, and protects personal data relating to our customers in the Watford area. It applies to all Watford Carpet Cleaners customers in area, including people who request quotes, make bookings, receive carpet cleaning services, or otherwise interact with us in connection with our services. We are committed to handling personal data lawfully, fairly, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Watford Carpet Cleaners is the data controller for the personal data described in this Policy. This means we decide how and why personal data is processed in relation to our services. We take our responsibilities seriously and aim to collect only the information we need to provide services, manage customer relationships, meet legal obligations, and improve our operations.

2. Personal Data We Collect

We may collect and process different types of personal data depending on how you interact with us. This can include:

• Identity details such as your name, title, and any business name you provide;
• Contact details such as your address, email address, and telephone number;
• Service information such as booking details, requested cleaning services, property access instructions, and service preferences;
• Payment information such as payment status, billing records, and transaction references;
• Communication records such as emails, messages, call notes, and complaint information;
• Technical information if you contact us digitally, such as basic device or usage data generated by our systems;
• Feedback and review information you choose to provide after receiving a service.

We do not intentionally collect special category data unless it is strictly necessary and you have chosen to share it with us, for example where it relates to access, safety, or an accommodation needed to carry out services safely. In such cases, we will only process the information where a lawful basis applies and where appropriate safeguards are in place.

3. How We Use Personal Data

We use personal data for the following purposes:

• to respond to enquiries and provide quotes;
• to arrange, deliver, and manage cleaning services;
• to confirm appointments and handle changes or cancellations;
• to take payment, issue invoices, and manage accounts;
• to keep records of services delivered;
• to deal with complaints, disputes, or aftercare queries;
• to improve the quality, efficiency, and safety of our services;
• to comply with legal, tax, accounting, and regulatory obligations;
• to protect our business against fraud, misuse, or unlawful activity.

We only use personal data for the purposes for which it was collected, unless we reasonably believe we need to use it for a compatible purpose or another lawful reason permitted by data protection law.

4. Lawful Basis for Processing

We process personal data only where we have a lawful basis under UK GDPR. Depending on the situation, our lawful bases may include:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes processing needed to provide quotes, accept bookings, perform cleaning services, and manage payments.

Legal Obligation

We may process data where required to comply with legal obligations, such as record keeping, tax compliance, accounting requirements, or responding to lawful requests from public authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include service improvement, internal administration, business record keeping, fraud prevention, and handling customer communications. We ensure that any such processing is proportionate and respectful of your privacy.

Consent

In limited situations, we may rely on your consent, for example for optional marketing communications where consent is required. If we rely on consent, you can withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

5. Sharing Personal Data and Processors

We may share personal data with trusted third parties who help us operate our services. These third parties act as processors when they process data on our instructions, or as independent controllers where they determine their own purposes. Examples may include:

• IT and hosting providers that support our systems, email, or data storage;
• payment service providers that handle transactions securely;
• accounting or bookkeeping providers that assist with financial records;
• customer service or communication tools that help manage bookings and enquiries;
• professional advisers such as lawyers, insurers, or auditors where necessary;
• public authorities where disclosure is required by law.

We require processors to take appropriate security measures and to process personal data only in accordance with our instructions and applicable law. Where personal data is shared with independent controllers, they are responsible for their own privacy practices.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. Retention periods vary depending on the type of information and the reason for processing. In general:

• booking and service records are retained for a reasonable period to manage customer relationships and service history;
• financial and tax records are kept for the period required by law;
• complaint and communication records are kept for as long as needed to resolve issues and defend legal claims;
• data collected with consent is kept until consent is withdrawn or it is no longer needed.

When personal data is no longer required, we will delete it securely or anonymise it so it can no longer identify you.

7. Data Security

We use reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure systems, staff awareness, and limiting data access to people who need it for legitimate business purposes. While no system can be guaranteed completely secure, we take appropriate steps to reduce risk and protect information.

8. International Transfers

Where any processor or service provider stores or accesses data outside the United Kingdom, we will ensure appropriate safeguards are in place in accordance with data protection law. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent lawful transfer mechanisms.

9. Your Rights

Under UK GDPR, you have several rights regarding your personal data. Depending on the circumstances, these may include:

• Right of access – to request a copy of the personal data we hold about you;
• Right to rectification – to correct inaccurate or incomplete data;
• Right to erasure – to request deletion of your data in certain circumstances;
• Right to restriction – to request limited processing in certain situations;
• Right to object – to object to processing based on legitimate interests or direct marketing;
• Right to data portability – to receive certain data in a structured, commonly used format;
• Right to withdraw consent – where processing relies on consent;
• Right to complain – to raise concerns with the Information Commissioner’s Office (ICO).

Some rights may not apply in all cases, as data protection law includes exemptions and limits. We will always assess requests carefully and respond in accordance with legal requirements.

10. How to Exercise Your Rights

If you wish to exercise any of your rights, please provide enough information to identify you and describe your request clearly. We may need to verify your identity before responding, to protect your privacy and security. We will respond within the time limits set by law, usually within one month, unless the request is complex or numerous.

11. Marketing Communications

If we send marketing messages, we will do so only where permitted by law. You can opt out of marketing at any time, and we will respect your choice. Service-related communications that are necessary to deliver or manage your booking are not considered marketing.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply to personal data processed after the revision takes effect. We encourage customers to review this Policy periodically so they remain informed about how their data is used.

13. Summary of Our Approach

Watford Carpet Cleaners is committed to respecting privacy, being transparent about data use, and processing personal data only where there is a lawful basis to do so. We collect only the information necessary to provide and manage our services, retain it for no longer than needed, and work with processors that are required to protect your data. We also recognise and support your rights under data protection law.

This Privacy Policy applies to all Watford Carpet Cleaners customers in area. By using our services, you acknowledge that your personal data may be processed as described above and in accordance with applicable law.