Privacy Policy - Carpetcleaning Bromley

This Privacy Policy explains how Carpetcleaning Bromley collects, uses, stores, shares, and protects personal data in connection with the provision of carpet cleaning and related services. It applies to all Carpetcleaning Bromley customers in area, including individuals who request quotes, make bookings, receive services, or communicate with us in relation to our services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Personal Data We Collect

We may collect different types of personal data depending on how you interact with us. The information we collect is limited to what is necessary for providing our services, managing our business operations, and meeting our legal obligations.

Information you provide directly

• Identity details such as your name.
• Contact details such as your email address, telephone number, and service address.
• Service information such as the type of cleaning requested, booking preferences, property access details, and instructions relating to the job.
• Communication records including messages, call notes, complaints, feedback, and any other correspondence you send to us.
• Billing and payment information where needed to process transactions and keep financial records.

Information collected automatically

When you contact us electronically or visit our website or online booking tools, we may collect limited technical data such as:

• IP address and device information.
• Browser type and operating system.
• Usage data relating to how you interact with our pages or forms.

This data is used to help us maintain service quality, improve user experience, and protect against misuse.

Information from third parties

In some cases, we may receive your details from third parties, for example where a landlord, letting agent, property manager, insurer, or referral partner makes an enquiry on your behalf or provides your details with a lawful basis to do so. We will only use such information where it is relevant to the requested service.

2. How We Use Your Personal Data

We use personal data for the following purposes:

• To provide carpet cleaning and related services.
• To arrange bookings, confirm appointments, and manage service delivery.
• To communicate with you about your enquiry, booking, or service updates.
• To process payments, issue invoices, and keep financial records.
• To respond to complaints, disputes, and service-related queries.
• To maintain business records and improve our services.
• To comply with legal, tax, accounting, and regulatory obligations.
• To protect our business, staff, and customers from fraud, misuse, or unlawful activity.

We will only use your personal data for the purposes set out in this Privacy Policy or for other purposes that are compatible with them.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the situation, Carpetcleaning Bromley relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes booking services, carrying out cleaning work, handling payments, and communicating about the services you have requested.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided these interests do not override your rights and freedoms. Examples include managing enquiries, improving service quality, maintaining records, preventing fraud, and ensuring efficient business operations. We always consider whether processing is proportionate and appropriate.

Legal obligation

We may process and retain personal data where required to comply with legal obligations, including tax law, accounting rules, insurance requirements, and regulatory duties.

Consent

In limited circumstances, we may rely on your consent, for example where specific optional communication preferences apply. Where consent is used, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

4. How We Share Personal Data

We may share personal data with trusted third parties, known as processors or service providers, where necessary for the operation of our business and delivery of our services. These parties only process data on our instructions and are required to keep it secure and confidential.

Examples of processors may include:

• Payment service providers used to process card or electronic payments.
• Accounting and bookkeeping providers used for invoicing and financial administration.
• IT and cloud storage providers used to host data, software, or communications systems.
• Booking and scheduling tools used to manage appointments and service coordination.
• Customer communication providers used for emails, messages, or service notifications.
• Professional advisers such as accountants, legal advisers, or insurers where required.

We may also disclose personal data if required by law, court order, or a lawful request from a public authority. Where possible, we will limit the amount of data disclosed to what is necessary.

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including the fulfilment of contractual obligations, compliance with legal duties, and the resolution of disputes.

Retention periods depend on the type of data and the reason we hold it. For example:

• Service and booking records may be kept for a reasonable period after completion of work.
• Financial and tax records may be retained for the period required by law.
• Communication records may be kept for as long as needed to handle enquiries or complaints.

When personal data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in accordance with our data retention practices.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and careful management of systems and records.

However, no method of transmission or storage is completely secure, and while we work hard to protect your data, we cannot guarantee absolute security. If a data breach occurs and is likely to result in a high risk to your rights and freedoms, we will take appropriate steps in line with applicable law.

7. Your Rights Under GDPR

You have a number of rights in relation to your personal data. These rights may be subject to legal conditions and exemptions, but we will always consider your request carefully.

Your rights include:

• Right of access – you can request a copy of the personal data we hold about you.
• Right to rectification – you can ask us to correct inaccurate or incomplete data.
• Right to erasure – in certain circumstances, you can ask us to delete your personal data.
• Right to restriction – you can request that we limit how we use your data in certain cases.
• Right to data portability – where applicable, you can request data in a structured, commonly used format.
• Right to object – you can object to processing based on legitimate interests and to direct marketing where applicable.
• Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed. We encourage you to raise concerns with us first so we can try to resolve them promptly.

8. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it. This may include the use of approved contractual protections or transfers to countries recognised as providing adequate protection under applicable law.

9. Children’s Data

Our services are directed to adults and businesses. We do not knowingly collect personal data from children except where necessary and lawful in connection with service arrangements made by an adult responsible for the property or booking.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our services, or our data handling practices. The updated version will apply from the date it is published or otherwise made available. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

11. Summary of Our Commitment

Carpetcleaning Bromley is committed to handling personal data responsibly, securely, and transparently. We collect only the data needed to provide services effectively, use it on a lawful basis, share it only with appropriate processors or where legally required, and keep it only for as long as necessary. All Carpetcleaning Bromley customers in area can expect their information to be treated with care, in accordance with this Privacy Policy and applicable data protection laws.

By using our services, making an enquiry, or providing your details to us, you acknowledge that your personal data will be processed in line with this policy.