Privacy Policy
Carpet Cleaning Bromley Privacy Policy
This Privacy Policy explains how Carpet Cleaning Bromley collects, uses, stores, and protects personal data relating to our customers and prospective customers in our service area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services you acknowledge that you have read this Privacy Policy and understand how we process your personal data.
Scope and Data Controller
This Privacy Policy applies to all Carpet Cleaning Bromley customers and prospective customers located within our service area, including individuals and businesses who contact us, request a quote, make a booking, or receive our carpet and upholstery cleaning services. Carpet Cleaning Bromley is the data controller for the personal data described in this Policy and is responsible for determining how and why your data is processed.
Types of Personal Data We Collect
We only collect personal data that is necessary for the provision and administration of our services. The types of data we may collect include:
Identification and contact details, such as your full name, postal address, service address, and any alternative contact name you provide.
Communication details, such as your email address and any communication preferences that you share with us.
Booking and service information, including preferred dates and times, type of property, areas to be cleaned, access instructions, and any relevant notes you provide about your premises.
Billing and payment information, such as billing address, payment method used, and amounts paid. Payment card details are processed securely by external payment processors and are not stored by us.
Usage and enquiry information, including details included in enquiries, feedback, complaints, or reviews that you submit to us by phone, online form, or other communication channels.
Technical and device-related information, where applicable, such as IP address, browser type, and basic analytics data when you visit our website. This information is used to maintain and improve our website and services.
How We Collect Personal Data
We collect personal data directly from you when you contact us, request a quotation, make a booking, or otherwise communicate with us. This may be done via telephone, online forms, written correspondence, or in person. We may also collect data when you visit our website, including through cookies or similar technologies used for basic analytics and service improvement. In some cases, we may receive your details from third parties, such as comparison platforms or partners, but only where they have confirmed that you have consented to your information being shared with us.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis under the UK GDPR. These lawful bases include:
Performance of a contract: We use your data to provide our cleaning services, manage bookings, communicate with you about your appointment, issue invoices, and collect payments.
Legitimate interests: We may process your data to manage and improve our services, respond to enquiries, keep records of work carried out, and protect our business from fraud or misuse. We always balance our legitimate interests against your rights and expectations.
Legal obligations: We may process and retain certain information to comply with legal requirements, such as tax and accounting rules or to respond to lawful requests from regulatory or law enforcement authorities.
Consent: In some cases, such as for certain marketing communications that are not based on legitimate interests, we rely on your explicit consent. Where we rely on consent, you can withdraw it at any time using the contact details provided in this Policy.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage our carpet and upholstery cleaning services, including handling enquiries, preparing quotations, scheduling and performing cleaning work, and providing aftercare.
To communicate with you about bookings, changes to appointments, service updates, and any issues relating to your property or the work undertaken.
To process payments, manage invoices, and maintain accurate business and financial records.
To respond to questions, complaints, or requests and to resolve any disputes that may arise.
To improve our services, operations, and customer experience, including through customer feedback and website analytics.
To send service-related messages and, where permitted, marketing communications about similar services that may be of interest to you. You can opt out of marketing communications at any time.
Data Sharing and Processors
We do not sell your personal data. We may share your data with trusted third parties who act as data processors on our behalf. These include:
IT and hosting providers that support our website, booking systems, email services, and data storage solutions.
Payment service providers that securely process your payments and prevent fraud.
Professional advisers such as accountants, where necessary for financial and tax compliance.
These processors are only permitted to process your data according to our instructions and for the specific purposes described in this Policy. They are required to keep your data secure and confidential.
We may also share your data with third parties where required by law, to protect our legal rights, or in connection with a potential or actual sale or reorganisation of our business, always subject to appropriate safeguards.
Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected, and to meet our legal, accounting, and reporting obligations. The length of time we keep your data will depend on the type of information and the context in which it was collected.
Booking and service records, including basic contact details and records of work performed, are generally retained for a period that allows us to handle queries, warranty issues, and legal claims, and to comply with tax and accounting rules.
Marketing-related data is retained for as long as you remain subscribed or until you object to or opt out of marketing communications, after which it will be removed or anonymised within a reasonable period.
When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer be linked to you.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include secure storage, restricted access on a need-to-know basis, and regular review of our data protection practices. While no system can be completely secure, we aim to ensure that your information is safeguarded to a level appropriate to the risk.
International Transfers
Where we use service providers that are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place before any international transfer of personal data takes place. This may include using providers in countries that have been recognised as providing an adequate level of protection, or entering into standard contractual clauses or equivalent arrangements approved by relevant data protection authorities.
Your Data Protection Rights
Under the UK GDPR, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:
The right of access: You can request confirmation of whether we hold personal data about you and obtain a copy of that data.
The right to rectification: You can ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
The right to erasure: You can request that we delete your personal data where there is no longer a lawful basis for us to keep it, or where you have successfully objected to processing.
The right to restriction of processing: You can ask us to restrict the processing of your data in certain circumstances, such as while we are verifying its accuracy or considering an objection.
The right to object: You can object to our processing of your data where we rely on legitimate interests as our lawful basis, and we will stop processing unless we have compelling legitimate grounds to continue. You always have the right to object to direct marketing.
The right to data portability: You can request that we provide you with your personal data in a structured, commonly used, and machine-readable format, or transfer it to another controller, where technically feasible and applicable.
To exercise any of these rights, or to raise questions or concerns about how your data is handled, you can contact us using the contact details on our website or other communication channels. We will respond to your request in accordance with data protection law.
Complaints
If you are unhappy with how we have handled your personal data, you are encouraged to contact us so that we can try to resolve the issue. You also have the right to lodge a complaint with the Information Commissioners Office or the relevant supervisory authority in your country of residence or work.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any changes will be posted on this page, and the updated version will apply from the date it is published. We encourage you to review this Policy regularly to stay informed about how we protect your personal data.