Privacy Policy - Enfield Carpet Cleaners

This Privacy Policy explains how Enfield Carpet Cleaners collects, uses, stores, shares, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Enfield Carpet Cleaners customers in area, including prospective customers, current customers, and anyone who interacts with us in connection with our carpet cleaning services.

1. Who We Are

Enfield Carpet Cleaners provides professional carpet cleaning and related cleaning services. For the purposes of data protection law, we act as the data controller for personal information that we collect and decide how to use. This means we determine the purposes and means of processing personal data in line with applicable law.

2. Personal Data We Collect

We only collect personal data that is necessary for legitimate business purposes and service delivery. The categories of information we may collect include:

Identity information, such as your name.
Contact information, such as your address, email address, and telephone number.
Service information, such as details of the cleaning service requested, booking preferences, property access notes, and service history.
Payment information, such as transaction records and billing details. We do not normally store full card details where a payment processor is used.
Communication records, including messages, complaints, feedback, and records of enquiries.
Technical information, where relevant, such as basic device or browser data collected when you interact with digital forms or communications.
Special instructions you provide, for example access arrangements or notes about items needing extra care.

We do not intentionally collect more data than is needed. We also do not seek to collect special category data unless you choose to provide it and it is necessary for the service, in which case we will process it only where a lawful basis exists.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange, manage, and deliver carpet cleaning services.
To confirm bookings, handle changes, and communicate service updates.
To process payments, issue records, and maintain accounting information.
To deal with complaints, disputes, and after-service queries.
To maintain business records and comply with legal obligations.
To improve our services, internal processes, and customer experience.
To protect against fraud, misuse, or unauthorised access.

We process personal data in a manner that is fair, lawful, and transparent. We do not use your information for unrelated purposes without informing you, unless required or permitted by law.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each type of processing. Enfield Carpet Cleaners relies on one or more of the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes managing bookings, carrying out cleaning services, and handling payments.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your interests and rights do not override those interests. Examples include record keeping, service improvements, fraud prevention, and managing customer communications. We always consider whether the processing is proportionate and relevant.

Legal Obligation

We may process and retain certain information where necessary to comply with legal, tax, accounting, or regulatory requirements.

Consent

In limited cases, we may rely on your consent, for example where it is legally required for a particular form of communication or processing. Where consent is used, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing and Processors

We may share personal data with trusted third parties where necessary for service delivery, business operations, or legal compliance. These third parties may act as processors or, in some cases, independent controllers.

Examples of processors and recipients may include:

Payment service providers that process transactions securely.
Booking and administration tools used to schedule and manage services.
IT and cloud service providers that store or support our records.
Accountants or professional advisers where required for legal, tax, or business purposes.
Delivery or subcontracted service partners where needed to fulfil a customer request.
Regulators, law enforcement, or public authorities when disclosure is required by law.

When we use processors, we ensure they act only on our instructions, keep data secure, and apply appropriate technical and organisational safeguards. We do not sell personal data.

6. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods vary depending on the category of data and the reason for processing.

Customer service and booking records are generally retained for a reasonable period after the completion of service to allow us to manage queries, disputes, and business records.
Financial and accounting records are retained for the period required by tax and accounting laws.
Communication records may be kept for as long as needed to resolve issues or evidence instructions.
Inactive or unnecessary data is securely deleted or anonymised when it is no longer required.

Where possible, we apply a data minimisation approach and review records periodically to ensure they are not kept longer than necessary.

7. Data Security

We take appropriate security measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and supplier due diligence. While no system is completely secure, we work to protect information using suitable technical and organisational safeguards.

8. International Transfers

If any personal data is transferred outside the UK, we will only do so where appropriate safeguards are in place and where the transfer complies with data protection law. This may include standard contractual protections or transfers to countries with adequate data protection standards.

9. Your Rights

As a data subject, you have several rights regarding your personal data. These rights may be subject to legal exemptions and conditions. Your rights include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain cases.
Right to object – to object to processing based on legitimate interests or direct marketing where applicable.
Right to data portability – to receive certain data in a structured, commonly used, machine-readable format where applicable.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached. We encourage you to raise any concerns so we can try to resolve them first.

10. Children’s Data

Our services are intended for adults and business customers arranging domestic or commercial cleaning. We do not knowingly collect personal data from children unless it is provided incidentally and is necessary for the performance of a service. If we become aware that we have collected data from a child without appropriate basis, we will take steps to delete it where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, operations, or our data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their information is used.

12. Summary of Our Privacy Principles

In summary, Enfield Carpet Cleaners is committed to protecting your personal data and using it responsibly. We collect only what we need, use it for clear and lawful purposes, keep it only for as long as necessary, and share it only with trusted processors or where required by law. We respect your privacy rights and aim to handle all data in a transparent, secure, and lawful way.