Privacy Policy - Enfield Lock Carpet Cleaners

This Privacy Policy explains how Enfield Lock Carpet Cleaners collects, uses, stores, shares, and protects personal data relating to its customers. It applies to all Enfield Lock Carpet Cleaners customers in the area, including individuals who request quotations, book services, receive cleaning services, make enquiries, or otherwise interact with us in connection with carpet cleaning and related services. We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Enfield Lock Carpet Cleaners acts as the data controller in relation to the personal data described in this policy. This means we determine the purposes and means of processing personal data collected from customers and prospective customers for the delivery and administration of our services.

2. Personal Data We Collect

We collect only the information necessary to provide our services, manage customer relationships, and meet legal and business obligations. The types of personal data we may collect include:

Identity details such as name and title.
Contact details such as address, email address, and telephone number.
Service details such as property access instructions, cleaning preferences, service history, and appointment notes.
Payment information such as billing details and payment status. We do not retain full payment card information where this is processed securely by a payment provider.
Communication records including messages, quotations, complaints, service updates, and feedback.
Technical information where relevant, such as basic device or usage data collected through digital systems used to manage enquiries and bookings.
Special category data only where you voluntarily provide it and only when strictly necessary, for example if a health or access issue requires us to adapt our service. We will always limit such processing and apply additional safeguards.

We do not intentionally collect more information than is needed for the proper delivery of our services. If we ever need to collect additional information, we will explain why it is needed at the time.

3. How We Use Personal Data

We use personal data for the following purposes:

To provide quotations, arrange appointments, and carry out carpet cleaning services.
To communicate with customers about bookings, service changes, reminders, and follow-up matters.
To maintain records of services provided and customer preferences.
To process payments, issue invoices, and manage account administration.
To deal with complaints, queries, and customer support requests.
To improve service quality, training, and operational planning.
To comply with legal and regulatory requirements.
To establish, exercise, or defend legal claims where necessary.

We will only use personal data for the purposes for which it was collected unless we reasonably believe another purpose is compatible with the original purpose and lawful under data protection law.

4. Lawful Basis for Processing

We process personal data only when we have a valid lawful basis under the UK GDPR. Depending on the circumstances, the lawful bases we rely on may include:

Contract

We process personal data where it is necessary to take steps at your request before entering into a contract or to perform a contract with you. This includes handling bookings, providing cleaning services, and managing related administrative tasks.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. This may include managing business operations, keeping service records, responding to enquiries, and improving customer service. We always consider whether our interests are balanced against your privacy rights.

Legal Obligation

We process personal data where required to comply with legal obligations, such as tax, accounting, fraud prevention, or record-keeping requirements.

Consent

Where required, we will rely on your consent. For example, consent may be used in limited cases where you provide optional sensitive information or agree to receive certain forms of marketing. You may withdraw consent at any time, where applicable.

Vital Interests

In rare situations, we may process data to protect someone’s vital interests, such as in an emergency affecting health or safety.

5. Data Sharing and Processors

We do not sell personal data. We may share personal data only where necessary and appropriate for service delivery, business administration, legal compliance, or protection of our rights. Personal data may be shared with trusted third parties acting as processors or, in limited cases, as independent controllers.

Examples of processors may include:

IT and cloud storage providers used to securely store customer records.
Booking, scheduling, or customer management software providers.
Payment processing providers that handle financial transactions securely.
Accountancy or bookkeeping service providers supporting financial administration.
Communication service providers used to send service-related updates.

Where we use processors, we require them to act only on our instructions, to keep data confidential, and to implement appropriate technical and organisational security measures. We do not permit processors to use personal data for their own independent purposes.

In some cases, we may also disclose information to legal, regulatory, insurance, or professional advisers where necessary. Any such disclosure will be limited to what is required and handled in accordance with applicable law.

6. International Transfers

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place, such as adequacy regulations or approved contractual protections. We take reasonable steps to make sure that your personal data remains protected to a standard consistent with UK data protection requirements.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, reporting, or dispute-resolution requirements. Retention periods may vary depending on the type of information and the reason it was collected.

In general:

Customer service records are retained for a period necessary to manage ongoing business and service history.
Financial and tax-related records are retained for the period required by law.
Complaint and correspondence records are retained for as long as needed to resolve issues and manage legal risk.
Information no longer required is securely deleted, anonymised, or otherwise disposed of.

When determining retention, we consider legal obligations, the likelihood of future claims, operational needs, and whether continued storage remains necessary. We do not keep personal data indefinitely without a clear reason.

8. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or misuse. These measures may include access controls, secure storage, limited access on a need-to-know basis, staff awareness procedures, and service-provider due diligence.

Although we work hard to protect personal data, no method of transmission or storage is completely secure. If a personal data breach occurs, we will assess the risk and take any necessary action in line with applicable law.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to conditions and exemptions, depending on the circumstances. Your rights include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to data portability – to receive certain data in a structured, commonly used format, where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law and within the required timeframes. We may need to verify your identity before acting on a request.

10. Marketing

We only send marketing communications where permitted by law. If we rely on consent, you may opt out at any time. If we rely on legitimate interests for certain non-intrusive communications, you still have the right to object. We will always respect your choices and update our records accordingly.

11. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children except where it is incidental and necessary for service delivery or where provided by an adult acting on their behalf. If we become aware that we have collected data improperly, we will take appropriate steps to delete or restrict it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational requirements. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

13. Your Responsibility to Provide Accurate Information

When you provide us with personal data, you should ensure it is accurate and kept up to date. Accurate information helps us deliver services correctly, maintain safe access arrangements, and communicate with you efficiently. If your details change, please make sure that we are informed so our records remain current.

14. Summary of Our Commitments

Enfield Lock Carpet Cleaners is committed to processing personal data in a lawful, fair, and transparent manner. We collect only what is necessary, use it for clear and legitimate purposes, share it only when appropriate, retain it for no longer than needed, and respect your rights under data protection law. This policy applies to all Enfield Lock Carpet Cleaners customers in the area and is designed to provide confidence that personal data is handled responsibly and securely.

By using our services, you acknowledge that your personal data may be processed in accordance with this Privacy Policy and applicable data protection law.