Privacy Policy - Islington Carpetcleaning

This Privacy Policy explains how Islington Carpetcleaning collects, uses, stores, shares, and protects personal data. It applies to all Islington Carpetcleaning customers in the area and to anyone who interacts with us in connection with our services. We are committed to handling personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who This Policy Applies To

This policy applies to all Islington Carpetcleaning customers in area, including residential and commercial clients, website visitors who make enquiries, and individuals who request quotations, bookings, or follow-up services. It also applies to any person whose data we receive while providing carpet cleaning, upholstery cleaning, stain treatment, maintenance, or related services.

2. Personal Data We Collect

We collect only the information we need to provide our services, manage our business, and meet legal obligations. Depending on your interaction with us, we may collect:

Identity information such as your name and, where relevant, business name.
Contact details such as address, telephone number, and email address.
Service details including property access notes, cleaning requirements, preferred appointment times, and service history.
Payment information such as billing details and transaction records.
Communication records including enquiries, complaints, feedback, and correspondence.
Technical information if you contact us electronically, such as device and usage data collected through standard security logs.
Special instructions that may relate to allergies, sensitive surfaces, pets, or property conditions.

We do not intentionally collect special category data unless you choose to provide it and it is necessary for the service. If you share such information, we will treat it with extra care and only process it where a lawful basis exists.

3. How We Use Personal Data

We use personal data for the following purposes:

To provide quotations, schedule appointments, and deliver cleaning services.
To manage payments, invoices, and account records.
To respond to enquiries and provide customer support.
To keep service records and manage repeat bookings efficiently.
To improve the quality, safety, and efficiency of our services.
To meet legal, tax, and insurance obligations.
To prevent fraud, misuse, or unauthorised access.

We only process data for specified, explicit, and legitimate purposes. We do not sell personal data to third parties.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. We rely on the following lawful bases:

Contract

We process data when it is necessary to take steps at your request before entering into a contract, or to perform the contract itself. This includes booking services, delivering cleaning work, and managing payments.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights. This includes maintaining business records, improving services, handling enquiries, and protecting our business against fraud or misuse.

Legal Obligation

We process certain data to comply with laws and regulations, such as accounting, tax, and record-keeping obligations.

Consent

In limited cases, we rely on your consent, such as for optional marketing communications or where special category data is shared for a specific purpose. You may withdraw consent at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

5. Sharing Personal Data and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as processors or independent controllers depending on the service provided.

Processors may include:

Payment service providers who handle card or electronic payments.
IT and cloud service providers who store or support our business systems.
Scheduling and communication providers who help manage bookings, emails, and messages.
Professional advisers such as accountants, auditors, legal advisers, and insurers.
Waste disposal or specialist service partners where required to complete a job safely and lawfully.

We require processors to protect personal data and to use it only for the purposes we specify. Where a third party acts as an independent controller, it is responsible for its own privacy practices.

We may also disclose information if required by law, regulation, court order, or to protect our rights, customers, staff, or property.

6. International Transfers

Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other legally recognised protection measures. We take steps to make sure your data remains protected to a standard consistent with UK data protection law.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, or reporting requirements. Retention periods depend on the type of data and the context in which it is used.

Customer and service records are retained for a reasonable period to manage contracts, follow-up services, and disputes.
Financial records are retained for the period required by tax and accounting law.
Communications are retained for as long as needed to resolve enquiries or support business operations.
Consent-based marketing data is kept until you withdraw consent or unsubscribe.

When data is no longer needed, we securely delete, anonymise, or archive it in line with our retention practices. We do not keep data indefinitely without a clear reason.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, password protection, secure storage, staff confidentiality obligations, and careful selection of processors.

Although we take reasonable steps to protect data, no system can be guaranteed completely secure. We therefore encourage customers to share only the information necessary for the service.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can ask us to delete your data in certain circumstances.
Right to restriction – you can ask us to limit the way we use your data.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request that we provide certain information in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We would, however, appreciate the chance to address any concerns first so that we can try to resolve the matter promptly and fairly.

10. Marketing Preferences

If we send optional marketing messages, we will do so only where permitted by law. You can opt out of marketing at any time. If you do, we will stop sending such communications, though we may still contact you for service-related or legal reasons.

11. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is necessary in a family or household service context and provided by an adult with authority to do so. If we become aware that we have collected data from a child without appropriate permission, we will take steps to delete it where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our internal practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how we handle personal data.

13. Summary of Our Commitment

We respect your privacy and aim to handle personal information responsibly, transparently, and securely. Our approach is based on data minimisation, lawful processing, fair retention, and the careful use of trusted processors. Islington Carpetcleaning is committed to protecting the rights of all customers in area and to using personal data only when necessary for clear and legitimate purposes.

This policy is intended to provide clear information about how we process personal data and the safeguards we apply.