Privacy Policy - Haringey Carpet Cleaners

This Privacy Policy explains how Haringey Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Haringey Carpet Cleaners customers in the area, including anyone who makes an enquiry, requests a quote, books a service, receives a visit, or otherwise interacts with us in connection with carpet cleaning, upholstery cleaning, rug cleaning, stain treatment, or related services.

We are committed to handling personal data in a lawful, fair, and transparent way under the UK GDPR and the Data Protection Act 2018. This policy sets out what information we may collect, the purposes for which we use it, the legal grounds we rely on, how long we keep it, who may process it on our behalf, and the rights available to you.

1. Who We Are

Haringey Carpet Cleaners provides professional cleaning services to customers in Haringey and the surrounding area. In the context of data protection law, we are the data controller for the personal information we collect and decide how to use.

We aim to ensure that our processing is necessary, proportionate, and limited to what is required for delivering our services, managing customer relationships, meeting legal obligations, and improving our operations.

2. Personal Data We Collect

We collect only the personal data that is relevant to our services and business operations. The information we may collect includes:

Identity details, such as your name.
Contact details, such as your address, email address, and telephone number.
Service information, such as the type of cleaning requested, property details, preferred dates, special instructions, and service history.
Payment and billing information, where needed to arrange or record payment.
Communication records, including messages, call notes, complaints, and feedback.
Technical data, such as basic website or device information if you interact with our digital systems, where applicable.
Access and safety information, such as entry instructions or site-specific conditions needed to carry out work safely.

We do not intentionally collect special category data unless it is voluntarily provided by you and is necessary for a specific request, for example accessibility-related information that helps us provide a safe service. Where such data is processed, we will do so only where lawful and appropriate safeguards are in place.

3. How We Use Your Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to schedule, deliver, and manage cleaning services;
to communicate about appointments, changes, and service updates;
to process payments and maintain financial records;
to handle complaints, disputes, and customer support requests;
to maintain internal records and service history;
to improve service quality, training, and business processes;
to comply with legal, tax, accounting, and regulatory obligations;
to prevent fraud, misuse, or unlawful activity;
to exercise or defend legal claims where necessary.

We will not use your data for purposes that are incompatible with the reasons it was collected unless we have a valid lawful basis and, where required, your consent.

4. Lawful Basis for Processing

We only process personal data when we have a lawful basis under the UK GDPR. Depending on the context, we rely on one or more of the following:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes handling your booking, confirming service details, carrying out the cleaning service, and managing payment arrangements.

Legal Obligation

We process certain information to comply with legal requirements, such as tax, accounting, record-keeping, insurance, and safeguarding obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This may include customer administration, service improvement, business security, complaint handling, and limited marketing to existing customers where permitted by law. We always assess whether the use is proportionate and relevant.

Consent

In limited situations, we may rely on your consent, for example where specific optional communications or non-essential processing require it. If we rely on consent, you may withdraw it at any time.

5. Data Sharing and Processors

We do not sell your personal data. We may share information only where necessary and lawful. In some cases, we use trusted third parties to process data on our behalf. These service providers act as processors and may only use the data according to our instructions and applicable law.

Examples of processors or service providers may include:

Payment providers that handle card or electronic payments;
Booking and scheduling systems used to manage appointments;
Accounting and invoicing services used for financial administration;
IT and cloud storage providers used to store or secure business records;
Communication service providers that help deliver emails, text messages, or administrative correspondence;
Professional advisers, such as accountants, insurers, or legal advisers, where necessary;
Public authorities or regulators when disclosure is required by law.

Where a processor is used, we take reasonable steps to ensure there are appropriate data protection agreements, security measures, and confidentiality obligations in place.

6. International Transfers

Where data is transferred outside the UK, we will only do so where appropriate safeguards are in place and the transfer is lawful. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent protective measures. We aim to ensure your data remains protected to a standard consistent with UK data protection law.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including to satisfy legal, accounting, insurance, and reporting requirements. Retention periods may vary depending on the type of data and the purpose of processing.

Customer and service records are usually retained for the period needed to manage the relationship and resolve any follow-up matters.
Financial records are retained for the period required by tax and accounting law.
Complaint or dispute records may be retained longer where needed to defend legal claims or address ongoing issues.
Marketing records are retained until you opt out or until they are no longer needed.

When personal data is no longer needed, we will securely delete it or anonymise it so that it can no longer identify you. Storage is limited to what is necessary and we review records periodically to ensure they are not kept longer than needed.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from accidental loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure systems, staff confidentiality obligations, and careful selection of service providers.

While no system can be guaranteed to be completely secure, we work to reduce risk and respond appropriately if a data incident occurs.

9. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit processing in certain situations.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests or to direct marketing.
Right to withdraw consent – where processing is based on consent.

Some rights may be limited by legal requirements or the nature of the request. If you exercise a right, we will respond in line with applicable law and within the required timeframe.

10. Children’s Data

Our services are intended for adults arranging cleaning services for homes or premises. We do not knowingly collect personal data from children, and if we become aware that we have done so without appropriate justification, we will take steps to delete it.

11. Marketing

We may send limited service-related or promotional communications where permitted by law and, where necessary, with your consent. You can opt out of marketing communications at any time. We will always respect your choice and make sure any objection is recorded.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage you to review this policy periodically so you remain informed about how your data is used.

13. Complaints and Further Information

If you have concerns about how your personal data has been handled, you have the right to raise the issue with us and seek clarification or resolution. You also have the right to complain to the UK Information Commissioner’s Office if you believe your data protection rights have been infringed.

In summary: Haringey Carpet Cleaners processes personal data responsibly and only where there is a lawful reason to do so. We collect the minimum information needed to deliver services, keep records only as long as necessary, use processors carefully, and respect your rights under data protection law. This policy applies to all Haringey Carpet Cleaners customers in the area.