Chiswick Carpet Cleaners Privacy Policy
This Privacy Policy explains how Chiswick Carpet Cleaners collects, uses, stores, and protects personal data of its customers within the Chiswick Carpet Cleaners service area. It also describes your rights under the UK General Data Protection Regulation and related data protection laws. By using our cleaning services, contacting us, or visiting our website, you acknowledge that you have read and understood this Privacy Policy.
Scope and Data Controller
This Privacy Policy applies to all Chiswick Carpet Cleaners customers and prospective customers in our service area who use or enquire about our services, including domestic and commercial carpet and upholstery cleaning. Chiswick Carpet Cleaners is the data controller for the personal data described in this Privacy Policy, which means we determine the purposes and means of processing your personal data.
Personal Data We Collect
We collect only the personal data that is necessary to provide and manage our services. The types of personal data we may collect include:
Identity data such as name, title or preferred form of address.
Contact data such as billing address, service address, and any other address or location details you supply for the performance of the service.
Booking and service data such as details of the services you request or purchase, dates and times of appointments, property access instructions you choose to provide, and any relevant notes about the condition or requirements of the premises.
Payment and transaction data such as information relating to payments made for our services and records of invoices and receipts. Card details, where used, may be processed directly by a payment service provider and not stored by us.
Communication data such as information contained in emails, contact forms, phone call notes, or other communications you send to us, including feedback, complaints, and enquiries.
Technical and usage data such as information relating to your use of our website or online booking forms, including IP address, browser type, and general usage information, where this is collected through cookies or similar technologies.
How We Collect Your Personal Data
We collect personal data from you directly when you contact us to request a quote, make a booking, or ask a question. This may be by phone, through a web form, or in person. We may also collect data when you interact with our website or respond to our marketing communications, where this is permitted.
In some cases we may obtain personal data from third parties, for example where a managing agent or landlord provides your details so we can arrange a service at your property, or where a payment provider confirms that a transaction has been completed.
Purposes and Lawful Bases for Processing
We process your personal data only where there is a lawful basis under the UK GDPR. The main purposes and corresponding lawful bases are:
To provide quotes, accept bookings, and perform cleaning services. We process identity, contact, booking, and service data because it is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
To manage payments, invoicing, and debt recovery. We process payment and transaction data because it is necessary for the performance of our contract with you and for our legitimate interests in managing our business and recovering sums due.
To respond to enquiries, complaints, and requests. We process communication data because it is necessary for the performance of a contract with you or for our legitimate interests in providing customer service and resolving issues.
To manage our relationship with you, including sending service-related updates or important notices. This processing is based on our legitimate interests in keeping our records up to date and providing information relevant to the services we deliver.
To send marketing communications about our services where you have given your consent or where we have a legitimate interest, such as contacting existing customers about similar services. You can opt out of marketing at any time.
To maintain and improve our website, services, and business operations, including using technical data to troubleshoot, test, and enhance our systems. This is based on our legitimate interests in running and improving our business and services.
To comply with legal and regulatory obligations, such as accounting, tax, and record-keeping requirements. This processing is necessary for compliance with a legal obligation.
Data Retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Customer and booking records are generally retained for the duration of our relationship with you and for a reasonable period afterwards, typically up to six years, to comply with tax and contractual limitation periods.
Financial and invoicing records are retained for the period required by law, which may be up to six years or longer where required by tax regulations.
Marketing data is kept until you withdraw your consent or object to receiving marketing communications, or until it is no longer needed for the purpose for which it was collected.
In determining appropriate retention periods, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and applicable legal requirements.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with trusted third parties who act as data processors and provide services to us, including:
Payment service providers who process card and other electronic payments.
IT and hosting providers who support our website, booking systems, and data storage.
Professional advisers such as accountants or legal advisers, where necessary for legitimate business and legal purposes.
Third parties to whom we may choose to sell, transfer, or merge parts of our business or assets. In such cases, your personal data may be transferred to the new owner, who will be bound by data protection obligations at least as protective as those set out in this Privacy Policy.
Where we use processors, we ensure that appropriate contractual safeguards are in place requiring them to process your personal data only on our instructions, to keep it secure, and to comply with data protection law.
International Transfers
Where personal data is transferred outside the United Kingdom or European Economic Area, we will ensure that an adequate level of protection is in place, for example by using standard contractual clauses or by transferring to countries recognised as providing an adequate level of data protection.
Data Security
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Measures may include access controls, secure storage, staff training, and regular review of our data handling procedures.
Your Data Protection Rights
You have the following rights in relation to your personal data, subject to certain conditions and legal limitations:
Right of access. You have the right to obtain confirmation as to whether we are processing your personal data and to request a copy of the data we hold about you.
Right to rectification. You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to erasure. You may request that we delete your personal data where there is no good reason for us to continue processing it, for example where it is no longer necessary for the purposes for which it was collected, or where you have successfully exercised your right to object.
Right to restriction of processing. You may request that we restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy or the reasons for processing it.
Right to object. You have the right to object to processing of your personal data where we are relying on legitimate interests as the lawful basis, including for direct marketing purposes.
Right to data portability. In some cases you may request that we provide your personal data in a structured, commonly used, machine-readable format and transfer it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about this Privacy Policy, you can contact us using the details provided on our website or through the usual communication channels you use to reach Chiswick Carpet Cleaners.
You also have the right to lodge a complaint with the Information Commissioner's Office or any other competent supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can address your concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updated version will be made available through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
