Privacy Policy - Enfield Town Carpet Cleaners

This Privacy Policy explains how Enfield Town Carpet Cleaners collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all Enfield Town Carpet Cleaners customers in the area, including prospective customers, current customers, and anyone who contacts us to request a quotation, booking, or support. We are committed to handling personal data fairly, lawfully, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Enfield Town Carpet Cleaners acts as the data controller for the personal data described in this policy. This means we determine why and how your personal information is used in connection with our carpet cleaning services, customer communications, and related business activities.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity details such as your name and title.
Contact details such as your phone number, email address, and service address.
Booking information including appointment times, service preferences, and instructions.
Payment information such as transaction records, invoices, and payment confirmations. We do not keep more payment information than is necessary for accounting and reconciliation purposes.
Communication records including emails, messages, and notes from calls or enquiries.
Service history including previous cleaning visits, requested treatments, and customer feedback.
Technical data where relevant, such as basic website or device information if you interact with our online systems.

We generally do not seek to collect special category data. However, if you volunteer information that is relevant to the safe or effective delivery of a cleaning service, we may process it only where necessary and with appropriate safeguards.

3. How We Collect Your Data

We collect personal data directly from you when you:

request a quote or make a booking;
communicate with us by phone, email, or message;
provide instructions or feedback about a service;
make or receive payments;
ask about our services, availability, or complaints handling.

We may also receive limited information from third parties where this is necessary to provide our services, for example from payment processors, booking platforms, or agents acting on your behalf.

4. Why We Use Your Personal Data

We use your personal data only when we have a valid reason to do so. Typical purposes include:

providing carpet cleaning and related services;
managing bookings, schedules, and service delivery;
processing payments and maintaining invoices;
responding to enquiries, complaints, and service requests;
maintaining accurate business and customer records;
meeting legal, tax, and accounting obligations;
improving the quality and efficiency of our services;
protecting against fraud, misuse, or unlawful activity.

We will not use your personal data for purposes that are incompatible with the reasons for which it was collected unless we have a lawful basis to do so and you have been informed where required.

5. Lawful Basis for Processing

Under data protection law, we must identify a lawful basis for each use of personal data. Depending on the situation, Enfield Town Carpet Cleaners may rely on one or more of the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes handling bookings, carrying out carpet cleaning services, issuing invoices, and communicating service-related details.

Legal Obligation

We may process data to comply with legal obligations, such as tax, accounting, insurance, and record-keeping requirements.

Legitimate Interests

We may use personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include improving our services, managing business administration, keeping internal records, and preventing fraud or misuse. When relying on legitimate interests, we consider the impact on your privacy and use appropriate safeguards.

Consent

In limited situations, we may rely on your consent, for example where it is needed for certain optional communications or where the law requires it. Where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

6. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting requirements. Retention periods depend on the type of information and the reason for processing. In general:

booking and service records are kept for a period necessary to manage customer relationships and service history;
financial and invoicing records are retained for the period required by law;
correspondence and complaint records are retained for as long as needed to resolve issues and maintain business records;
information no longer required is securely deleted, anonymised, or archived where appropriate.

We review retention regularly to ensure that personal data is not kept longer than necessary.

7. Who We Share Data With

We may share personal data with trusted third parties that help us operate our business. These third parties act as processors or, in some cases, independent controllers depending on the service they provide. We only share the minimum information necessary and require appropriate safeguards to protect your data.

Payment processors to handle card or electronic payments.
Booking and scheduling providers to organise appointments and service delivery.
Accounting and bookkeeping providers to manage records and tax compliance.
IT and cloud service providers that store or support secure data systems.
Professional advisers such as accountants or legal advisers where necessary.
Public authorities when required by law or where disclosure is necessary for legal claims or compliance.

We do not sell personal data. Where data is shared, it is only for legitimate business, legal, or service-related reasons.

8. Processors and Data Protection Safeguards

When we use processors, we ensure they are bound by written agreements that require them to process personal data only on our instructions, keep it secure, and assist us in meeting our data protection obligations. We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure.

These measures may include access controls, secure storage, confidentiality obligations, and limiting access to personal data to authorised personnel only. While no system is completely risk-free, we take data security seriously and review our practices regularly.

9. International Transfers

If any personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place in accordance with applicable data protection laws. This may include the use of adequacy regulations, approved contractual clauses, or other lawful transfer mechanisms.

10. Your Rights

Under UK data protection law, you have several rights regarding your personal data. These rights may be limited in some circumstances, but we will always consider and respond to requests in accordance with the law. Your rights include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to ask us to delete your data where there is no good reason for us to continue processing it.
Right to restrict processing – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we may need to verify your identity before responding. We aim to handle requests promptly and within the time limits required by law.

11. Marketing Communications

We only send marketing communications where permitted by law. If you have agreed to receive such messages, you may opt out at any time. We respect your preferences and will stop marketing communications as soon as reasonably possible after receiving your request.

12. Children’s Data

Our services are directed to adult customers and business contacts. We do not knowingly collect personal data from children unless it is necessary in the context of providing a service and only with appropriate authority or consent where required by law.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational needs. The most current version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is used.

14. Summary of Our Commitment

Enfield Town Carpet Cleaners is committed to handling your personal information with care, fairness, and transparency. We only collect data that is necessary, use it for clear and lawful purposes, keep it only for as long as needed, and share it only with trusted processors or where the law requires. We respect your rights and aim to give you a professional service that protects your privacy at every stage.

Privacy matters to us, and we work to ensure that your data is treated in a way that is lawful, secure, and responsible throughout your experience with Enfield Town Carpet Cleaners.