Tooting Carpet Cleaners Privacy Policy
This Privacy Policy explains how Tooting Carpet Cleaners collects, uses, stores, and protects your personal data when you use our carpet and upholstery cleaning services. It applies to all Tooting Carpet Cleaners customers and prospective customers within our service area.
We are committed to complying with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. We encourage you to read this Privacy Policy carefully to understand how and why we handle your information.
Who We Are
Tooting Carpet Cleaners is a carpet and upholstery cleaning service operating in the local area. For the purposes of data protection law, we act as the data controller in relation to the personal data described in this Privacy Policy. This means we decide how and why your personal data is used.
Types of Personal Data We Collect
We only collect information that is relevant and necessary for providing our services and running our business. The types of personal data we may collect include:
Identification and contact details: name, address, service property address, and communication preferences.
Contact channels: information you provide for us to communicate with you, such as messaging handles or other contact details, excluding any details we are not lawfully permitted to store.
Booking and service information: details of your booking, dates and times of appointments, service history, property access instructions where provided by you, and any special requests related to the service.
Payment-related information: confirmation that payment was made, method of payment, the amount paid, and basic transaction details. We do not store full card details when payments are processed through third-party payment processors.
Communications: information you choose to provide when you contact us, such as enquiries, feedback, or complaints.
Technical and usage information: if you interact with our online content, we may collect limited technical information such as your IP address, device type, and general browsing behaviour, where this is necessary for security, analytics, or to deliver online features you request.
How We Collect Your Data
We collect personal data in the following ways:
Directly from you when you make an enquiry, request a quote, confirm a booking, contact us for support, or provide feedback.
Through our website or online booking forms if you complete any fields or submit contact details.
From third-party platforms or partners where you choose to engage our services through their systems. In such cases, they may share with us only the information necessary to manage your booking and provide the service.
Purposes and Lawful Bases for Processing
We process your personal data only when we have a lawful basis to do so. Depending on the context, we rely on one or more of the following lawful bases:
Contractual necessity: We process your data where it is necessary to enter into or perform a contract with you, such as to provide carpet cleaning services, manage bookings, confirm appointments, issue invoices, and handle payments.
Legitimate interests: We may process your data where it is necessary for our legitimate business interests and where these are not overridden by your rights. This may include improving our services, managing our customer relationships, ensuring security and fraud prevention, handling enquiries, and maintaining records of past services for reference.
Legal obligation: We may process your data where we are required to do so to comply with applicable laws, including tax, accounting, and reporting obligations.
Consent: In some situations, we will ask for your clear and specific consent before processing your data, such as when you choose to receive marketing communications. You can withdraw your consent at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage our cleaning services, including bookings, scheduling, and delivering the work at your property.
To communicate with you about your enquiries, quotes, appointments, changes to services, and follow-up after a visit.
To receive and process payments, issue receipts, and manage invoicing and accounting.
To improve our services, understand customer preferences, and maintain internal records of previous work carried out.
To manage complaints, disputes, or claims and to establish, exercise, or defend legal rights.
To comply with our legal and regulatory obligations.
To send you marketing messages about our services, promotions, or updates where you have provided consent or where we are otherwise permitted by law. You may opt out of such messages at any time.
Data Sharing and Processors
We may share your personal data with trusted third parties that act as data processors on our behalf. These processors only use your data according to our instructions and for the purposes described in this Privacy Policy.
Examples of third-party processors include:
Payment processing providers who handle card or electronic payments securely.
Accountants or bookkeeping services who assist with our financial records.
IT service providers who support our systems, data storage, and security.
Customer management or scheduling tools that help us organise bookings and communications.
We require all processors to implement appropriate technical and organisational measures to protect your data and to comply with applicable data protection laws. We do not sell your personal data to third parties.
International Data Transfers
If any of our service providers are located outside the United Kingdom or the European Economic Area, we will take appropriate steps to ensure that your personal data remains protected. This may include using standard contractual clauses or relying on an adequacy decision by the relevant authorities.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, accounting, or reporting requirements.
The retention period will depend on factors such as the nature of the data, our contractual relationship with you, and our legal obligations. In general:
Basic customer and service records may be retained for a number of years after the last service to respond to queries, maintain service history, and comply with tax and accounting requirements.
Marketing data will typically be retained until you opt out or withdraw consent, or until we decide to delete it as part of our regular reviews.
We regularly review the personal data we hold and securely delete or anonymise data that is no longer required.
Security of Your Personal Data
We take appropriate technical and organisational measures to safeguard your personal data against unauthorised access, loss, destruction, or alteration. These measures include limiting access to personal data to personnel and processors who need it for legitimate business purposes and ensuring that they are subject to confidentiality obligations.
While we take reasonable steps to protect your information, no transmission of data over the internet or any storage system can be guaranteed to be completely secure.
Your Data Protection Rights
Under data protection law, you have certain rights regarding your personal data. Subject to certain conditions and exemptions, these rights include:
Right of access: You have the right to request confirmation that we are processing your personal data and to obtain a copy of the data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data.
Right to erasure: You may request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis.
Right to restriction: You can ask us to restrict the processing of your personal data in certain situations, such as while we are verifying its accuracy or assessing an objection you have raised.
Right to object: You have the right to object to processing that is based on our legitimate interests, including profiling, and the right to object at any time to the processing of your personal data for direct marketing.
Right to data portability: Where processing is based on consent or the performance of a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request that it be transmitted to another controller.
Right to withdraw consent: Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.
How to Exercise Your Rights
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the contact details provided in our regular communications or on our main customer-facing materials.
We will respond to your request as soon as reasonably possible and within the time limits set out in applicable data protection laws. We may need to verify your identity before fulfilling certain requests to protect your privacy.
Complaints
If you have concerns about how we use your personal data, we encourage you to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any updated version will be made available through our usual communication channels, and the revised policy will apply from the date it is issued.
We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.
