Privacy Policy - Holland Park Carpet Cleaners

This Privacy Policy applies to all Holland Park Carpet Cleaners customers in the area. It explains how we collect, use, store, share, and protect personal data when we provide carpet cleaning and related services. We are committed to handling personal information in a lawful, fair, and transparent manner, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Holland Park Carpet Cleaners is the data controller for the personal data described in this policy. This means we decide how and why your personal data is processed when you use our services, make an enquiry, request a quote, or otherwise interact with us.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing our relationship with you, and meeting legal obligations. Depending on how you interact with us, we may collect the following categories of information:

Identity data: your name and, where relevant, company name.
Contact data: address, email address, telephone number, and service location details.
Service and booking data: details of the cleaning service requested, appointment times, property access notes, and preferences.
Billing and transaction data: invoicing details, payment status, and records of payments made.
Communication data: messages, emails, call notes, and feedback you provide.
Technical data: basic information collected through our systems such as device type, browser details, and logs, where applicable.
Special category data: we do not intentionally collect special category personal data unless you choose to provide it and it is strictly necessary for a specific service requirement or legal reason.

We do not ask for more information than is needed. If you provide information about another person, you should make sure that you are permitted to share it with us.

3. How We Use Your Data

We use your personal data for clear and limited purposes, including:

responding to enquiries and providing quotations;
booking, delivering, and managing cleaning services;
processing payments and issuing invoices;
keeping service records and handling customer support requests;
sending service-related updates;
maintaining accurate business records;
meeting legal, tax, accounting, and regulatory obligations;
preventing fraud, misuse, or unlawful activity;
improving our services and internal operations.

We will not use your personal data for purposes that are incompatible with the reasons it was collected, unless we have a lawful basis to do so.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing your personal data. Depending on the situation, we rely on one or more of the following:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes arranging services, confirming bookings, and completing carpet cleaning work.

Legal obligation

We may process data where it is required to comply with legal duties, such as record-keeping for tax and accounting purposes, or responding to lawful requests from authorities.

Legitimate interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Examples include managing bookings, improving our service quality, handling customer queries, and maintaining security.

Consent

In limited situations, we may rely on your consent, for example where it is appropriate for optional communications or certain types of processing. Where consent is used, you may withdraw it at any time.

We do not rely on consent where another lawful basis is more appropriate.

5. How We Share Personal Data

We may share personal data with trusted third parties who help us run our business. These parties act as processors or independent controllers, depending on the circumstances. We only share the data needed for the specific purpose and require appropriate safeguards.

Typical processors and service providers may include:

Payment providers for processing card or electronic payments.
Booking and administration systems used to manage appointments and customer records.
IT and cloud service providers that host secure data storage and business software.
Accountants and professional advisers for financial, tax, or compliance support.
Subcontractors or service partners where needed to fulfil a cleaning appointment or related service.
Legal, regulatory, or law enforcement bodies where disclosure is required by law.

We require processors to process personal data only on our instructions, keep it secure, and not use it for their own purposes. Where a third party acts as an independent controller, their own privacy policy will apply.

6. International Transfers

If any of our service providers process personal data outside the UK, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms approved under data protection law.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and to satisfy legal, accounting, and operational requirements. Retention periods vary depending on the type of information and the context in which it is used.

In general:

booking and service records are retained for the period needed to manage the customer relationship and resolve disputes;
billing and accounting records are retained for the period required by tax and financial law;
communication records are kept for a reasonable period to handle queries, complaints, and service history;
data that is no longer needed is securely deleted, anonymised, or archived where appropriate.

When personal data is no longer required, we take steps to dispose of it securely and responsibly.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and restricted use of data systems.

Although no system can be guaranteed to be completely secure, we work to reduce risks and review our practices periodically. If a data breach occurs and is likely to result in a risk to your rights and freedoms, we will handle it in accordance with applicable law.

9. Your Rights

Under data protection law, you have rights in relation to your personal data. Subject to legal limits, you may have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete information.
Erase your personal data in certain circumstances.
Restrict how we process your data in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability for data you have provided to us, where applicable.
Withdraw consent at any time where processing is based on consent.

You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed. We encourage you to raise concerns with us first so we can try to resolve them promptly.

10. Automated Decision-Making

We do not make decisions about customers based solely on automated processing that produce legal or similarly significant effects. If this changes in the future, we will update this policy and provide the necessary information required by law.

11. Cookies and Similar Technologies

If we use cookies or similar technologies in any digital systems connected with our services, they will be used only where necessary, helpful for performance, or supported by a lawful basis. Any such use will be explained separately where required.

12. Children

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is necessary for a legitimate service request and provided by an authorised adult. If we become aware that we have collected data without appropriate authority, we will take reasonable steps to delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We recommend reviewing this policy periodically to stay informed.

14. Summary of Our Commitment

We value privacy and take our responsibilities seriously. Holland Park Carpet Cleaners will only collect personal data that is relevant to our services, use it for clear and lawful purposes, keep it secure, and retain it only for as long as necessary. We will also respect your rights and handle all requests in accordance with applicable data protection law.

This policy applies to all Holland Park Carpet Cleaners customers in the area.