Enfield Carpet Cleaners Privacy Policy
This Privacy Policy explains how Enfield Carpet Cleaners collects, uses, stores and protects personal data relating to customers and prospective customers in our service area. It also sets out your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Enfield Carpet Cleaners customers and prospective customers located within our service area, including anyone who contacts us to request information, quotes, or services for carpet and upholstery cleaning or related work. It applies to information collected offline and online, including by phone, in person, on our website, or via other communication methods where we interact directly with you.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us. The categories of personal data we may collect include:
Identification and contact details such as name, postal address, service address, billing address, and any other address you provide for the performance of our services.
Communication details such as the content of enquiries, quotes, bookings, and any correspondence you send us, including details of your requirements, preferences, or feedback.
Service-related information such as details about the property or premises where services are provided, types of carpets, rugs or upholstery, access notes, and dates and times of scheduled work.
Payment information such as payment status and basic transaction records. We do not store full card details when payments are processed through secure third-party payment providers.
Technical and usage data such as basic information generated through your interaction with our website or online booking tools, which may include IP address, device information, and basic usage statistics where applicable.
Lawful Basis for Processing Your Data
We process your personal data only where we have a lawful basis under the UK GDPR. Depending on the circumstances, we rely on one or more of the following legal bases:
Contract: We process your personal data where it is necessary to enter into and perform a contract with you, for example to provide carpet cleaning services, manage bookings, issue invoices, and communicate with you about your service.
Legal obligation: We may process certain data to comply with legal or regulatory obligations, such as maintaining financial records for tax or accounting purposes.
Legitimate interests: We may process your data where it is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms. Legitimate interests include managing and improving our services, responding to enquiries, handling customer service issues, and protecting our business from fraud and misuse.
Consent: In limited cases, we may rely on your consent, for example for certain types of direct marketing. Where we rely on consent, you may withdraw it at any time, and we will stop processing your data for that purpose.
How We Use Your Personal Data
We may use the personal data we collect for the following purposes:
To respond to enquiries, provide quotes, confirm availability, and discuss your cleaning requirements.
To set up, manage and complete bookings, including attendance at your premises, performance of services, and follow-up communication.
To issue invoices, process payments through our chosen payment providers, and maintain necessary financial and accounting records.
To manage customer relationships, handle complaints, resolve disputes, and provide aftercare support.
To improve our services, business processes and customer experience, including the training of staff and reviewing feedback.
To protect our business, staff and customers, including detecting and preventing fraud or misuse of our services.
To send service-related messages, such as reminders, confirmations, and essential notices about changes to our terms or policies.
Where permitted, to provide you with information about related services or offers from Enfield Carpet Cleaners that may be of interest to you, subject to your communication preferences.
Data Sharing and Processors
We do not sell your personal data. However, we may share your personal data with carefully selected third parties only when necessary and where appropriate protections are in place. These may include:
Service providers and data processors who support our business operations, such as payment processors, accounting service providers, IT support, hosting providers and customer management tools. These parties are permitted to process your data only in accordance with our instructions and must provide appropriate data protection safeguards.
Professional advisers such as accountants, legal advisers or insurers where reasonably necessary for the management and protection of our business.
Authorities and regulators where we are legally required or permitted to do so, or to protect our legal rights, respond to claims, or assist with fraud prevention.
Where data processors are used, we ensure that appropriate contracts and safeguards are in place in accordance with GDPR requirements, including obligations regarding confidentiality, security and data protection.
International Data Transfers
If any of our service providers or systems transfer or store your personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your data, such as using destinations that are subject to an adequacy decision or entering into contracts with standard data protection clauses approved for use under the UK GDPR.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements.
In general, service and transaction-related records, including basic contact, service and billing information, are retained for a period consistent with legal and tax obligations. After the applicable retention periods expire, we will securely delete or anonymise your data so that it can no longer be associated with you.
Where we rely on your consent for specific types of communication, we will keep the related data until you withdraw your consent or until we determine it is no longer needed for that purpose.
How We Protect Your Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include restricted access to data, secure storage, appropriate authentication and access controls, staff training, and regular review of our data handling practices.
While we take reasonable steps to protect your personal data, no method of transmission or storage can be guaranteed as completely secure. You are also responsible for taking reasonable precautions in your own communications with us.
Your Data Protection Rights
Under the UK GDPR, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, you may have the following rights:
Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how it is used.
Right to rectification: You can ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure: You can request that we delete your personal data where there is no longer a lawful basis for us to keep it, or where you have successfully exercised your right to object.
Right to restriction of processing: You can ask us to restrict the processing of your data in certain circumstances, for example while we are verifying its accuracy or assessing an objection.
Right to data portability: In some cases, you can request that we provide your personal data to you, or to another controller, in a structured, commonly used and machine-readable format.
Right to object: You can object to the processing of your personal data where we are relying on legitimate interests as our lawful basis, including any direct marketing.
Rights related to consent: Where we rely on consent, you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
If you wish to exercise any of these rights, please contact us using the contact details available on our main customer communications or website. We may need to verify your identity before responding to your request.
Complaints and Supervisory Authority
If you have concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the UK data protection supervisory authority if you believe your rights have been infringed under data protection law.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or data protection practices. Any changes will take effect when the updated version is made available through our usual customer information channels. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data.
