Privacy Policy - Kilburn Carpet Cleaners

Last updated: [Insert Date]

This Privacy Policy explains how Kilburn Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Kilburn Carpet Cleaners customers in the area, including anyone who requests, books, receives, or enquires about our carpet cleaning and related cleaning services.

We are committed to handling personal information in a way that is lawful, fair, transparent, and secure, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Kilburn Carpet Cleaners is the data controller for the personal information described in this policy. This means we determine why and how your personal data is processed when you use our services or interact with us.

This policy applies to personal data we receive from customers, potential customers, suppliers, and other individuals who contact us in relation to our services. It does not apply to third-party websites or services we do not control.

2. Information We Collect

We may collect and process the following categories of personal data:

Identity information: name, title, and any information you provide when making an enquiry or booking.
Contact information: address, email address, telephone number, and service location details.
Service information: details of the cleaning service requested, property access notes, special instructions, preferred appointment times, and service history.
Payment information: billing details and payment status. We do not normally store full payment card details if payment is processed by a secure third-party provider.
Communication records: emails, messages, call notes, complaint details, and feedback.
Technical information: limited website or device information if you interact with digital services, including IP address, browser type, or cookie data where applicable.
Verification and safety information: information necessary to confirm appointments, manage access, prevent fraud, or protect our staff and customers.

We only collect the information that is necessary for the purposes described in this policy. We do not intentionally collect special category data unless you choose to provide it and it is relevant to your request.

3. How We Use Your Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to arrange and deliver cleaning services;
to confirm appointments and manage scheduling;
to process payments and maintain accounts;
to handle complaints, disputes, and service follow-up;
to maintain internal records and improve service quality;
to comply with legal, tax, accounting, and insurance obligations;
to prevent fraud, misuse, or security incidents;
to communicate important service updates or policy changes.

We may also use aggregated or anonymised information for reporting and business analysis, provided it no longer identifies you.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. We rely on one or more of the following lawful bases:

Contract

We process your information where it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes arranging services, confirming bookings, and completing cleaning work.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided your interests and rights do not override ours. This may include service management, quality assurance, customer support, record keeping, and fraud prevention. When relying on this basis, we assess whether the processing is proportionate and necessary.

Legal Obligation

We may process and retain data where needed to meet legal requirements, such as accounting, taxation, insurance, health and safety, and regulatory obligations.

Consent

In limited circumstances, we may rely on your consent, for example where it is required for certain marketing communications or where you voluntarily provide optional information. You have the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Information

We may share personal data with trusted third parties where necessary to operate our business and provide services. These may include:

Service processors: companies that provide booking, payment, communication, IT, cloud storage, or document management services.
Professional advisers: accountants, legal advisers, insurers, and auditors.
Regulatory or legal authorities: where disclosure is required by law or necessary to protect rights, property, or safety.
Operational partners: subcontractors or associates who help deliver services on our behalf, subject to confidentiality and data protection obligations.

We do not sell your personal data. Any third party acting for us must process personal data only according to our instructions and must use appropriate security measures.

6. Processors and Data Security

Where we use processors, they may handle data such as names, addresses, booking details, and payment references solely to support our services. We select processors carefully and require them to safeguard information, limit access, and delete or return data when no longer needed.

We implement appropriate technical and organisational security measures designed to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff training, password protection, and regular review of data handling practices.

However, no method of transmission or storage is completely secure. While we work hard to protect your data, we cannot guarantee absolute security.

7. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods may vary depending on the type of information and why it is held.

Customer and booking records: kept for the duration of the customer relationship and for a reasonable period afterwards to manage follow-up queries, disputes, or warranty-type issues.
Financial and tax records: retained for the period required by law.
Correspondence and complaint records: kept as long as necessary to resolve issues and maintain a service history.
Marketing preferences: retained until you object or withdraw consent, where applicable.

When data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices.

8. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances:

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you can request deletion of your data in certain circumstances.
Right to restriction: you can ask us to restrict how we use your information in certain situations.
Right to data portability: you can request that data you provided to us be supplied in a structured, commonly used format where applicable.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
Right to complain: you may raise concerns with the relevant data protection authority if you believe your rights have been infringed.

We will respond to valid requests within the timeframe required by law and may need to verify your identity before processing the request.

9. International Transfers

If any of our processors store or access data outside the UK, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent legal protections designed to keep your personal data secure and protected.

10. Children’s Data

Our services are intended for adults, and we do not knowingly collect personal data from children for marketing purposes. If we become aware that we have collected data from a child without appropriate permission, we will take steps to delete it where required.

11. Cookies and Similar Technologies

If we use online services that deploy cookies or similar technologies, these may be used for essential website functionality, performance analysis, and user experience improvement. Where consent is required, we will request it before placing non-essential cookies. You can manage cookie preferences through your browser or device settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our internal practices. Any updates will take effect when published, unless otherwise stated. We encourage customers to review this policy periodically.

13. Summary of Key Points

We collect only the personal data needed to provide and manage our services.
We process data under lawful bases such as contract, legitimate interests, consent, and legal obligation.
We share information only with trusted processors or where required by law.
We retain data for only as long as necessary and in line with legal requirements.
You have rights over your personal data, including access, correction, deletion, and objection.

This Privacy Policy is designed to ensure transparency and accountability in how we handle personal information. Kilburn Carpet Cleaners is committed to respecting your privacy and using your data responsibly.