Privacy Policy - Woodlands Carpet Cleaners

Woodlands Carpet Cleaners is committed to protecting the privacy and personal data of all customers in the area where our services are provided. This Privacy Policy explains how we collect, use, store, share, and protect personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Woodlands Carpet Cleaners customers in the area, including prospective customers, existing customers, and individuals who contact us about our services.

1. Information We Collect

We collect and process only the personal data that is necessary to provide our services, manage our business, and meet our legal obligations. The types of information we may collect include:

Identity information such as your name.
Contact details such as your telephone number and email address.
Address information for carrying out carpet cleaning services at the correct location.
Service details including the type of cleaning requested, appointment preferences, and notes relevant to the service.
Payment information where needed to process payments and maintain financial records.
Communication records such as messages, enquiry history, and service-related correspondence.
Technical information if you interact with us online, such as basic device or browser information collected through our systems.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it yourself, or unless we are required to do so for a lawful reason. We ask that you do not share sensitive personal information unless it is relevant to the service.

2. How We Use Your Personal Data

We use personal data for legitimate business purposes connected to our carpet cleaning services. These may include:

Responding to enquiries and providing quotations.
Booking, confirming, and delivering cleaning services.
Managing customer records and service history.
Processing payments and issuing invoices or receipts.
Handling complaints, queries, or follow-up requests.
Maintaining internal records for administration and business management.
Meeting legal, tax, accounting, and regulatory obligations.
Protecting our business against fraud, misuse, or unlawful activity.

We will only use your information for the purposes explained in this policy or for compatible purposes where permitted by law.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process your personal data. Depending on the circumstances, Woodlands Carpet Cleaners may rely on one or more of the following lawful bases:

Contract

Processing is necessary to enter into or perform a contract with you. For example, we need your name, address, and contact details to arrange and provide carpet cleaning services.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your interests and rights do not override those interests. This may include managing customer relationships, improving services, keeping internal records, and ensuring the security of our business.

Legal Obligation

We may process and retain personal data where required to comply with legal obligations, including tax, accounting, and record-keeping requirements.

Consent

In limited situations, we may rely on your consent, for example where we need permission for optional communications or certain types of marketing. Where we rely on consent, you may withdraw it at any time.

4. Data Sharing and Processors

We do not sell personal data. However, we may share information with trusted third parties who help us run our business. These organisations act as processors or independent controllers, depending on the service they provide.

Examples of processors or service providers may include:

Payment processors that help handle card or electronic payments.
IT and cloud service providers that support storage, email, scheduling, and system security.
Accounting or bookkeeping providers that help manage financial records and tax compliance.
Administrative support services where necessary for business operations.

We only share personal data where it is necessary and only with parties who are required to keep the data secure and process it in accordance with data protection law. Where required, we put appropriate data processing agreements in place.

We may also disclose personal information if we are required to do so by law, court order, or other lawful request from a public authority.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements.

Retention periods may vary depending on the type of information and why it was collected. In general:

Customer service records are retained for the period needed to manage the customer relationship and any follow-up issues.
Financial and payment records are kept for the period required by tax and accounting laws.
Communication records may be retained for a reasonable period to resolve disputes, demonstrate service delivery, and maintain business records.
Inactive or unnecessary data will be securely deleted or anonymised when it is no longer required.

When data is no longer needed, we take appropriate steps to ensure it is disposed of securely.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, password protection, and limiting access to data on a need-to-know basis.

While we work to protect your information, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we do take reasonable steps to safeguard your data.

7. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may apply depending on the circumstances and the legal basis for processing.

Right of access – you can ask for a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in some cases, you can ask us to delete your personal data.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – in some cases, you can request that we provide your data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to raise a concern with the relevant data protection authority if you believe your data has been handled unlawfully. We encourage you to contact us first so we can try to resolve any issue promptly and fairly.

8. Marketing Communications

We may send service-related communications where necessary for appointments, invoicing, or updates about your booking. Where any optional marketing communication is sent, we will only do so where lawful. You may opt out of marketing communications at any time.

We will never use your personal data for purposes that are incompatible with this Privacy Policy without first ensuring that we have a lawful basis to do so.

9. International Transfers

Where our service providers store or process data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your information to a standard required by data protection law. This may include standard contractual protections or equivalent legal mechanisms.

10. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children except where it is necessary in connection with a customer booking and only where this is lawful and appropriate. If we become aware that personal data has been collected inappropriately from a child, we will take reasonable steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is issued. We encourage customers to review this policy periodically so they remain informed about how we protect personal data.

12. Summary of Our Commitment

At Woodlands Carpet Cleaners, we aim to handle personal data fairly, lawfully, and transparently. We collect only the information needed to provide a reliable service, use it for clear and lawful purposes, retain it only as long as necessary, and share it only with trusted processors or when required by law. We respect your rights and strive to maintain the privacy and security of every customer’s information.

This policy applies to all Woodlands Carpet Cleaners customers in area.