Woodlands Carpet Cleaners Privacy Policy
This Privacy Policy explains how Woodlands Carpet Cleaners collects, uses, stores, and protects personal data relating to customers and prospective customers in our service area. It also sets out your rights under the UK General Data Protection Regulation and the EU General Data Protection Regulation where applicable.
Woodlands Carpet Cleaners is committed to handling personal data lawfully, fairly, and transparently. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Woodlands Carpet Cleaners customers and prospective customers within our service area, including those who contact us by phone, post, or through any online form or messaging service, request a quotation, make a booking, or otherwise interact with us in relation to carpet cleaning and related services.
Data Controller
Woodlands Carpet Cleaners is the data controller in respect of the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
The types of personal data we may collect and process include:
Identification and contact details such as name, postal address, service address, billing address, and any contact details you choose to provide.
Communication details such as the content of enquiries, messages, and any correspondence relating to quotations, bookings, or customer service.
Booking and service information such as preferred dates and times for appointments, details about the property where the service will be carried out, and information about the carpets, rugs, upholstery, or other items to be cleaned.
Payment and transaction details such as records of payments received, amounts, dates, methods of payment, and invoices. We do not store full card details if card payments are processed through third party payment providers.
Technical information where applicable such as basic technical information automatically provided when you interact with any online forms or platforms used by us, for example date and time of access and basic device information where this is needed to deliver the service or maintain security.
Feedback and reviews such as any comments, testimonials, or ratings you choose to provide about our services.
How We Collect Your Data
We may collect personal data directly from you when you contact us to request information or a quotation, make a booking or amend an existing booking, use our services at your property, communicate with us by phone, post, or electronically, or provide feedback, testimonials, or reviews.
We may also receive limited personal data indirectly where a third party makes a booking on your behalf or refers you to us, in which case we will process only the data necessary to arrange and deliver the requested services.
Purposes and Lawful Bases for Processing
We process your personal data only where we have a lawful basis to do so. The main purposes and corresponding lawful bases are as follows.
To provide quotations and respond to enquiries. We use your contact and service information to answer questions, provide price estimates, and discuss suitable services. The lawful basis is taking steps at your request prior to entering into a contract or our legitimate interests in responding to prospective customers.
To perform and manage contracts. We use your personal data to confirm bookings, deliver carpet cleaning and related services, manage appointments, and handle payments. The lawful basis is performance of a contract with you.
To manage customer accounts and records. We may maintain records of previous services, invoices, and communications to manage our ongoing relationship with you. The lawful basis is performance of a contract and our legitimate interests in efficient business administration.
To handle customer service and complaints. We may process your information to respond to questions, address issues, and resolve complaints. The lawful basis is performance of a contract and our legitimate interests in providing quality service and resolving disputes.
To send important service and policy updates. We may contact you with essential information about your booking, changes to services, or updates to this Privacy Policy or our terms. The lawful basis is performance of a contract and our legitimate interests in keeping customers informed.
To send limited marketing communications. We may occasionally provide information about similar services that may be of interest to you. The lawful basis is our legitimate interests in promoting our services, or your consent where required. You can object or opt out of marketing at any time.
To comply with legal obligations. We may process personal data to meet bookkeeping, tax, and other legal or regulatory requirements. The lawful basis is compliance with legal obligations to which we are subject.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.
Customer and booking records are typically retained for a period sufficient to manage our relationship with you and to comply with applicable tax and accounting rules. Payment and invoice records may be retained for longer periods where required by law.
Enquiry data from prospective customers who do not proceed may be kept for a limited period in case you contact us again, after which it will be securely deleted or anonymised.
When personal data is no longer required for any lawful purpose, we will delete it, anonymise it, or otherwise dispose of it securely.
Sharing and Use of Data Processors
We do not sell your personal data. We may share limited personal data with trusted third parties that act as data processors on our behalf. These may include providers of scheduling or booking systems, accounting or invoicing services, payment processors, secure data storage or backup services, and communication tools used to send service messages or confirmations.
Where we use processors, they may only process your personal data in accordance with our documented instructions and for the specific purposes described in this Privacy Policy. We require all processors to implement appropriate technical and organisational measures to protect your personal data and to comply with data protection laws.
We may also disclose personal data where required to comply with a legal obligation, to protect the rights, property, or safety of our business, our customers, or others, or in connection with the establishment, exercise, or defence of legal claims.
International Transfers
Where any of our processors are located outside the United Kingdom or the European Economic Area, or where data is stored on servers located outside these regions, we will ensure that appropriate safeguards are in place to protect your personal data. These may include the use of standard contractual clauses or equivalent measures approved by relevant data protection authorities.
Data Security
We take reasonable and proportionate steps to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Measures may include access controls, secure storage, minimisation of printed records, and limiting access to personal data to those who have a business need to know.
While we take appropriate steps to safeguard your information, no method of transmission or storage is completely secure. You should take care when sharing personal data and notify us promptly if you believe your data may have been compromised in connection with our services.
Your Data Protection Rights
Depending on your location and subject to certain conditions, you may have the following rights in relation to your personal data.
The right of access. You can request confirmation as to whether we process your personal data and obtain a copy of that data.
The right to rectification. You can ask us to correct inaccurate personal data and to complete incomplete information.
The right to erasure. You can request that we delete your personal data where there is no longer a lawful basis for us to keep it, subject to legal or contractual obligations.
The right to restriction of processing. You can ask us to restrict the processing of your data in certain circumstances, for example while we verify its accuracy or consider an objection.
The right to data portability. You may have the right to receive personal data you provided to us in a structured, commonly used, and machine readable format and to transmit it to another controller where technically feasible.
The right to object. You can object to processing based on our legitimate interests, including any direct marketing. We will stop processing your data for such purposes unless we have compelling legitimate grounds that override your interests or where processing is required for legal claims.
The right to withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights, or if you have questions or concerns about how we handle your personal data, you can contact Woodlands Carpet Cleaners using the contact methods you normally use for our services. We will respond to your request in accordance with applicable data protection laws and may need to verify your identity before acting on your request.
You also have the right to lodge a complaint with your local supervisory authority for data protection if you believe that your rights have been infringed. We would, however, appreciate the opportunity to address your concerns directly before you contact a supervisory authority.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.
