Privacy Policy - Ruislip Carpet Cleaning

This Privacy Policy explains how Ruislip Carpet Cleaning collects, uses, stores, shares, and protects personal data. It applies to all customers in the Ruislip area who use our carpet cleaning services, including residential and commercial clients, prospective customers, and anyone who makes an enquiry or booking. We are committed to handling personal information in a lawful, fair, and transparent manner, in line with the UK General Data Protection Regulation and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to all individuals in the Ruislip area who interact with our services, whether by requesting a quote, arranging a visit, confirming a booking, receiving a service, or communicating with us in any other way. It also applies where personal data is provided by a customer on behalf of another person, such as a household member, tenant, property manager, or business representative. For the purposes of this policy, personal data means any information that can identify a living person directly or indirectly.

2. Information we collect

We collect only the data needed to deliver our services properly, manage our customer relationships, and meet legal or operational obligations. The types of data we may collect include:

Identity details such as name and, where relevant, business name.
Contact details such as address, phone number, and email address.
Service information such as property type, cleaning requirements, preferred dates, access instructions, and notes about stains, fabrics, or treatments.
Payment-related information where needed to process transactions, issue invoices, or confirm payment status. We do not store more payment information than is necessary.
Communication records such as messages, booking notes, complaint details, and service-related correspondence.
Technical and usage data if you interact with us through digital channels, such as device details, browser information, and basic activity logs.

We do not intentionally collect special category data unless it is incidentally shared and is essential to provide a safe or requested service. If such information is received, we will treat it with extra care and only process it where a valid legal condition applies.

3. How we use your data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to schedule, confirm, and carry out carpet cleaning services;
to manage customer accounts, preferences, and service notes;
to process payments and maintain financial records;
to communicate about appointments, service updates, or issues;
to handle complaints, feedback, and aftercare;
to maintain records required for legal, tax, and insurance purposes;
to improve our service quality, planning, and internal operations;
to prevent fraud, misuse, or unlawful activity;
to comply with applicable laws and regulatory obligations.

We only use personal data for the purposes for which it was collected, unless we reasonably determine that another compatible purpose applies and that such use is permitted by law.

4. Lawful basis for processing

We process personal data only where we have a lawful basis under data protection law. Depending on the situation, our lawful bases may include:

Contract

We rely on contract where processing is necessary to provide a quotation, make a booking, carry out cleaning services, issue invoices, or fulfil our obligations to you.

Legitimate interests

We may rely on legitimate interests where processing is necessary for the effective running of our business, provided those interests are not overridden by your rights and freedoms. This may include service management, record keeping, customer support, and fraud prevention.

Legal obligation

We process certain information where it is necessary to meet legal obligations, including tax, accounting, and business compliance requirements.

Consent

In limited situations, we may rely on consent, for example where it is the most appropriate basis for a specific optional communication. Where we rely on consent, you may withdraw it at any time.

We do not use personal data for automated decision-making that produces legal or similarly significant effects.

5. Data sharing and processors

We may share personal data with trusted third parties where necessary for the operation of our services. These third parties act as processors or independent controllers depending on the service they provide. Examples may include:

IT and cloud storage providers;
payment processing services;
accounting and bookkeeping providers;
customer communication and administrative tools;
insurance, legal, or compliance advisers where necessary;
service subcontractors or specialist providers when required to complete a job safely and effectively.

Where third parties act as processors, they are only permitted to process personal data on our instructions and must protect it using appropriate technical and organisational measures. We do not sell personal data. We only disclose data where necessary, proportionate, and lawful.

Processors are required to handle data securely and to use it only for the agreed purpose.

6. International transfers

If any processor stores or accesses data outside the UK, we take steps to ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent protective measures permitted by law. We aim to keep all personal information within secure systems and to limit cross-border transfers where possible.

7. Data retention

We keep personal data only for as long as it is needed for the purpose for which it was collected, or for as long as required by law. Retention periods may vary depending on the category of data and the reason it is held.

Enquiry data may be kept for a limited period if no booking follows, to support communication records and business administration.
Customer and service records are retained for the duration of the relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by applicable law.
Complaint, dispute, or claims data may be retained longer where necessary to establish, exercise, or defend legal rights.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. Retention is reviewed periodically to ensure we do not keep information longer than necessary.

8. Data security

We use appropriate safeguards to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These safeguards may include access controls, secure storage, staff confidentiality expectations, limited data sharing, and careful selection of service providers. While no system can be guaranteed to be completely secure, we take reasonable and proportionate steps to reduce risk.

9. Your rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the legal basis used for processing. They include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain situations.
Right to restriction – to ask us to limit how we use your data in certain cases.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to raise concerns about how your data is handled. If you believe we have not dealt with your information properly, you may contact the relevant supervisory authority. We would, however, appreciate the opportunity to address any concerns first.

10. Cookies and similar technologies

If we use digital tools that place cookies or similar technologies on a device, they will only be used where necessary for functionality, measurement, or security, and in line with applicable law. Any non-essential technologies should be managed through the relevant consent settings where available. We aim to keep digital tracking limited and proportionate.

11. Children’s data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is necessary for a household service and provided by an adult responsible for the booking. Where we become aware that child-related data has been shared unnecessarily, we will review and handle it appropriately.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any updates will take effect when published or when otherwise communicated. We encourage customers in the Ruislip area to review this policy periodically so they remain informed about how their data is handled.

13. Summary of our commitment

Ruislip Carpet Cleaning is committed to protecting personal data and respecting your privacy. We collect only the information needed to provide a reliable service, use it on a lawful basis, keep it only as long as necessary, and work with processors who are required to handle data securely. Our goal is to maintain trust through clear, fair, and responsible data practices.