Privacy Policy - Ruislip Carpetcleaning

This Privacy Policy explains how Ruislip Carpetcleaning collects, uses, stores, shares, and protects personal data when providing cleaning services. It applies to all Ruislip Carpetcleaning customers in the area, including private households, landlords, tenants, and business clients who request or receive our services. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Ruislip Carpetcleaning provides carpet cleaning and related cleaning services in the local area. For the purposes of data protection law, we act as the data controller for the personal data we collect and use in connection with our services. This means we decide why and how personal data is processed.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for delivering our services, managing our business, and meeting legal obligations. The types of data we may collect include:

Identity details such as name and title.
Contact details such as address, email address, and telephone number.
Service information such as property type, cleaning requirements, appointment details, and service history.
Billing and payment information such as invoice details, payment records, and transaction references.
Communication records such as enquiries, complaints, feedback, and correspondence.
Technical data collected when you interact with our digital systems, where applicable, such as device or usage information used for security and service improvement.

We do not intentionally collect special category data unless it is strictly necessary and lawful to do so. If such information is ever provided to us, we will handle it with additional care and only where a valid legal basis applies.

3. How We Use Personal Data

We use personal data only for legitimate business purposes connected with our services. These may include:

Responding to enquiries and providing quotations.
Scheduling and delivering cleaning services.
Managing customer accounts, bookings, and invoices.
Processing payments and maintaining financial records.
Handling complaints, disputes, and service follow-up.
Improving our services, customer experience, and internal operations.
Meeting tax, accounting, insurance, and legal requirements.
Preventing fraud, misuse, or unlawful activity.

We ensure that any processing is relevant, proportionate, and limited to the purpose for which the data was collected.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for using personal data. Depending on the circumstances, we rely on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. For example, we need your contact and service details to provide a quote, book an appointment, and complete the work you requested.

Legal Obligation

We process some data where required by law, such as for accounting, tax compliance, record keeping, or responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where these interests are not overridden by your rights and freedoms. This may include customer service, business administration, service improvement, and fraud prevention. When relying on legitimate interests, we consider the impact on your privacy and take appropriate safeguards.

Consent

In limited cases, we may ask for your consent, for example where it is required for specific marketing communications or certain optional uses of data. If consent is used, you can withdraw it at any time.

5. Data Sharing and Processors

We may share personal data with trusted third parties only when necessary for service delivery, legal compliance, or business administration. These third parties act as processors or independent controllers depending on the arrangement.

Processors may include:

Payment service providers who process card or bank payments securely.
Accounting and bookkeeping providers who help maintain business records.
IT and cloud service providers who support secure storage, communication, and administration systems.
Customer management or scheduling systems used to organise service appointments and communications.
Professional advisers such as insurers, auditors, or legal advisers where necessary.

We require processors to handle personal data under appropriate confidentiality, security, and data protection obligations. They may only process personal data on our instructions and for the agreed purpose.

We may also disclose personal data if required by law, to protect our rights or the rights of others, or in connection with legal claims or regulatory matters.

6. International Transfers

If any personal data is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place to protect that data in accordance with applicable law. This may include the use of approved contractual protections or transfers to countries with adequate data protection standards.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods depend on the type of information and the reason for processing.

Customer and service records are generally retained for the duration of the business relationship and for a reasonable period afterwards for administration, dispute resolution, and service history.
Financial and tax records are retained for the period required by law, typically in line with accounting and tax obligations.
Communication records may be kept for a period necessary to manage queries, complaints, and evidence of instructions or agreements.
Data held on the basis of consent is retained until consent is withdrawn or the data is no longer needed.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, confidentiality procedures, and staff awareness practices. While no system is completely secure, we work to reduce risks and to handle data responsibly.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to legal limits, these rights include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can ask us to delete your data in certain circumstances.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request that certain data be provided to you or another provider in a structured format.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

Exercising these rights will not affect the lawfulness of processing carried out before your request. Some rights may not apply in all circumstances, especially where we must keep information to meet legal obligations or defend legal claims.

10. How to Make a Request

If you wish to exercise any of your rights, you may make a request through our normal customer communication channels. We may need to verify your identity before responding, in order to protect your data. We will respond within the time limits required by law unless an extension is legally permitted.

11. Complaints

If you have concerns about how we handle your personal data, we encourage you to raise them with us first so we can review and address the matter. You also have the right to complain to the UK Information Commissioner’s Office if you believe your data protection rights have been breached.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updated version will apply from the date it is issued. We recommend reviewing this policy periodically to stay informed about how we protect your personal data.

Last updated: This Privacy Policy is intended to provide clear information about how Ruislip Carpetcleaning handles personal data for all customers in the area. We aim to maintain transparency, respect your privacy, and use personal data only where there is a lawful and justified reason to do so.