Tooting Carpet Cleaners Privacy Policy
This Privacy Policy explains how Tooting Carpet Cleaners collects, uses, stores, and protects personal data when providing carpet cleaning and related services. It applies to all Tooting Carpet Cleaners customers in our service area, as well as prospective customers who contact us to request information or quotations.
We are committed to processing your personal data lawfully, fairly, and transparently, in accordance with the UK General Data Protection Regulation and applicable data protection laws.
Who We Are and Scope of This Policy
Tooting Carpet Cleaners provides professional carpet cleaning and associated services to residential and business customers. This Privacy Policy applies whenever you interact with us, including when you request a quote, make a booking, receive our services, or communicate with us by any channel.
By using our services, you acknowledge that you have read and understood this Privacy Policy. You are not required to provide personal data to us, but if you choose not to, we may be unable to provide some or all of our services.
Personal Data We Collect
We collect only the personal data that is relevant and necessary for the purposes described in this Privacy Policy. The types of personal data we may collect include:
Identification and contact details, such as your name, address, service property address if different, and general location information sufficient for us to attend your premises.
Booking and service information, such as preferred dates and times, details about the areas or items to be cleaned, access instructions, and any specific requirements you tell us about.
Communication records, such as information you provide when you contact us by phone, through online forms, or via other communication channels, along with any notes we make to manage your request or booking.
Payment-related information, such as records of payments received, payment method used, and billing details. We do not store full payment card details when payments are processed through secure third party payment processors.
Technical usage information where applicable, such as basic device or browser information and log data generated when you visit our website, to help us maintain security and improve our services.
Lawful Basis for Processing Your Data
We rely on one or more of the following lawful bases under data protection law when processing your personal data:
Contract: We process personal data to enter into and perform a contract with you, including responding to your enquiries, providing quotations, confirming bookings, delivering services, and managing payments and invoicing.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This includes managing our relationship with you, improving our services, handling queries and complaints, and maintaining business records and security.
Legal obligation: We process certain personal data to comply with legal obligations, such as record keeping, tax, and accounting requirements, as well as responding to lawful requests from public authorities.
Consent: In limited circumstances, we may rely on your consent, for example for certain optional communications or where we are required by law to obtain consent before sending particular forms of marketing. Where we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use personal data for the following purposes:
To provide and manage our carpet cleaning and related services, including booking visits, attending your property, and carrying out the work you request.
To communicate with you about your enquiries, quotations, bookings, changes to appointments, and follow up after a service has been completed.
To process payments, issue invoices and receipts, and maintain accurate financial and administrative records.
To manage our business operations, including internal administration, quality control, staff training, and service improvement.
To protect our business, our staff, and our customers, for example by preventing fraud, managing disputes or claims, and enforcing our contractual terms.
To comply with applicable laws and respond to requests from regulators or law enforcement where we are legally required to do so.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal, accounting, and reporting obligations.
In general, we may retain customer and booking records for a number of years after your last interaction with us, in line with applicable limitation periods for legal claims and statutory record keeping obligations. Payment and accounting records may be retained for longer where required by tax or financial regulations.
When personal data is no longer required for the purposes described in this Privacy Policy, we will securely delete it or anonymise it so that it can no longer be associated with an identifiable individual.
Sharing Your Personal Data and Use of Processors
We do not sell your personal data. We may share your personal data with third parties only where necessary and lawful, for example:
Service providers and data processors who perform services on our behalf, such as payment processing, secure data storage, administrative support, and information technology services. These parties are required to process personal data only in accordance with our instructions and to maintain appropriate security measures.
Professional advisers, such as accountants, legal advisers, or insurers, where necessary for business administration, legal compliance, or to establish, exercise, or defend legal claims.
Public authorities, regulators, or law enforcement agencies, where we are required to do so by law or where disclosure is necessary to protect our rights, the rights of our staff or customers, or public safety.
Where we use data processors, we enter into written agreements that require them to handle personal data in compliance with applicable data protection laws and to keep it secure.
International Transfers
Our focus is on serving customers in our local area, and we aim to store and process personal data within the United Kingdom or other jurisdictions offering an equivalent level of data protection. If it becomes necessary to transfer personal data to a country that does not provide the same level of protection, we will implement appropriate safeguards as required by law to ensure your data remains protected.
How We Protect Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Measures may include restricted access controls, secure storage, staff training, and procedures for handling personal data and responding to potential incidents.
While we take reasonable steps to secure your data, no system can be guaranteed to be completely secure. You should take care when providing personal data and ensure that any communications you send to us are from devices and networks you trust.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these include:
Right of access: You can request confirmation that we process your personal data and obtain a copy of the personal data we hold about you.
Right to rectification: You can request that we correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure: You can request that we delete your personal data where there is no good reason for us to continue processing it, for example where it is no longer necessary for the purposes for which it was collected.
Right to restriction: You can request that we restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy or consider an objection you have raised.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests as our lawful basis and you believe your rights and interests outweigh our own.
Right to data portability: In limited situations, you may request that we provide your personal data in a structured, commonly used, machine-readable format, or ask us to transmit it directly to another controller where this is technically feasible.
Right to withdraw consent: Where we rely on your consent to process personal data, you may withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew consent.
If you wish to exercise any of these rights, please contact us using the usual communication channels you use to reach Tooting Carpet Cleaners. We may need to verify your identity before fulfilling your request.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or how we process personal data. Any updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
Your continued use of our services after any changes are published will indicate your acceptance of the updated Privacy Policy.