Privacy Policy - Enfield Carpet Cleaners

Effective date: This Privacy Policy applies to all Enfield Carpet Cleaners customers in the area and explains how we collect, use, store, and protect personal data in accordance with the UK GDPR and the Data Protection Act 2018.

We are committed to handling personal information responsibly, fairly, and transparently. This policy is intended to help you understand what data we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have in relation to your data.

1. Who We Are

For the purposes of data protection law, Enfield Carpet Cleaners acts as the data controller for the personal data described in this policy. This means we decide how and why personal data is used when you request carpet cleaning or related services from us.

This policy applies to all customers, prospective customers, and other individuals in our service area whose personal data we process in connection with our services.

2. Information We Collect

We may collect and process the following categories of personal data:

Identity information such as your name.
Contact details such as your address, email address, and telephone number.
Service information including property details, cleaning preferences, appointment times, and instructions relevant to the job.
Billing and payment information such as payment method, transaction history, and invoicing records.
Communication records including messages, booking requests, complaints, feedback, and notes from conversations.
Technical data if you interact with our digital systems, such as basic device or usage information collected for security and performance purposes.
Special category data only where necessary and only if you voluntarily provide it, for example information about allergies, health conditions, or access needs that affect how we deliver a service safely.

We only collect the data that is necessary for legitimate business purposes and service delivery. We do not intentionally collect more personal data than we need.

3. How We Collect Your Data

We may collect personal data directly from you when you:

request a quotation or booking;
communicate with us by phone, email, text, or online form;
provide information during the service process;
make a payment;
leave feedback or raise a complaint;
subscribe to service updates or request follow-up information.

We may also receive personal data from third parties where this is necessary for service administration, payment processing, or business operations, such as booking platforms, payment providers, or referral partners.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal data. Depending on the purpose, we rely on one or more of the following bases:

Contract

We process your data where it is necessary to enter into or perform a contract with you, for example to provide a cleaning service, manage appointments, and process payments.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests and where those interests are not overridden by your rights. This includes managing our business, improving customer service, maintaining records, preventing fraud, and handling disputes. We make sure any such processing is proportionate and relevant.

Legal Obligation

We may process and retain certain data when required by law, such as tax, accounting, insurance, or regulatory obligations.

Consent

Where we rely on your consent, for example for certain optional communications or the use of sensitive information not otherwise required, you can withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

5. Why We Use Your Data

We use personal data to:

provide carpet cleaning and related services;
manage bookings, visits, and service delivery;
respond to enquiries, requests, and complaints;
issue invoices and process payments;
keep accurate business, accounting, and operational records;
maintain health, safety, and service-specific notes where needed;
improve the quality and reliability of our services;
comply with legal and regulatory obligations;
protect our business, staff, and customers from misuse, fraud, or security risks.

We will not use your data for purposes that are incompatible with the reasons for which it was collected, unless we are required or permitted to do so by law.

6. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods may vary depending on the type of data and the context in which it is processed.

Customer and service records are generally retained for as long as needed to manage the customer relationship and resolve any follow-up issues.
Financial records may be kept for the period required by tax and accounting laws.
Communication records may be retained for a reasonable period to handle complaints, service disputes, or quality assurance.
Consent-based records are kept only until consent is withdrawn or the purpose ends.

When data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner. We do not retain personal data indefinitely.

7. Data Processors and Third Parties

We may share personal data with trusted third parties who act as processors on our behalf. These processors are only permitted to use your data in line with our instructions and applicable data protection law.

Examples of processors may include:

payment service providers;
booking and scheduling systems;
IT support and cloud storage providers;
accounting and invoicing services;
customer communication tools;
professional advisers, such as accountants or legal advisers, where necessary.

We may also share data with organisations where required by law, to protect legal rights, or to respond to a valid request from public authorities. If we use any third-party processors, we take reasonable steps to ensure they provide appropriate security and confidentiality safeguards.

8. International Transfers

If any of our service providers process personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place, such as adequacy regulations or approved contractual protections. This is done to keep your data protected to a standard consistent with UK data protection law.

9. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, misuse, or alteration. These measures may include access controls, secure systems, staff confidentiality obligations, and safe data-handling procedures.

While we work hard to protect information, no system can be guaranteed to be completely secure. We therefore continually review our practices to reduce risks and improve data protection.

10. Your Rights

Under GDPR, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – in some circumstances, you can ask us to delete your data.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to data portability – where applicable, you can request your data in a structured, commonly used format.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with GDPR timeframes and requirements. We may need to verify your identity before acting on your request.

11. Complaints

If you believe your data has been handled improperly, you have the right to raise a concern with the relevant data protection authority in the UK. We would, however, encourage you to contact us first so we can review the issue and try to resolve it promptly and fairly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practice, or the way we deliver services. Any updates will take effect when published or otherwise communicated. We encourage you to review this policy periodically.

13. Summary of Our Commitment

Enfield Carpet Cleaners is committed to respecting privacy and handling personal information with care. We collect only the data we need, use it for clear and lawful purposes, keep it only as long as necessary, and share it only with trusted processors or where required by law. We also recognise and support your rights over your personal data.

This Privacy Policy applies to all Enfield Carpet Cleaners customers in the area. By using our services, you acknowledge the terms described above and the way we process personal data in accordance with applicable data protection laws.