Privacy Policy

Putney Carpet Cleaning Privacy Policy

This Privacy Policy explains how Putney Carpet Cleaning collects, uses, stores, and protects the personal data of its customers. It applies to all Putney Carpet Cleaning customers in the Putney area who use our carpet cleaning and related services, whether you contact us online, by post, or in person.

1. Who We Are

Putney Carpet Cleaning is a carpet and upholstery cleaning service operating in the Putney area. For the purposes of applicable data protection laws, including the United Kingdom General Data Protection Regulation and the Data Protection Act 2018, Putney Carpet Cleaning is the data controller for the personal data described in this Privacy Policy.

2. Scope of this Privacy Policy

This Privacy Policy covers personal data that we collect about individual customers and prospective customers in the Putney area. It explains what information we collect, the lawful bases we rely upon, how long we keep your data, with whom we share it, and your rights in relation to your personal data.

3. Personal Data We Collect

We may collect and process the following categories of personal data when you interact with Putney Carpet Cleaning:

Identification and contact details: name, address, service address, billing address, and any contact details you choose to provide such as online identifiers or other contact preferences.

Service and booking information: details of the services you request, dates and times of appointments, access instructions for the premises, details about the property relevant to the cleaning work, and any information you voluntarily provide about your requirements.

Payment information: details needed to process your payment, such as payment method and transaction details. Where payments are processed through third-party payment service providers, we receive limited information necessary to confirm that the payment has been made.

Communication data: information you provide when you contact us with questions, feedback, or complaints, including the content of your messages and our responses.

Technical and usage data: if you interact with our online services, we may collect technical information such as IP address, device information, approximate location, and usage information relating to how you access and use our website or online tools. This may be collected through cookies or similar technologies where permitted by law.

4. How We Collect Your Data

We collect personal data directly from you when you:

Request a quote or make a booking for cleaning services.

Communicate with us by phone, online forms, or other communication channels.

Provide feedback, leave a review, or make a complaint.

Interact with our website or online presence where technical data and usage information may be collected.

We may also receive limited personal data from third parties, for example where a booking is made on your behalf by a family member, landlord, letting agent, or property manager, or where a third-party payment processor confirms that a payment has been completed.

5. Purposes and Lawful Bases for Processing

We process your personal data only where we have a lawful basis to do so. The main purposes and corresponding lawful bases are:

To provide our services: We use your identification, contact, and service information to provide carpet cleaning and related services, including scheduling appointments and carrying out the work at your premises. The lawful basis is performance of a contract or taking steps at your request prior to entering into a contract.

To manage bookings and customer relationships: We use your data to manage your bookings, handle enquiries, respond to messages, and provide customer support. The lawful basis is performance of a contract and our legitimate interest in running our business and maintaining good customer service.

To process payments and accounting: We use payment and transaction information to process your payments, issue invoices or receipts, and maintain our financial and accounting records. The lawful basis is performance of a contract and compliance with legal obligations related to tax and accounting.

To improve our services: We may use aggregated or pseudonymised information about how our services are used to improve our operations, planning, and service quality. The lawful basis is our legitimate interest in developing and improving our services while respecting your privacy.

To send service-related communications: We may contact you with important information about your booking or about changes that affect the services you have requested, such as rescheduling or access issues. The lawful basis is performance of a contract and our legitimate interest in ensuring the safe and effective delivery of our services.

Marketing communications: We may use your contact details to send you information about similar services that may be of interest to you where permitted by law. The lawful basis is our legitimate interest in promoting our services or your consent, depending on the communication method and legal requirements. You may opt out of marketing communications at any time.

Legal and regulatory purposes: We may process personal data to comply with applicable laws, regulations, or lawful requests, to establish, exercise, or defend legal claims, and to prevent or detect fraud or misuse of our services. The lawful basis is compliance with legal obligations and our legitimate interests in protecting our business.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or to meet legal, accounting, or reporting requirements.

Customer and booking records: Typically retained for as long as you remain a customer and for a reasonable period afterward so we can respond to queries, maintain records of completed work, and comply with applicable limitation periods for legal claims.

Payment and financial records: Retained for the period required by tax, accounting, and financial reporting laws.

Marketing data: Retained until you opt out of marketing or until we determine that the data is no longer accurate or necessary for this purpose.

When personal data is no longer needed, it will be securely deleted, anonymised, or otherwise removed from our systems.

7. Data Processors and Third-Party Recipients

We may share your personal data with trusted third parties who act as data processors on our behalf. These include:

IT and hosting service providers who support our business systems, website, or data storage.

Payment service providers who process payments and manage transactions.

Professional advisers such as accountants or legal advisers where necessary for our legitimate business needs and legal obligations.

These processors are only permitted to use your personal data in accordance with our instructions, for the purposes described in this Privacy Policy, and they are required to implement appropriate technical and organisational measures to protect your data.

We may also share your data with third parties where required by law, regulation, or court order, or where necessary to establish, exercise, or defend legal claims.

8. International Data Transfers

Where any of our service providers or systems are located outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws. These safeguards may include standard contractual clauses or equivalent legal mechanisms.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures include limiting access to personal data to those who have a business need to know it, using secure storage solutions, and training staff on data protection responsibilities. While no system is completely secure, we strive to protect your information using procedures that meet legal and industry standards.

10. Your Data Protection Rights

As a data subject, you have certain rights under applicable data protection laws. These include:

Right of access: You have the right to request confirmation of whether we process your personal data and to receive a copy of that data along with information about how it is processed.

Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where the data is no longer needed for the purposes for which it was collected or you have withdrawn consent where consent was the basis for processing.

Right to restriction of processing: You may request that we restrict processing of your personal data in certain situations, such as while we verify accuracy or review an objection you have raised.

Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as the lawful basis, including for direct marketing. We will stop processing your data unless we have compelling legitimate grounds that override your interests, rights, and freedoms or the processing is required for legal claims.

Right to data portability: Where processing is based on consent or on a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request that it be transmitted to another controller where technically feasible.

Right to withdraw consent: Where we rely on your consent to process your data, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with the relevant supervisory authority if you are concerned about how your personal data is being handled.

11. Policy Updates

We may revise this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any updated version will apply from the date it is made available, and the most current version will always describe how we handle your personal data.