Privacy Policy

Crystalpalace Carpet Cleaners is committed to protecting the privacy and personal data of all customers in the area where our services are provided. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our carpet cleaning and related services. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Crystalpalace Carpet Cleaners customers in area, including prospective customers, active customers, and individuals who contact us about our services. Please read this notice carefully to understand how we handle personal information.

1. Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing customer relationships, and meeting legal and operational obligations. The types of information we may collect include:

Identity information such as your name and, where relevant, business name.
Contact details such as your address, email address, and telephone number.
Service information such as the type of cleaning requested, property details, preferred appointment times, and special instructions.
Payment and billing information necessary to process transactions, issue invoices, and maintain records.
Communication records including messages, call notes, complaints, feedback, and service-related correspondence.
Technical information such as basic website usage data, if you interact with any online service channels we use.

We do not intentionally collect special category data unless you choose to provide it and it is necessary for a specific service issue, such as health-related access needs or allergy considerations. If such information is provided, we will only use it where permitted by law and where appropriate safeguards are in place.

2. How We Use Your Data

We use your personal data for the following purposes:

To provide carpet cleaning and related services.
To manage bookings, service visits, quotations, and customer requests.
To process payments, send invoices, and handle refunds where applicable.
To communicate with you about your service, schedule changes, or aftercare information.
To maintain internal records and improve the quality of our services.
To respond to complaints, queries, or legal claims.
To comply with tax, accounting, and other legal obligations.

We only use personal data in ways that are fair, transparent, and compatible with the purposes for which it was collected.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the situation, Crystalpalace Carpet Cleaners relies on the following lawful bases:

Contract

We process your personal data when it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes providing quotes, arranging appointments, carrying out cleaning services, and handling payment-related matters.

Legal Obligation

We may process data where necessary to comply with legal obligations, such as record-keeping, tax, and accounting requirements.

Legitimate Interests

We may use your data for our legitimate business interests, provided your rights and freedoms do not override those interests. This includes managing our business efficiently, improving services, preventing fraud, and keeping limited records of past work. When relying on legitimate interests, we consider whether the processing is necessary and whether it has a minimal impact on your privacy.

Consent

In limited situations, we may rely on your consent, for example where you voluntarily provide optional information that is not required to deliver the service. Where consent is used, you may withdraw it at any time.

4. How We Share Personal Data

We do not sell your personal data. We may share it only where necessary and appropriate for the operation of our business or to comply with legal requirements. Data may be shared with trusted third parties acting as processors or independent controllers, depending on the service involved.

Payment processors who help us handle card or electronic payments.
Accounting or bookkeeping providers who support financial administration.
Scheduling, communication, or IT service providers who help us operate systems securely.
Professional advisers such as legal or insurance advisers where needed.
Public authorities or regulators where disclosure is required by law.

Where we use processors, they are required to process data only on our instructions, protect it appropriately, and keep it confidential. We choose processors carefully and expect them to meet applicable data protection standards.

5. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, and no longer than required by law. Retention periods may vary depending on the type of information and why it is held.

Typical retention practice includes:

Customer and service records kept for as long as needed to manage the relationship and resolve any follow-up issues.
Financial records retained for the period required by tax and accounting law.
Communication records kept for a reasonable period to handle queries, complaints, or disputes.

When personal data is no longer needed, we will securely delete, anonymise, or dispose of it in a safe manner. Retention periods are reviewed regularly to ensure data is not kept longer than necessary.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality duties, and data minimisation practices. While no system can be guaranteed completely secure, we work to maintain a level of protection appropriate to the risks involved.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply subject to certain conditions and exemptions:

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – in some circumstances, you may ask us to delete your personal data.
Right to restriction – you may request that we limit the way we use your data in certain cases.
Right to data portability – where applicable, you may request that we provide your data in a structured, commonly used format.
Right to object – you may object to processing based on legitimate interests or direct marketing, where relevant.
Right to withdraw consent – where processing is based on consent, you may withdraw that consent at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed. We encourage you to raise any concerns with us first so we can try to resolve them promptly and fairly.

8. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it in accordance with data protection law. This may include using contracts approved for data protection purposes or relying on adequacy regulations where applicable.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is issued. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

10. Summary of Our Commitment

Crystalpalace Carpet Cleaners will always aim to process personal data lawfully, fairly, and transparently. We collect only the information we need, use it for clear and lawful purposes, retain it for appropriate periods, and share it only with trusted processors or where legally required. We respect your privacy rights and are committed to handling your information responsibly and securely.

By using our services, you acknowledge that you have read and understood this Privacy Policy.