Crystal Palace Carpet Cleaners Privacy Policy
This Privacy Policy explains how Crystal Palace Carpet Cleaners collects, uses, stores and protects personal data belonging to its customers. It also explains the rights individuals have under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Crystal Palace Carpet Cleaners customers in the area covered by our carpet cleaning and related services.
Who We Are and Scope of This Policy
Crystal Palace Carpet Cleaners is a carpet and upholstery cleaning service provider. In the course of providing our services, we act as a data controller for the personal data of our customers and prospective customers. This means we decide how and why personal data is processed. This Privacy Policy applies whenever you contact us, request a quote, make a booking, enter into a contract for services with us, or otherwise interact with us in connection with our services.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details: name, address, property access information you choose to share, and other basic contact details as provided by you.
Booking and service details: details about requested services, details of the areas or items to be cleaned, preferred dates and times, and information necessary to complete a booking or provide a quote.
Communication records: records of communications between you and us, including inquiries, booking confirmations, feedback and complaints.
Billing and payment details: information necessary to issue invoices and record payments, such as billing address and payment status. We do not store full payment card details when payments are processed through third party payment providers.
Technical and usage information: basic technical information that may be collected when you visit our website, such as IP address, browser type and general usage data, where this is necessary for security, performance or analytics and where permitted by law.
How We Collect Personal Data
We collect personal data directly from you when you request a quote, make a booking, confirm an order, communicate with us by phone or other means, or otherwise provide information in the course of using our services. We may also collect personal data indirectly through third party service providers that support our operations, such as payment processors or advertising and analytics providers, where this is necessary and lawful.
Lawful Bases for Processing
We will only process your personal data where we have a lawful basis under the UK GDPR. Depending on the purpose, we rely on the following lawful bases:
Contract: we process your personal data to enter into and perform a contract with you, including providing quotes, taking bookings, delivering carpet cleaning and related services, processing payments and communicating with you about your bookings.
Legitimate interests: we process personal data where this is necessary for our legitimate business interests, such as managing and improving our services, handling queries and complaints, keeping appropriate business records, ensuring the security of our systems, and undertaking limited marketing to existing customers in line with applicable law. Where we rely on legitimate interests, we consider and balance any potential impact on your rights and freedoms.
Legal obligations: we process personal data where this is necessary for us to comply with legal or regulatory obligations, including record keeping, tax and accounting requirements, and responding to lawful requests from public authorities.
Consent: in certain cases, we may process personal data based on your consent, for example for some types of electronic marketing or the use of certain cookies and similar technologies. Where we rely on consent, you can withdraw it at any time, although this will not affect the lawfulness of processing carried out before you withdraw your consent.
How We Use Personal Data
We use your personal data for the following purposes:
To provide quotes, respond to inquiries and manage bookings.
To deliver carpet cleaning and related services at your property.
To manage invoices, payments and accounts.
To communicate with you about your bookings, service updates, changes to our terms or this Privacy Policy, and important service information.
To improve our services, resolve customer issues, and manage feedback and complaints.
To maintain business records and comply with legal and regulatory obligations.
To carry out limited direct marketing communications to existing customers where permitted, and to manage any preferences or objections you express.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with selected third parties where this is necessary for the purposes described in this Privacy Policy and in accordance with data protection law. These third parties act as data processors or, in some cases, independent controllers.
We may share your data with:
Service providers and data processors who support our operations, such as payment processing providers, customer management and booking systems, IT hosting and maintenance providers, and providers of business tools we use to manage our services.
Professional advisers, such as accountants or legal advisers, where necessary for legitimate business purposes and compliance.
Public authorities or law enforcement agencies where we are required to do so by law or to protect our rights or the rights of others.
Where we use data processors, we require them to process personal data only on our documented instructions, to keep it secure and to comply with applicable data protection laws.
International Data Transfers
If we transfer personal data outside the United Kingdom or European Economic Area, we will take appropriate steps to ensure that your personal data remains protected in line with applicable data protection law. This may include relying on adequacy regulations, using standard contractual clauses approved by relevant authorities, or implementing other appropriate safeguards.
Data Retention
We retain personal data only for as long as is reasonably necessary to fulfil the purposes set out in this Privacy Policy and to comply with legal, regulatory, tax, accounting or reporting requirements. When determining the appropriate retention period, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data, and whether we can achieve those purposes through other means.
In general, we retain customer and booking records for a period consistent with local limitation periods and accounting requirements. After the relevant retention period expires, we will either securely delete or anonymise your personal data so that it can no longer be associated with you.
Data Security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, encryption or pseudonymisation where appropriate, secure storage, and regular review of our security practices. While we strive to protect your personal data, no system can be guaranteed as completely secure and you should take care when sharing information with us.
Your Data Protection Rights
Under the UK GDPR and related laws, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions:
Right of access: you have the right to obtain confirmation as to whether we process your personal data and, if we do, to request a copy of your personal data and information about our processing.
Right to rectification: you have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to erasure: in certain circumstances, you may have the right to request deletion of your personal data, for example where the data is no longer needed for the purposes for which it was collected or where you withdraw consent and no other legal basis applies.
Right to restriction of processing: you may request that we restrict our processing of your personal data in certain situations, such as where you contest the accuracy of the data or object to our processing and we are considering your request.
Right to data portability: you may have the right to receive personal data you have provided to us in a structured, commonly used and machine readable format and to request that we transmit it to another controller where technically feasible and where the legal basis is consent or contract.
Right to object: you have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling based on those interests. You also have the right to object at any time to processing of your personal data for direct marketing.
Right to withdraw consent: where we rely on your consent to process your personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
If you wish to exercise any of these rights, please contact us using the contact methods you normally use for our services. We may need to verify your identity before responding to your request.
Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us in the first instance so we can try to resolve the issue. You also have the right to lodge a complaint with the UK Information Commissioner's Office or another competent supervisory authority where you live or work or where an alleged infringement of data protection laws has taken place.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. We will post the updated version with a revised date and encourage you to review it periodically. Continued use of our services after any changes are made will be taken as your acknowledgment of those changes.