Privacy Policy - Wimbledon Carpet Cleaners

This Privacy Policy explains how Wimbledon Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Wimbledon Carpet Cleaners customers in the area, including individuals who request quotations, book services, receive cleaning services, or otherwise interact with us in connection with our carpet cleaning and related services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

By using our services, you acknowledge that your personal data may be processed as described in this policy. We only collect and use data where there is a valid reason to do so, and we take appropriate measures to protect the information entrusted to us.

1. Data We Collect

We may collect and process different types of personal data depending on how you interact with us. The data we collect is limited to what is necessary for the purposes described in this policy.

Information you provide directly

Identity details such as your name.
Contact details such as address, email address, and telephone number.
Service information such as cleaning requirements, property access details, preferred appointment times, and special instructions.
Communication records including messages, call notes, complaints, feedback, and service-related correspondence.
Payment-related information where required to arrange or confirm payment, though payment card details are usually processed by secure third-party payment providers and not stored by us directly.

Information collected automatically

We may collect limited technical information when you visit our digital platforms or communicate with us electronically. This may include device type, browser type, approximate location, and usage information. This data is generally used for security, service improvement, and record-keeping.

Information from third parties

We may receive personal data from third parties where necessary for service delivery, business administration, or legal compliance. For example, this may include referrals, property access arrangements, or outsourced support services. We only use such data where it is lawful to do so.

2. How We Use Personal Data

We use personal data for legitimate business purposes, including the following:

To provide quotations and manage bookings.
To deliver carpet cleaning and related services.
To communicate with you regarding appointments, service updates, and customer support.
To process payments, issue invoices, and manage accounts.
To maintain accurate business records.
To respond to complaints, disputes, or service queries.
To improve the quality, efficiency, and safety of our services.
To comply with legal and regulatory obligations.
To protect our business, staff, and customers from fraud, misuse, or unlawful activity.

We will not use your personal data for purposes that are incompatible with the reasons for which it was collected, unless we have a lawful basis to do so and, where required, your consent.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing personal data. We rely on the following lawful bases depending on the purpose:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes, booking services, delivering cleaning work, and managing related communication and payments.

Legal obligation

We may process personal data where required to comply with legal duties, such as tax, accounting, record-keeping, fraud prevention, or responding to lawful requests from authorities.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include service administration, internal record-keeping, quality control, customer support, and business protection.

Consent

In limited situations, we may rely on your consent, for example for certain optional marketing communications. Where consent is used, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

4. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the nature of the information and the reason it is held.

Customer and service records are generally retained for the period needed to manage the service relationship and resolve any follow-up issues.
Financial records may be retained for the period required by tax and accounting law.
Complaint and correspondence records may be retained for a reasonable period to support service management and dispute resolution.
Marketing preferences are retained until you opt out or withdraw consent where applicable.

When personal data is no longer needed, it is securely deleted, anonymised, or destroyed. We review retention needs periodically to ensure data is not kept longer than necessary.

5. Data Processors and Third Parties

We may share personal data with trusted third parties who act as processors or independent controllers, but only where necessary and appropriate. These third parties may include:

IT and cloud service providers that store or support our records and systems.
Payment service providers that handle transactions securely.
Accounting and professional advisers who assist with financial, legal, or compliance matters.
Communication service providers that help us send appointment updates or service notices.
Subcontractors or operational partners involved in delivering services on our behalf where necessary.

Where a third party processes personal data on our behalf, we require appropriate contractual protections and expect them to use the data only in line with our instructions and applicable data protection law. We do not sell personal data.

6. International Transfers

If personal data is transferred outside the United Kingdom, we will ensure that suitable safeguards are in place to protect it. These safeguards may include adequacy regulations, standard contractual clauses, or other legally approved transfer mechanisms. We take reasonable steps to ensure your information remains protected wherever it is processed.

7. Data Security

We use appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, misuse, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our procedures. While no system is completely secure, we work diligently to reduce risk and protect the information we hold.

8. Your Rights

As a data subject, you have a number of rights under data protection law. Subject to legal conditions and exemptions, you may have the right to:

Access the personal data we hold about you.
Rectification of inaccurate or incomplete data.
Erasure of personal data in certain circumstances.
Restriction of processing in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability for information you provided to us where applicable.
Withdraw consent where processing is based on consent.

You also have the right to raise concerns with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed. We encourage you to contact us first so we can try to resolve any issue promptly and fairly.

9. Children’s Data

Our services are intended for adults and business-related customers. We do not knowingly collect personal data from children except where it is necessary in a service context and lawfully provided by an adult customer or authorised representative. If we become aware that we have collected such data without proper basis, we will take appropriate steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our internal practices. Any changes will take effect when the revised policy is made available. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

11. Summary of Key Commitments

Wimbledon Carpet Cleaners is committed to respecting privacy and handling data responsibly. In summary, we:

collect only the personal data necessary to provide our services;
use data only for clear, lawful purposes;
retain information for no longer than needed;
share data only with trusted processors or where legally required;
protect data using appropriate security measures; and
respect your rights under data protection law.

This Privacy Policy applies to all Wimbledon Carpet Cleaners customers in the area and is designed to ensure that your personal data is handled with care, transparency, and accountability. We aim to keep our practices straightforward, lawful, and aligned with the principles of data minimisation, purpose limitation, and storage limitation.