Privacy Policy - Maidavale Carpet Cleaners

This Privacy Policy explains how Maidavale Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Maidavale Carpet Cleaners customers in area, including individuals who request quotations, book services, receive cleaning services, or otherwise interact with us in connection with our carpet cleaning and related services.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is written to help you understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have in relation to your data.

1. Information We Collect

We collect only the information that is necessary to provide our services, manage our business, and meet legal obligations. Depending on your interaction with us, we may collect the following categories of personal data:

Identity information such as your name and, where relevant, the name of your business or property owner.
Contact information including your address, email address, and telephone number.
Service information such as details of the cleaning service requested, property access notes, preferred dates, and instructions.
Billing and transaction information including payment status, invoices, receipts, and records of amounts paid.
Communication records such as correspondence, enquiries, complaint details, and service-related notes.
Technical information if you contact us through digital systems, such as basic device or log data needed to protect our systems and improve service reliability.

We do not intentionally collect special category data unless it is necessary and you choose to provide it. If such information is ever disclosed to us incidentally, we will only process it where there is a lawful basis and appropriate safeguards.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotations and manage bookings.
To deliver carpet cleaning and related services at your property.
To communicate with you about appointments, changes, and service updates.
To manage payments, invoicing, and account records.
To respond to enquiries, feedback, and complaints.
To maintain our business records and improve our services.
To comply with legal and regulatory obligations, including tax and accounting requirements.
To protect our business, staff, and customers from fraud, misuse, or unlawful activity.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose and the law allows this.

3. Lawful Basis for Processing

We rely on one or more lawful bases under the UK GDPR to process personal data. These include:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotations at your request, confirming bookings, carrying out carpet cleaning services, and processing related payments.

Legal Obligation

We process certain information when required to comply with legal obligations, such as keeping tax records, maintaining accounting documents, and responding to lawful requests from authorities.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include managing our operations, safeguarding our property and systems, handling service issues, and improving our customer experience.

Consent

In limited circumstances, we may rely on your consent, for example where the law requires consent for a particular type of communication or processing. Where we rely on consent, you may withdraw it at any time.

4. Sharing and Processors

We do not sell your personal data. We may share it with trusted third parties where necessary to run our business and provide services. These third parties act as processors or independent controllers depending on the situation.

Processors may include:

Payment service providers who handle card or electronic payments securely.
Accounting and bookkeeping providers who assist with financial records and tax compliance.
IT and cloud service providers who support data storage, email, scheduling, or business administration tools.
Customer management or booking system providers used to organise appointments and service records.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

We require processors to handle your data securely, to use it only for our instructions, and to comply with applicable data protection law. Where data is shared with independent controllers, those parties are responsible for their own privacy practices.

5. International Transfers

If any processor or service provider stores or accesses personal data outside the UK, we will take appropriate steps to ensure a comparable level of protection. These steps may include the use of approved contractual safeguards and other lawful transfer mechanisms.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, and reporting requirements. Retention periods vary depending on the type of data and the reason for processing.

Customer and service records are generally kept for the duration of the business relationship and for a reasonable period afterwards.
Invoices, payment records, and tax documentation are typically retained for the period required by law and accounting practice.
Enquiry and correspondence records may be kept for as long as needed to deal with queries, disputes, or service follow-up.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

7. Security of Your Data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, restricted permissions, and staff awareness procedures. While no system can be guaranteed to be completely secure, we work to maintain a level of security appropriate to the risks involved.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and legal basis for processing:

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete information.
Right to erasure – in certain circumstances, you may ask us to delete your personal data.
Right to restrict processing – you may request that we limit how we use your data in certain situations.
Right to object – you may object to processing based on legitimate interests in certain cases.
Right to data portability – where applicable, you may request that we provide your data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you may withdraw that consent at any time.

You also have the right to raise concerns with the UK Information Commissioner’s Office if you believe your data protection rights have not been respected.

9. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children. If we become aware that data has been collected from a child without appropriate authority, we will take reasonable steps to delete it promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our data handling practices. The updated version will apply from the date it is issued. We encourage customers to review this policy periodically so they remain informed about how their personal data is used.

11. Summary of Key Points

Maidavale Carpet Cleaners collects only the information needed to deliver services, manage accounts, and meet legal obligations. We process data under lawful bases including contract, legal obligation, legitimate interests, and, in some cases, consent. We retain data only as long as necessary, share it only with trusted processors and advisers where appropriate, and respect your rights under data protection law. This policy applies to all Maidavale Carpet Cleaners customers in area.

By using our services, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.