Privacy Policy - Newington Carpet Cleaners

This Privacy Policy explains how Newington Carpet Cleaners collects, uses, stores, shares, and protects personal data relating to its customers in the Newington area. It applies to all Newington Carpet Cleaners customers in area, including residential and commercial customers, prospective customers, and anyone who interacts with our services. We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all other applicable privacy laws.

1. Who We Are

For the purposes of data protection law, Newington Carpet Cleaners is the data controller for the personal information described in this policy. This means we determine why and how your personal data is used when you request, book, receive, or enquire about our services. We only process personal data where we have a lawful basis to do so and where we have a genuine business need related to providing carpet cleaning and related services.

2. Personal Data We Collect

We collect only the data that is necessary and relevant to provide our services, manage our business operations, and meet our legal obligations. Depending on your interaction with us, this may include:

• Identity data such as your name and title.
• Contact data such as address, telephone number, and email address.
• Service information such as booking details, service preferences, property access instructions, and records of work carried out.
• Payment data such as payment status, transaction references, and limited billing details.
• Communication data such as emails, messages, call notes, and service enquiries.
• Technical data where relevant, including basic website or device information if you interact with online forms or digital services.
• Complaint and feedback data including reviews, concerns, or requests for service follow-up.

We do not intentionally collect special category data unless it is necessary for a specific service and you choose to provide it. If such information is shared with us inadvertently, we will only process it where the law permits and where it is relevant to your request.

3. How We Use Your Data

We use personal data for the following purposes:

• To respond to enquiries and provide quotes.
• To schedule, deliver, and manage carpet cleaning services.
• To process payments, invoices, and related administration.
• To maintain service records and customer history.
• To communicate about appointments, changes, or service issues.
• To handle complaints, disputes, and customer care requests.
• To improve our services, quality standards, and operational efficiency.
• To comply with legal, accounting, tax, and regulatory requirements.

We process your data only to the extent necessary and in a way that respects your privacy. We do not sell personal data.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing personal data. Depending on the circumstance, Newington Carpet Cleaners relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to take steps at your request before entering into a contract, or to perform our contract with you. This includes managing bookings, delivering services, issuing invoices, and handling service-related communications.

Legal Obligation

We may process and retain certain data to meet legal obligations, including tax records, accounting requirements, consumer law, and other statutory duties.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. This can include managing customer records, preventing fraud, improving service quality, resolving complaints, and maintaining secure business operations.

Consent

In limited circumstances, we may rely on your consent, for example if we need permission to send certain types of marketing communications. Where consent is used, you may withdraw it at any time.

5. Data Sharing and Processors

We may share personal data with trusted third parties who act as data processors on our behalf. These processors only handle data according to our instructions and are required to protect it appropriately. Typical processors may include:

• Payment service providers for handling transactions.
• Booking or scheduling systems used to organise appointments.
• IT and cloud storage providers that support secure data hosting and backup.
• Accountants or bookkeeping services for financial administration.
• Customer communication tools used for service-related correspondence.

We may also share personal data with professional advisers, insurers, regulators, or law enforcement where necessary and lawful. If a business partner or contractor accesses personal data, they are required to maintain confidentiality and data security. We do not permit processors to use your personal data for their own purposes.

6. International Transfers

If any processor stores or accesses personal data outside the UK, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms designed to protect your information to an equivalent standard.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and no longer than is reasonably required by law or business needs. Retention periods depend on the type of data and the reason for processing.

• Customer service and booking records are generally retained for the period needed to manage the service relationship and address follow-up queries.
• Financial and tax records are kept for the period required by law.
• Complaint records may be retained for a reasonable period to resolve disputes and demonstrate compliance.
• Marketing consent records are kept until consent is withdrawn or the data is no longer needed.

When data is no longer required, we will securely delete, anonymise, or otherwise dispose of it. Retention is reviewed regularly to ensure we are not holding information for longer than necessary.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful selection of processors. While no system is completely secure, we take reasonable steps to safeguard the data we handle.

9. Your Rights

Under data protection law, you have a number of rights regarding your personal data. These rights may apply depending on the circumstances and the legal basis for processing. They include:

• The right of access to request a copy of the personal data we hold about you.
• The right to rectification to correct inaccurate or incomplete data.
• The right to erasure in certain cases, also known as the right to be forgotten.
• The right to restriction of processing in certain situations.
• The right to object to processing based on legitimate interests or direct marketing.
• The right to data portability where processing is based on consent or contract and carried out by automated means.
• The right to withdraw consent where processing relies on consent.

You also have the right to raise concerns about how your data is handled. If you believe your rights have not been respected, you may complain to the relevant data protection authority in the UK. We encourage customers to raise concerns so we can address them promptly and fairly.

10. Automated Decision-Making

We do not use fully automated decision-making or profiling that produces legal or similarly significant effects on individuals. Any decisions relating to customer service, quotations, or appointments are made by people, not by automated systems alone.

11. Marketing Communications

If we send service updates, offers, or promotional messages, we will do so only where permitted by law. You can ask us to stop receiving marketing communications at any time. Where required, we will seek your consent before sending such messages. We will not use your information for unrelated marketing purposes without a lawful basis.

12. Children’s Data

Our services are aimed at adults and businesses. We do not knowingly collect personal data from children in the ordinary course of business. If we become aware that we have received children’s data without appropriate justification, we will take steps to delete or securely handle it in accordance with the law.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their data is used.

14. Summary of Our Commitment

Newington Carpet Cleaners is committed to processing personal data fairly, lawfully, and transparently. We collect only what we need, use it for legitimate business purposes, keep it secure, retain it only for appropriate periods, and respect your rights under data protection law. This policy applies to all Newington Carpet Cleaners customers in area and is designed to ensure that your information is handled with care and responsibility.