Privacy Policy - Pinner Carpet Cleaners

Effective from: This Privacy Policy applies to all Pinner Carpet Cleaners customers in the area and explains how we collect, use, store, share, and protect personal data in accordance with the UK GDPR and the Data Protection Act 2018.

1. Introduction

Pinner Carpet Cleaners is committed to protecting your privacy and handling your personal information responsibly and transparently. This policy sets out what personal data we collect, why we collect it, the lawful basis we rely on, how long we keep it, who may process it on our behalf, and the rights you have regarding your information. We only process personal data where it is necessary, relevant, and limited to what is required for legitimate business and service purposes.

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our services, or our internal practices. Any updated version will apply from the date it is published or otherwise communicated.

2. Personal Data We Collect

We collect personal data directly from you, from your use of our services, and occasionally from third parties where permitted by law. The type of information we may collect includes:

Identity information: your name and, where relevant, company or property details.
Contact information: address, telephone number, and email address.
Service information: details about the carpet cleaning, upholstery cleaning, stain treatment, or related service you request or receive.
Billing and payment information: payment status, transaction records, and limited financial details needed to process payments or issue receipts.
Communication records: messages, notes, feedback, complaints, and service-related correspondence.
Technical and usage information: device or browser data, IP address, and website interaction data if you use our digital services.
Marketing preferences: your choices about receiving promotional or informational communications.

We do not intentionally collect special category data unless you voluntarily provide it and it is relevant to the service, such as health-related access needs that affect how we carry out a cleaning appointment. If such information is provided, we will handle it with additional care and only where permitted by law.

3. How We Use Your Data

We use your personal data to:

provide quotes, bookings, and cleaning services;
manage customer accounts and service records;
communicate with you about appointments, service updates, or changes;
process payments, refunds, and invoices;
respond to questions, complaints, or service issues;
maintain business records and service quality;
meet legal, tax, and regulatory obligations;
improve our services, systems, and customer experience;
send direct marketing where we are allowed to do so and where you have not opted out.

We only use your personal data for the purpose for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose and that such use is permitted by law.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing your personal data. Depending on the situation, we rely on one or more of the following lawful bases:

Contract

We process your personal data when it is necessary to enter into or perform a contract with you, such as arranging a carpet cleaning appointment, providing a quote, delivering services, or handling payment.

Legal Obligation

We may process your data where necessary to comply with legal obligations, including accounting, tax, insurance, record-keeping, or responding to lawful requests from public authorities.

Legitimate Interests

We may use your data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include improving our services, managing operations, preventing fraud, keeping records, and handling customer communication.

Consent

In some situations, we rely on your consent, such as for certain types of marketing or where you provide optional information that is not required for service delivery. When consent is used, you may withdraw it at any time.

Vital Interests

In rare cases, we may process information to protect someone’s vital interests, for example if there is an emergency affecting health or safety during a service visit.

5. Data Sharing and Processors

We do not sell your personal data. However, we may share it with trusted third-party service providers and processors who assist us in operating our business and delivering services. These parties are only allowed to process your data on our instructions and must protect it appropriately.

Examples of processors may include:

Payment service providers that handle secure transaction processing;
Booking and administration software providers that help manage appointments and customer records;
IT and cloud hosting providers that store or support our systems;
Communication providers that help us send emails, messages, or service updates;
Professional advisers such as accountants, insurers, or legal advisers where necessary;
Delivery or subcontracted service providers if required to complete a requested service.

Where required, we ensure that appropriate data processing agreements are in place. If personal data is transferred outside the UK, we will take appropriate safeguards to protect it, such as approved transfer mechanisms or adequacy decisions.

6. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, including to meet legal, accounting, tax, or reporting requirements. Retention periods may vary depending on the type of data and the reason for holding it.

Service and booking records may be kept for a reasonable period to manage customer history, disputes, and quality control.
Financial and tax-related records are typically retained for the period required by law.
Communication records may be stored for as long as needed to respond to queries, resolve complaints, or maintain service records.
Marketing preferences are kept until you opt out or we determine that the information is no longer needed.

When data is no longer required, it will be securely deleted, anonymised, or archived in line with our retention practices.

7. Data Security

We use appropriate technical and organisational measures to safeguard personal data against accidental loss, unlawful access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, restricted permissions, and staff awareness procedures. While no system can be guaranteed completely secure, we take reasonable steps to protect your information.

Only authorised personnel and approved processors may access personal data when necessary for legitimate business purposes.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions or exemptions.

Right of access: you can ask for a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: you can ask us to delete your data in certain circumstances.
Right to restrict processing: you can ask us to limit how we use your data in certain cases.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you can ask for certain data to be provided in a structured, commonly used format where applicable.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the timeframes required by law and may need to verify your identity before acting on your request.

9. Marketing Preferences

If we send you marketing communications, you may opt out at any time. We will respect your choice and stop sending promotional messages where required. However, we may still contact you with essential service-related information that is not promotional in nature.

10. Complaints

If you have concerns about how we handle your personal data, we encourage you to raise them with us so we can review and address the matter. You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed.

11. Children’s Data

Our services are intended for adults and property-related customers. We do not knowingly collect personal data from children except where it is unavoidably provided in the context of service administration and is necessary for a lawful purpose.

12. Changes to This Policy

We may change this Privacy Policy from time to time to ensure it remains accurate and compliant. Any changes will be reflected in the updated version of the policy. We recommend reviewing this page periodically so you remain informed about how we protect your information.

By using our services, you acknowledge that you have read and understood this Privacy Policy.