Privacy Policy - Carpetcleaning EN5

This Privacy Policy explains how Carpetcleaning EN5 collects, uses, stores, shares, and protects personal data. It applies to all Carpetcleaning EN5 customers in the area, including individuals who request quotations, book services, make enquiries, or receive cleaning services. We are committed to handling personal information lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Carpetcleaning EN5 acts as the data controller for the personal data described in this policy. This means we decide how and why personal data is processed in connection with our carpet cleaning and related services. We only process personal data where we have a valid legal ground to do so, and we take appropriate steps to keep it secure.

2. Personal Data We Collect

We collect only the information necessary to provide our services, manage customer relationships, and meet our legal obligations. Depending on how you interact with us, we may collect the following categories of data:

Identity data such as your name, title, and any business or property name you provide.
Contact data such as address, email address, and telephone number.
Service data such as property details, carpet or upholstery cleaning requirements, access instructions, booking dates, and service preferences.
Payment data such as payment status, transaction reference, and billing details, where needed for invoicing and accounting.
Communication data such as messages, feedback, complaints, and notes relating to enquiries or appointments.
Technical data if you interact with our digital systems, including basic usage information and device-related identifiers, where applicable.
Legal and compliance data where we need to record information for fraud prevention, insurance, tax, or record-keeping purposes.

We do not intentionally collect special category data unless it is provided voluntarily and is necessary for a specific and lawful reason. If such data is ever relevant, we will process it only where an appropriate legal condition applies.

3. How We Use Personal Data

We use personal data for the following purposes:

To provide quotations and manage bookings.
To carry out carpet cleaning and related services.
To communicate about appointments, updates, and service changes.
To process payments, issue invoices, and maintain accounting records.
To respond to questions, complaints, or requests.
To maintain records of work completed and ensure service quality.
To comply with legal, tax, regulatory, and insurance obligations.
To protect our business from fraud, misuse, or unlawful activity.
To improve service delivery and customer experience.

We only use personal data for the purposes for which it was collected, unless we reasonably believe another compatible purpose applies or we are required by law to use it differently.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Carpetcleaning EN5 relies on one or more of the following legal grounds:

Contract

We process personal data where it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes managing bookings, delivering cleaning services, and handling invoices.

Legal Obligation

We may process personal data where needed to comply with legal obligations, including tax, accounting, consumer protection, and record retention requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This includes maintaining service records, improving operations, preventing fraud, and responding to service issues. When relying on legitimate interests, we consider whether the processing is reasonable and proportionate.

Consent

In limited cases, we may rely on your consent, for example for certain optional marketing communications or specific processing activities. Where consent is used, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties who help us deliver our services. These organisations act as processors when they process data on our behalf and according to our instructions. They are required to protect your data and use it only for the agreed purpose.

Examples of processors or service providers may include:

Payment processors for handling card or electronic payments.
Accounting and bookkeeping providers for financial administration.
IT and hosting providers for secure storage, software support, and system maintenance.
Communication tools used to send service-related messages.
Business administration providers assisting with scheduling or record management.

We may also disclose data where required by law, to law enforcement, regulators, insurers, or professional advisers, or to protect our rights, property, staff, customers, or the public. We do not sell personal data.

6. International Transfers

If any processor stores or accesses data outside the United Kingdom, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent legal mechanisms designed to protect your personal data to the required standard.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods vary depending on the type of record and the reason it is held.

Customer and service records are usually retained for the period needed to manage the relationship and handle follow-up issues.
Financial records are retained for the period required by tax and accounting law.
Communication records may be retained for a reasonable period to resolve disputes, improve service, or demonstrate compliance.
Where data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

We review retention regularly to make sure personal data is not kept longer than necessary. In some cases, we may retain records for longer where required by law or where needed to establish, exercise, or defend legal claims.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our data handling practices. While no system can be guaranteed to be completely secure, we take reasonable steps to safeguard the information entrusted to us.

9. Your Rights

As a data subject, you have rights under data protection law. These rights may apply depending on the circumstances and the legal basis for processing.

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete data.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restriction - to ask us to limit how your data is used in certain cases.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to receive certain data in a structured, commonly used, machine-readable format.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.
Right to complain - to raise concerns with the relevant data protection supervisory authority.

We may need to verify your identity before responding to a rights request. We aim to respond within the time limits required by law.

10. Cookies and Similar Technologies

If we use websites, online forms, or digital tools, we may use cookies or similar technologies to support functionality, improve performance, and understand basic usage patterns. Where consent is required, we will request it in line with applicable law. You can manage cookie preferences through your browser settings or any available on-site controls.

11. Children’s Data

Our services are intended for adult customers and property occupants acting on behalf of a household or business. We do not knowingly collect personal data from children in the ordinary course of our services. If we become aware that such data has been collected without proper authority, we will take appropriate steps to delete it or obtain the necessary consent where lawful and appropriate.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

13. Summary of Our Commitment

Carpetcleaning EN5 is committed to processing personal data lawfully, securely, and transparently. We collect only what we need, use it for legitimate service-related purposes, keep it only for as long as necessary, and respect your rights under data protection law. This policy applies to all Carpetcleaning EN5 customers in area, and we take our responsibilities seriously in every stage of data handling.

Last updated: 2026