Privacy Policy - North Ockendon Carpet Cleaners

North Ockendon Carpet Cleaners is committed to protecting the privacy and personal data of every customer in our service area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when providing carpet cleaning and related services. It applies to all North Ockendon Carpet Cleaners customers in the area, including prospective customers, existing customers, and anyone who contacts us to request a quotation, service booking, follow-up support, or billing information.

We aim to handle personal data fairly, lawfully, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully to understand how we process your information and what rights you have.

1. Information We Collect

We only collect personal data that is necessary to provide our cleaning services, manage customer relationships, and operate our business effectively. Depending on how you interact with us, we may collect the following categories of information:

Identity details: name, title, and any information needed to identify you as a customer or contact person.
Contact details: address, email address, and telephone number.
Service details: property access instructions, information about carpets or fabrics to be cleaned, preferred appointment times, and service history.
Billing and payment information: invoice details, payment status, and records needed for accounting and tax purposes.
Communication records: messages, call notes, complaints, feedback, and other correspondence related to our services.
Technical information: limited data such as basic website or device interaction information, if you use digital channels to contact us.

We do not intentionally collect special category personal data unless it is necessary and you choose to provide it. Special category data includes information such as health details, religious beliefs, or political opinions. If such information is ever shared with us accidentally, we will treat it with appropriate care and only process it where a lawful basis applies.

2. How We Use Your Personal Data

We use personal data to operate our carpet cleaning services and to ensure a smooth customer experience. Our purposes may include:

responding to enquiries and providing quotations;
booking, confirming, and delivering cleaning services;
planning routes, managing appointments, and arranging access to premises;
issuing invoices and processing payments;
handling complaints, service issues, and follow-up requests;
maintaining records for administration, quality control, and business analysis;
meeting legal, accounting, and tax obligations;
protecting our business against fraud, misuse, or security incidents.

We will only use your personal data in ways that are compatible with the purposes described in this policy. If we need to use your data for a new purpose that is materially different, we will explain this and, where required, seek your consent or identify another lawful basis.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing personal data. North Ockendon Carpet Cleaners relies on the following legal bases depending on the activity:

Contract

We process personal data where it is necessary to take steps at your request before entering into a contract or to perform our contract with you. This includes preparing quotes, booking appointments, carrying out cleaning services, and issuing invoices.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Examples include managing customer records, improving service quality, maintaining security, recovering outstanding payments, and handling complaints.

Legal Obligation

We process certain data to comply with legal requirements, such as accounting rules, tax recordkeeping, and responding to lawful requests from authorities where applicable.

Consent

Where required by law, we will rely on your consent. For example, if we ever ask to use your information for optional marketing communications, you may withdraw consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

4. Sharing Your Data with Processors and Other Third Parties

We may share personal data with trusted third parties who help us deliver our services. These parties act as processors or, in some cases, independent controllers. We only share what is necessary and require appropriate data protection safeguards.

Payment processors: used to handle card or electronic payments securely.
Accounting and bookkeeping providers: used for invoicing, tax compliance, and financial administration.
IT and data storage providers: used for secure storage, email, systems maintenance, and business operations.
Scheduling or administration tools: used to manage bookings and customer records.
Professional advisers: including accountants, legal advisers, or insurers where necessary.
Public authorities: where disclosure is required by law or to protect our legal rights.

All processors are required to handle data in accordance with data protection law and only on our instructions. We do not sell personal data.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. The length of time may vary depending on the type of data and the purpose of processing.

In general:

Customer service and booking records are kept for the period needed to manage our relationship and resolve any issues.
Financial and invoicing records are retained for the period required by tax and accounting law.
Correspondence and complaint records are kept for a reasonable period to support service management and dispute resolution.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer be linked to an individual. Where different retention periods apply, the longer period will generally take precedence if required by law or legitimate business need.

6. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and appropriate procedures for handling records.

Although we work to protect your information, no system can be guaranteed to be completely secure. If a personal data breach occurs and it is likely to result in a risk to your rights and freedoms, we will take the steps required by law, which may include notifying the relevant authority and, where appropriate, affected individuals.

7. Your Rights

Under data protection law, you have important rights regarding your personal data. These rights may apply depending on the lawful basis for processing and the circumstances of the request.

Right of access: you can ask for a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: in certain cases, you can ask us to delete your data.
Right to restriction: you can ask us to limit how we use your data in some situations.
Right to object: you can object to processing based on legitimate interests, and in some cases to direct marketing.
Right to data portability: where applicable, you can request certain data in a structured, commonly used format.
Right to withdraw consent: where we rely on consent, you can withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law. In some cases, we may need to retain certain information to comply with legal obligations or to defend legal claims.

8. International Transfers

Where any of our processors or systems involve the transfer of personal data outside the UK, we will ensure appropriate safeguards are in place to protect that data. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms permitted under data protection law.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any updates will take effect when published as part of our current policy. We encourage customers to review this policy periodically to stay informed about how we protect personal information.

10. Summary of Our Commitment

North Ockendon Carpet Cleaners is committed to using personal data responsibly, securely, and transparently. We collect only what we need, process it on a lawful basis, share it only with trusted processors or where legally required, retain it for no longer than necessary, and respect your rights under data protection law. This policy applies to all North Ockendon Carpet Cleaners customers in area and is intended to provide clear information about how we handle personal data in the course of our services.