Privacy Policy - St Pancras Carpet Cleaners

This Privacy Policy explains how St Pancras Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all St Pancras Carpet Cleaners customers in the area, including individuals who request quotations, book services, receive cleaning services, or otherwise interact with us in connection with carpet cleaning and related services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who This Policy Applies To

This Policy applies to customers, prospective customers, and anyone acting on behalf of a customer who engages with St Pancras Carpet Cleaners. It also applies to personal data collected during enquiries, bookings, service delivery, billing, follow-up communications, and any complaint or feedback process. If you use our services in the St Pancras area, this Policy applies to you.

2. Information We Collect

We collect only the personal data that is necessary for the purposes described in this Policy. The types of information we may collect include:

Identity details such as your name and, where relevant, the name of your household or business.
Contact details such as your address, telephone number, and email address.
Service details such as the type of cleaning requested, property access information, appointment preferences, and notes about the work to be carried out.
Billing and payment information such as invoice details, payment status, and transaction records. We do not unnecessarily store card details where payment is processed through secure third-party systems.
Communication records including messages, booking confirmations, complaints, feedback, and any correspondence relating to our services.
Technical and usage information if you interact with us through digital systems, such as basic device or log data used for security and operational purposes.

We may also receive information from third parties where necessary, for example from a customer who books on behalf of another person, from property managers, or from payment providers confirming that a transaction has been completed.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To schedule, confirm, and deliver carpet cleaning services.
To manage customer accounts, invoicing, and payment administration.
To communicate about appointments, service updates, or aftercare information.
To handle complaints, service issues, and customer feedback.
To maintain business records and meet legal or regulatory obligations.
To protect our services, staff, and customers against fraud, misuse, or security incidents.

We only use personal data where we have a lawful basis to do so, as set out below.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. Depending on the circumstances, St Pancras Carpet Cleaners relies on the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotations, confirming appointments, completing cleaning services, issuing invoices, and managing related customer communications.

Legal Obligation

We process certain data when required to comply with legal obligations, such as tax, accounting, record-keeping, or health and safety requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining service records, improving operations, preventing fraud, and responding to enquiries or complaints. We always consider whether the processing is necessary and proportionate.

Consent

In limited cases, we may rely on your consent, for example where it is required for certain optional communications. Where consent is used, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out lawfully before withdrawal.

5. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as processors when they handle data on our behalf, and they are only permitted to use it in accordance with our instructions and applicable law.

Examples of processors may include:

Payment processors who securely handle transactions.
Accounting and bookkeeping providers who assist with financial records and tax compliance.
IT, hosting, and software providers who support our systems, data storage, and communications.
Customer management or scheduling tools that help us organise bookings and service delivery.
Professional advisers such as insurers, auditors, or legal advisers where necessary.

We may also disclose personal data to public authorities, regulators, or law enforcement where we are required to do so by law. We do not sell your personal data.

6. International Transfers

If any processor stores or accesses personal data outside the United Kingdom, we ensure appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other legally recognised transfer mechanisms. We take reasonable steps to ensure your data receives an adequate level of protection wherever it is processed.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including for the purposes of satisfying legal, accounting, tax, or reporting requirements. Retention periods vary depending on the type of record and the reason it is held.

In general:

Quotation and enquiry records are kept for a reasonable period to manage follow-up and service history.
Service and invoice records are retained for the period required by law and for business administration.
Complaint and correspondence records may be retained for as long as needed to resolve the issue and protect our legitimate interests.

When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in line with our retention practices.

8. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to certain conditions or exemptions.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in some circumstances, you can request that we delete your personal data.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests, including direct marketing where applicable.
Right to data portability – you may request that certain data be provided to you or another controller in a structured, commonly used format.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law and within the required timeframes. We may need to verify your identity before acting on your request.

9. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures are designed to reflect the nature of the data and the risks involved. However, no system can be guaranteed to be completely secure, so we also rely on staff awareness, access controls, and careful handling of records.

10. Children’s Data

Our services are generally intended for adults. We do not knowingly collect personal data from children except where it is necessary in connection with a household booking or property access and only to the extent required for the service. If we become aware that we have collected data improperly, we will take appropriate steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or the way we provide our services. Any updated version will apply from the date it is made available. We encourage customers in the St Pancras area to review this Policy periodically so they remain informed about how their data is handled.

12. Summary of Our Commitment

St Pancras Carpet Cleaners is committed to processing personal data responsibly, transparently, and securely. We collect only what we need, use it for clear and lawful purposes, share it only with trusted processors when necessary, and retain it only for as long as required. We respect your rights and aim to ensure that every customer in the St Pancras area can trust us with their personal information.

This Privacy Policy applies to all St Pancras Carpet Cleaners customers in the area.