Privacy Policy - Finchley Carpetcleaning

This Privacy Policy explains how Finchley Carpetcleaning collects, uses, stores, shares, and protects personal data. It applies to all Finchley Carpetcleaning customers in the area, including anyone who enquires about our services, books a service, receives a quotation, or otherwise interacts with us. We are committed to handling personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Finchley Carpetcleaning is the data controller for the personal data we collect and use in connection with our services. This means we decide how and why your personal data is processed. We take data protection seriously and aim to use personal information fairly, lawfully, transparently, and securely.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: your name and, where relevant, business name.
Contact data: address, email address, and telephone number.
Service data: details about the carpet cleaning, upholstery cleaning, stain treatment, or related service you request or receive.
Payment data: limited payment-related information needed to process invoices or confirm payment, where applicable.
Communication data: records of messages, calls, complaints, feedback, and service-related correspondence.
Technical data: basic information collected through digital interaction, such as IP address or device information, if you contact us through online channels.
Location data: property location or service address needed to attend and complete work.

We do not intentionally collect special category data unless it is provided by you and strictly necessary to deliver our services or handle a specific request. If such information is shared, we will only process it where permitted by law and with appropriate safeguards.

3. How We Collect Your Data

We collect personal data in the following ways:

directly from you when you make an enquiry, request a quote, or book a service;
during the delivery of our services;
through messages, calls, or written correspondence;
from third parties where necessary to support a booking, payment, or service arrangement;
from publicly available sources where relevant and lawful.

We only collect data that is relevant and necessary for legitimate business purposes. We do not collect more data than we need and we aim to keep information accurate and up to date.

4. Lawful Basis for Processing

We only process personal data where we have a lawful basis under UK GDPR. Depending on the circumstances, our lawful bases may include:

Contract: processing is necessary to provide a quotation, accept a booking, perform carpet cleaning services, or manage the customer relationship.
Legal obligation: processing is necessary to comply with laws relating to tax, accounting, or record-keeping.
Legitimate interests: processing is necessary for our legitimate business interests, such as improving services, handling customer communications, and preventing fraud, provided your rights do not override those interests.
Consent: where required by law, for certain types of optional marketing or non-essential communications.

Where we rely on consent, you may withdraw it at any time. This will not affect processing carried out before withdrawal.

5. How We Use Personal Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to arrange and carry out cleaning services;
to manage appointments, scheduling, and customer records;
to process payments and maintain financial records;
to deal with complaints, queries, and service issues;
to improve our services, operations, and customer experience;
to comply with legal and regulatory obligations;
to protect our business, staff, and customers from misuse or fraud.

Where we use data for analysis or service improvement, we do so in a way that is proportionate and respectful of privacy. Personal data is never used for unrelated purposes without a lawful basis.

6. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors on our behalf. These processors only handle data according to our instructions and are required to protect it under contract and applicable law. Examples of processors may include:

IT and cloud service providers that store or support our business records;
accounting or bookkeeping providers that help manage invoices and tax records;
payment service providers that process payments securely;
communication tools used to send appointment updates or service messages;
business support providers who help with administration and operational tasks.

We may also disclose personal data where required by law, to legal advisers, to law enforcement, or to other parties where necessary to protect our rights, property, or safety. We do not sell personal data.

7. International Transfers

If any processor stores or accesses personal data outside the UK, we will ensure suitable safeguards are in place. These may include approved transfer mechanisms and contractual protections designed to keep your data secure and treated in accordance with UK data protection law.

8. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason for processing. In general:

customer enquiry records may be kept for a reasonable period to manage follow-up and service history;
service and booking records may be retained for business administration and dispute resolution;
financial and tax-related records may be retained for the period required by law;
unused or outdated data will be securely deleted or anonymised when no longer needed.

When data is no longer required, we ensure it is disposed of securely. We regularly review stored information to make sure it remains necessary and relevant.

9. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and limiting access to only those who need it. While no system can be guaranteed to be perfectly secure, we take reasonable steps to reduce risk and maintain confidentiality.

10. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These may include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restrict processing: to ask us to limit how we use your data in certain situations.
Right to data portability: to receive certain data in a structured, commonly used format.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent.

These rights are not absolute and may be subject to legal exemptions. If you wish to exercise a right, we will respond in accordance with applicable data protection law.

11. Marketing Preferences

Where we send optional marketing or promotional communications, we will only do so in accordance with applicable law. You may opt out of such communications at any time. If you object to marketing, we will stop using your data for that purpose as soon as reasonably possible.

12. Children’s Data

Our services are directed to adult customers and property occupiers. We do not knowingly collect personal data from children for marketing or routine service purposes. If we become aware that we have received such data inadvertently, we will take appropriate steps to delete it unless there is a lawful reason to retain it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. Any updated version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically so they remain informed about how their data is used.

14. Contact and Complaints

If you have concerns about how we handle your personal data, you may contact us through the usual business channels used for service communication. We will aim to resolve issues promptly and fairly.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed. We encourage you to contact us first so that we can try to address your concerns directly.

15. Summary of Our Approach

Finchley Carpetcleaning is committed to privacy, transparency, and lawful handling of personal data. We collect only what we need, use it for clear business purposes, retain it only as long as necessary, and protect it through appropriate safeguards. This policy applies to all Finchley Carpetcleaning customers in the area and is intended to ensure that your information is treated with care and respect.