Privacy Policy - Crystalpalace Carpetcleaning

This Privacy Policy explains how Crystalpalace Carpetcleaning collects, uses, stores, shares, and protects personal data. It applies to all Crystalpalace Carpetcleaning customers in area, including prospective customers, current customers, and individuals who enquire about our services. We are committed to handling personal data in a lawful, fair, and transparent manner, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to all Crystalpalace Carpetcleaning customers in area, as well as anyone who contacts us for information, requests a quotation, books a service, or communicates with us in connection with carpet cleaning, upholstery cleaning, rug cleaning, stain treatment, or related services. It also applies to individuals whose personal data we may receive from another person when arranging a service, such as a landlord, tenant, property manager, or family member.

2. What personal data we collect

We collect only the personal data that is necessary for providing our services, managing our business, and meeting legal obligations. Depending on the circumstances, we may collect the following categories of data:

Identity data such as your name, title, and any relevant business or property-related identifier.
Contact data such as your address, email address, and telephone number.
Service data such as details of the cleaning services requested, property access instructions, preferred appointment times, and notes about carpet or fabric condition.
Transaction data such as booking records, invoices, payment status, and service history.
Communication data such as messages, enquiries, complaints, feedback, and service-related correspondence.
Technical data where relevant, such as basic device or browser information if you interact with us electronically.
Special category data only in limited cases and only if you choose to provide it, for example information revealing health-related access needs or sensitivities that may affect how a service is delivered.

We do not seek to collect unnecessary personal data. Where special category data is shared, we handle it with additional care and only where a lawful basis permits us to do so.

3. How we use personal data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To manage bookings and deliver carpet cleaning and related services.
To communicate before, during, and after a service appointment.
To process payments and maintain accurate financial records.
To handle complaints, service issues, or requests for follow-up work.
To maintain internal business records and service histories.
To meet legal, tax, accounting, and regulatory obligations.
To improve our operations, service quality, and customer experience.
To protect our rights, prevent fraud, and ensure security.

We will not use your personal data for purposes that are incompatible with the original reason it was collected without first ensuring that we have a lawful basis to do so.

4. Lawful basis for processing

We process personal data only where permitted under UK GDPR. The lawful bases we rely on may include the following:

Contract

We process personal data where it is necessary to enter into or perform a contract with you, such as when booking, confirming, or completing a cleaning service.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing bookings, maintaining records, improving services, preventing misuse, and communicating about services you have requested.

Legal obligation

We process certain information to comply with legal and regulatory obligations, including tax, accounting, and record-keeping requirements.

Consent

Where consent is required, such as for certain optional communications or the processing of special category data in limited circumstances, we will request it clearly and you may withdraw it at any time.

Vital interests and public task

These bases are unlikely to apply to our normal carpet cleaning services, but they may be relied upon in exceptional circumstances if necessary.

5. Sharing personal data and processors

We may share personal data with trusted third parties who help us operate our business. These third parties act as processors when they handle personal data on our instructions and only for specified purposes. We require them to protect your information and to process it only in accordance with data protection law.

Processors may include:

Payment service providers that process card or electronic payments.
Booking, scheduling, or customer management systems used to organise appointments.
IT and cloud service providers that store or support our business data.
Accounting and bookkeeping providers who assist with financial records.
Communication tools used for sending service-related messages.

We may also disclose personal data where necessary to:

Comply with the law or a lawful request from public authorities.
Protect our legal rights, property, customers, or staff.
Support the prevention or investigation of fraud or abuse.

We do not sell your personal data.

6. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, and reporting obligations. Retention periods depend on the type of data and the context in which it was provided.

In general:

Customer service records and booking details are retained for a period needed to manage services and disputes.
Invoice and payment records are retained for the period required by tax and accounting law.
Complaints and correspondence may be retained for a reasonable period after the matter is closed.
Data collected with consent is retained until consent is withdrawn or the data is no longer needed.

When personal data is no longer required, we will securely delete, anonymise, or archive it in line with our retention practices.

7. Security of your data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures are designed to be proportionate to the nature of the information we hold and the risks involved. While no system can be guaranteed completely secure, we regularly review our controls and seek to reduce risk where possible.

8. Your rights

Under data protection law, you have several rights in relation to your personal data. Subject to legal limits and exemptions, you may have the right to:

Access the personal data we hold about you.
Rectification of inaccurate or incomplete information.
Erasure of personal data in certain circumstances.
Restriction of processing in certain circumstances.
Object to processing based on legitimate interests or direct marketing.
Data portability for information you provided to us, where applicable.
Withdraw consent where processing is based on consent.

You will not usually have to pay a fee to exercise your rights. We may need to verify your identity before responding to a request. We aim to respond within the time limits required by law.

9. Children’s data

Our services are not directed at children, and we do not knowingly collect personal data from children except where necessary in connection with a household service and only to the extent required to provide the service safely and appropriately. If we become aware that we have collected data unlawfully or without the necessary authority, we will take appropriate steps to delete or correct it.

10. International transfers

If any personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it in accordance with applicable data protection law. These safeguards may include adequacy regulations, standard contractual clauses, or other approved mechanisms.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically so they remain informed about how their data is processed.

12. Summary of your privacy rights and our commitments

Crystalpalace Carpetcleaning is committed to processing personal data lawfully, transparently, and securely. We collect only what we need, use it for clear business and legal purposes, share it only with appropriate processors or where required by law, and keep it only as long as necessary. All Crystalpalace Carpetcleaning customers in area are covered by this policy. If you interact with us, your information will be handled in accordance with this notice and applicable data protection law.