Privacy Policy

Privacy Policy for Crystal Palace Carpet Cleaning

This Privacy Policy explains how Crystal Palace Carpet Cleaning collects, uses, stores, and protects personal data when providing carpet and upholstery cleaning and related services. It applies to all Crystal Palace Carpet Cleaning customers and prospective customers in the Crystal Palace area, including anyone who contacts us to enquire about or arrange our services.

Who We Are

Crystal Palace Carpet Cleaning is a carpet and upholstery cleaning service operating in the Crystal Palace area. For the purposes of applicable data protection laws, including the UK General Data Protection Regulation and the EU General Data Protection Regulation where applicable, we act as the data controller for the personal data described in this Privacy Policy.

Personal Data We Collect

We collect and process personal data that you provide to us directly, as well as information generated when we deliver our services. The categories of data we may collect include:

Identification and contact details, such as your name, postal address, service address, and general location details in the Crystal Palace area.

Communication details, such as information you provide when you contact us for quotes, make bookings, request changes to appointments, or send feedback or complaints.

Service and contract details, such as records of the services you request or purchase, dates and times of appointments, information about the areas and items to be cleaned, and notes relevant to carrying out the work safely and effectively.

Payment and billing information, such as confirmation that payment has been made, the amount paid, and related invoice or receipt details. We do not store full card details if you pay by card through a third party payment processor.

Technical and usage information, where applicable, such as basic data generated when you visit our website or online booking pages, including device type, general location data, and information required to deliver and improve our online services.

Any other information you choose to provide that is relevant to arranging and delivering our services, for example access instructions for your property or specific cleaning preferences.

How We Use Your Personal Data

We use personal data for the following purposes:

To provide our services, including handling enquiries, preparing quotes, confirming bookings, attending your property, and completing the requested cleaning work.

To manage our relationship with you, including handling customer service communications, addressing complaints, and keeping records of work carried out.

To process payments, issue invoices or receipts, and manage accounting, taxation, and other legal and regulatory obligations.

To improve and develop our services, including reviewing how our services are used, analysing trends, and enhancing customer experience.

To communicate with you about updates related to your booking or our services, and where permitted, to send you relevant service information or offers.

To protect our business, including for fraud prevention, security, and to establish, exercise, or defend legal claims.

Lawful Basis for Processing

We process your personal data on one or more of the following lawful bases:

Performance of a contract, where processing is necessary to provide our services to you, to take steps at your request before entering into a contract, or to fulfil our obligations under an agreement with you.

Compliance with legal obligations, where we are required to process your data to meet obligations under laws and regulations, for example tax and accounting rules.

Legitimate interests, where we process your data for our legitimate business interests, such as managing our services, maintaining records, improving our operations, and protecting our rights, provided these interests are not overridden by your data protection rights.

Consent, where you have given clear consent for specific processing activities, such as receiving certain types of optional marketing communications. Where processing is based on consent, you may withdraw your consent at any time.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, or reporting requirements.

In general, service and booking records are retained for a period that allows us to handle queries, repeat work, and maintain accurate financial and tax records. Legal and regulatory requirements may mean we need to keep certain information for a specified number of years after the end of our relationship with you.

Where we no longer need personal data for the purposes for which it was collected, we will securely delete, anonymise, or otherwise remove it from our systems.

Data Sharing and Processors

We do not sell your personal data. We may share your data with carefully selected third parties where necessary for the purposes set out in this Privacy Policy.

These third parties may act as data processors and provide services such as payment processing, accounting and bookkeeping, customer relationship management tools, secure data storage, and website hosting or technical support. These processors are only permitted to process your data on our instructions and are required to keep it secure.

We may also share data where required by law, for example with law enforcement authorities or regulators, or where necessary to establish, exercise, or defend legal claims.

If we ever reorganise, sell, or transfer part or all of our business, personal data may be transferred as part of that process. In such cases we will ensure that any recipient respects the protections described in this Privacy Policy.

International Transfers

Where personal data is transferred outside the United Kingdom or the European Economic Area, we will take steps to ensure that an adequate level of protection is in place. This may include using standard contractual clauses or relying on other appropriate safeguards recognised under data protection law.

How We Protect Your Data

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Measures may include access controls, secure storage, encryption or pseudonymisation where appropriate, regular review of our data handling practices, and limiting access to personal data to those who need it to perform their roles.

Your Data Protection Rights

Under data protection laws, you have a number of rights in relation to your personal data. These may include:

The right of access, which allows you to request a copy of the personal data we hold about you, together with information about how we use it.

The right to rectification, which allows you to ask us to correct or complete any inaccurate or incomplete personal data.

The right to erasure, in certain circumstances, which allows you to request that we delete your personal data when it is no longer needed, where you have withdrawn consent, or where you successfully object to processing.

The right to restrict processing, which allows you to request that we limit how we use your data in certain situations, for example while we are checking its accuracy or dealing with an objection.

The right to object, which allows you to object to processing that is based on legitimate interests, including profiling, and to object to direct marketing at any time.

The right to data portability, which allows you, in certain circumstances, to receive the personal data you have provided to us in a structured, commonly used and machine readable format, and to request that we transfer it to another organisation where technically feasible.

Where processing is based on your consent, you also have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before your withdrawal.

You may also have the right to lodge a complaint with a data protection supervisory authority if you are concerned about how we handle your personal data.

Children

Our services are aimed at adults responsible for managing a household or business premises. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any changes will take effect when the updated policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.