Privacy Policy - Harrow Carpet Cleaners

Effective for all Harrow Carpet Cleaners customers in the area. This Privacy Policy explains how Harrow Carpet Cleaners collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all customers, prospective customers, website visitors where applicable, and anyone who communicates with us in connection with our services in Harrow and the surrounding area.

1. Who We Are

Harrow Carpet Cleaners provides professional carpet cleaning and related home cleaning services. For the purposes of data protection law, we act as the data controller for personal data that we collect and determine how and why it is used. This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Personal Data We Collect

We only collect personal data that is necessary for delivering our services, managing our business, and meeting legal obligations. The categories of personal data we may collect include:

Identity data: name, title, and any relevant identifiers used to confirm who you are.
Contact data: address, phone number, email address, and service location details.
Booking and service data: details of requested cleaning services, appointment times, service notes, access instructions, and customer preferences.
Payment data: payment status, transaction references, and limited billing information. We do not keep card security details unless strictly necessary through a secure payment processor.
Communication data: messages, enquiries, complaints, reviews, or feedback that you send to us.
Technical data: limited device or usage information if our systems collect it, such as IP address, browser type, or interaction logs.
Special category data: we do not normally seek special category data. If you voluntarily provide information that may reveal health or access needs, we will only process it where necessary and with appropriate safeguards.

We do not intentionally collect more data than is needed. If you choose not to provide certain information, we may be unable to complete a booking or provide some services safely and effectively.

3. How We Use Your Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to manage bookings and deliver carpet cleaning services;
to process payments and issue invoices or receipts;
to communicate service updates, changes, or follow-up information;
to handle complaints, feedback, and customer service matters;
to maintain records, improve our services, and ensure quality control;
to comply with legal, accounting, and regulatory obligations;
to prevent fraud, misuse, or security incidents;
to protect our legitimate business interests, provided these do not override your rights and freedoms.

4. Lawful Basis for Processing

We process personal data only where we have a valid lawful basis under UK GDPR. Depending on the context, we may rely on one or more of the following:

Contract: processing is necessary to enter into or perform a contract with you, such as managing your booking and delivering services.
Legal obligation: processing is necessary to comply with tax, accounting, consumer, and record-keeping requirements.
Legitimate interests: processing is necessary for our legitimate business interests, such as service management, administration, security, and business improvement, where your rights do not override those interests.
Consent: in limited situations, we may ask for your consent, for example where it is required for optional communications or certain forms of sensitive processing. You can withdraw consent at any time.

Where we rely on legitimate interests, we consider whether the processing is necessary and proportionate. We also assess whether your interests, rights, or freedoms require us to limit or stop the processing.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties where necessary for the operation of our services. These parties act as processors when they process personal data on our instructions and only for the agreed purpose. Examples may include:

payment service providers for secure transaction handling;
booking, scheduling, or customer management systems;
IT support, data storage, and cloud hosting providers;
accountants, auditors, or professional advisers;
delivery or subcontracted service partners where needed to complete a job;
legal or regulatory bodies where disclosure is required by law.

We require processors to handle personal data securely, to use it only for instructed purposes, and to implement appropriate technical and organisational safeguards. We do not sell your personal data.

6. International Transfers

Where data is processed outside the UK, we will take steps to ensure it is protected to a standard that is essentially equivalent to UK GDPR requirements. This may include the use of approved contractual safeguards and assessment of the receiving organisation’s security measures.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, or for as long as required by law. Retention periods vary depending on the type of information and the reason it is held. In general:

booking and service records are kept for a reasonable period to manage customer history and resolve disputes;
financial and tax records are retained in line with legal accounting obligations;
complaint and communication records are retained as needed to handle follow-up and demonstrate compliance;
data no longer required is securely deleted, anonymised, or archived where appropriate.

We review retention periods regularly to ensure that data is not kept longer than necessary. Where data is no longer needed, we will remove it in a secure and responsible manner.

8. Data Security

We use appropriate security measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These may include restricted access, secure storage, password protection, and staff awareness measures. While no system is completely risk-free, we aim to maintain a level of security that is appropriate to the nature of the data we process.

9. Your Rights

Under data protection law, you have several rights in relation to your personal data. Subject to legal conditions and exemptions, these rights may include:

Right of access: you can request a copy of the personal data we hold about you;
Right to rectification: you can ask us to correct inaccurate or incomplete data;
Right to erasure: you can ask us to delete your data in certain circumstances;
Right to restriction: you can ask us to limit how we use your data in certain situations;
Right to data portability: you can request certain data in a structured, commonly used format where applicable;
Right to object: you can object to processing based on legitimate interests or direct marketing;
Right to withdraw consent: where we rely on consent, you may withdraw it at any time;
Right to complain: you can raise concerns with the relevant data protection supervisory authority if you believe your rights have been infringed.

We will respond to valid requests within the time limits required by law. In some cases, we may need to verify your identity before acting on your request.

10. Children’s Data

Our services are generally intended for adults arranging cleaning services. We do not knowingly collect personal data from children for marketing or service delivery purposes. If we become aware that we have inadvertently collected such data without appropriate basis, we will take steps to delete or safeguard it where required.

11. Marketing Communications

We may send limited service-related communications where necessary for administration or follow-up. We will only send marketing communications where we are allowed to do so under the law. If you opt out of marketing, we will respect your preference. Marketing choices will not affect essential service communications.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any revised version will take effect once published or otherwise made available. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

Summary of Our Commitment

Harrow Carpet Cleaners is committed to processing personal data fairly, lawfully, and transparently. We collect only what we need, use it for clear and legitimate purposes, retain it for no longer than necessary, and work with trusted processors under appropriate safeguards. We also respect your rights and aim to handle all requests promptly and responsibly.

This policy applies to all Harrow Carpet Cleaners customers in area.