Privacy Policy - Ilford Carpetcleaning

Ilford Carpetcleaning is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and safeguard information relating to customers and prospective customers in the Ilford area. It applies to all Ilford Carpetcleaning customers in area, including anyone who requests a quotation, books a service, communicates with us, or receives our cleaning services.

This policy has been written in line with the UK GDPR and the Data Protection Act 2018. It sets out the types of personal data we may collect, the legal grounds we rely on, how long we keep information, who may process it on our behalf, and the rights you have over your information.

1. Information We Collect

We only collect personal data that is necessary for operating our services, managing our customer relationships, and meeting legal obligations. The information we collect may include:

Identity details: your name and, where relevant, the name of your household or business.
Contact details: address, email address, and telephone number.
Service information: details about the type of carpet cleaning or related service requested, appointment preferences, property access instructions, and service notes.
Billing and payment details: payment method information and transaction records, where needed to process payments or issue invoices.
Communication records: emails, messages, call notes, feedback, complaints, and other correspondence.
Technical information: limited data such as IP address or device details if you interact with our digital services, where applicable.
Property-related details: information relevant to delivering the service safely and effectively, such as room count, carpet condition, stain type, or access considerations.

We do not intentionally collect special category data unless it is strictly necessary and you choose to provide it. If such information is ever shared with us, we will handle it with appropriate safeguards and only where permitted by law.

2. How We Use Your Data

We use personal data for several legitimate business and legal purposes, including:

providing quotations and responding to enquiries;
booking, delivering, and managing cleaning appointments;
processing payments and maintaining financial records;
communicating service updates, appointment changes, or aftercare information;
handling complaints, disputes, or customer service requests;
keeping internal business records and service histories;
maintaining safety, security, and fraud prevention measures;
meeting our legal, tax, and accounting obligations.

We will only use your information in ways that are compatible with the purposes for which it was collected. Where we need to use data for a new purpose, we will ensure that there is a valid legal basis before doing so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. Ilford Carpetcleaning relies on the following lawful bases:

Contract

We process your personal data when it is necessary to enter into or perform a contract with you. This includes providing a quotation, scheduling services, carrying out carpet cleaning, and issuing invoices or receipts.

Legal Obligation

We process certain data to comply with legal requirements, such as maintaining tax records, accounting information, and records required for business compliance.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include improving our services, managing customer enquiries, preventing fraud, keeping secure records, and defending legal claims.

Consent

In limited circumstances, we may rely on your consent, for example where you actively agree to receive certain marketing communications or provide optional information. Where consent is used, you may withdraw it at any time.

Important: we do not depend on consent where another lawful basis is more appropriate. If we process your data under a different lawful basis, withdrawing consent will not affect processing already carried out lawfully.

4. Sharing and Processors

We may share your personal data with trusted third parties that support our operations. These third parties act as processors or independent controllers, depending on the service they provide. We only share the minimum information necessary and take steps to ensure your data is protected.

Examples of processors may include:

payment service providers that process card or electronic payments;
bookkeeping or accounting providers;
IT and cloud storage providers;
customer communication and scheduling tools;
professional advisers such as accountants, legal advisers, or insurers where needed;
service partners or subcontractors assisting with delivery of booked work.

All processors are expected to handle personal data securely and only in accordance with our instructions and applicable data protection laws. We do not sell personal data.

In some cases, we may also disclose information if required by law, regulation, court order, or to protect our legal rights, the rights of our customers, or the safety of others.

5. International Transfers

Where personal data is processed outside the United Kingdom, we will ensure that appropriate safeguards are in place. This may include standard contractual clauses, adequacy regulations, or other lawful transfer mechanisms. We will only transfer data internationally where this is necessary and permitted by law.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including satisfying legal, accounting, and reporting requirements. The retention period may vary depending on the type of information and the reason it is held.

Customer and service records: retained for as long as needed to manage the customer relationship and any related queries or claims.
Financial records: retained for the period required by tax and accounting law.
Communication records: retained for a reasonable period to handle follow-up, complaints, or disputes.
Marketing preferences: retained until you withdraw consent or object where applicable.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. Retention is reviewed regularly to ensure information is not kept for longer than necessary.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff training, and restricted access to information on a need-to-know basis.

While we take reasonable steps to secure your data, no method of transmission or storage is completely risk-free. If a personal data breach occurs that may present a risk to your rights and freedoms, we will deal with it in accordance with applicable legal requirements.

8. Your Rights

As a data subject under GDPR, you have several rights in relation to your personal data. These rights may be subject to certain legal limitations or exemptions.

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: you may request deletion of your data in certain circumstances.
Right to restriction: you may ask us to limit how we use your data in certain situations.
Right to data portability: you may request that certain data be provided to you or another controller in a structured, commonly used format.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the time required by law and may need to verify your identity before acting on your request. Exercising your rights will not usually affect services already provided or records we are legally required to keep.

9. Marketing

We will only send direct marketing where permitted by law. If you have opted in to receive marketing messages, you may ask us to stop at any time. We will always respect your preferences and keep a record of objections or opt-outs where necessary.

10. Children’s Data

Our services are aimed at adult customers and households. We do not knowingly collect personal data from children for marketing or service administration purposes. If we become aware that we have collected such data without a lawful basis, we will take appropriate steps to delete or safeguard it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will apply from the date it is published or otherwise communicated to you. We encourage customers in the Ilford area to review this policy periodically so they remain informed about how their data is used.

12. Summary of Our Commitment

Ilford Carpetcleaning treats privacy as an important part of our service. We collect only the data needed to deliver cleaning services, manage bookings, handle payments, and meet legal obligations. We process information on lawful grounds, retain it only as long as necessary, and work with processors that are required to protect it. You also have meaningful rights over your information, and we will support you in exercising them where the law allows.

By using our services, requesting a quotation, or otherwise interacting with Ilford Carpetcleaning, you acknowledge that your personal data will be processed in accordance with this Privacy Policy.