Privacy Policy - Upminster Bridge Carpet Cleaners

This Privacy Policy explains how Upminster Bridge Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all customers and prospective customers of Upminster Bridge Carpet Cleaners in the Upminster Bridge area and to anyone who interacts with our services, whether by booking an appointment, requesting a quotation, making an enquiry, or receiving a cleaning service.

We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only process personal data where we have a valid legal basis and only for purposes that are relevant to providing our carpet cleaning services, managing our business, and meeting legal obligations.

1. Information We Collect

We may collect and process different types of personal data depending on your interaction with us. This can include:

Identity information such as your name.
Contact information such as your address, phone number, and email address.
Service details such as property access instructions, cleaning preferences, carpet or fabric type, and appointment notes.
Payment information such as transaction details and billing records. We do not store full card details if payments are processed by a secure third party.
Communication records including emails, messages, complaints, feedback, and service requests.
Technical information if you interact with our digital systems, such as IP address, device type, or browser information, where applicable.
Business records such as invoices, quotes, job histories, and internal service notes.

We do not intentionally collect special category data unless it is strictly necessary and lawfully permitted. Special category data includes information about health, religion, ethnic origin, or similar sensitive data. If such information is ever provided to us by accident, we will treat it with extra care and only keep it where there is a valid legal reason to do so.

2. How We Use Your Data

We use personal data only for clear and legitimate business purposes. These include:

Providing carpet cleaning and related services.
Managing bookings, quotations, and service scheduling.
Contacting you about appointments, changes, or service updates.
Processing payments and maintaining financial records.
Responding to queries, complaints, and customer support requests.
Improving our services, training, and customer experience.
Meeting accounting, tax, and legal obligations.
Protecting our business against fraud, misuse, or unlawful activity.

We only use your personal data in ways that are compatible with the reason it was collected. Where required, we will ask for your consent before using your data for optional purposes, and you may withdraw that consent at any time.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Upminster Bridge Carpet Cleaners relies on the following lawful bases:

Performance of a Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes handling bookings, delivering cleaning services, and managing payment or invoicing arrangements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include maintaining service records, improving operations, handling customer communications, preventing fraud, and ensuring our services are delivered efficiently.

Legal Obligation

We may process and retain certain data to comply with legal requirements, including tax, accounting, and record-keeping obligations. We may also disclose information where required by law or a lawful request from a competent authority.

Consent

Where processing is based on consent, we will make that clear to you. For example, we may ask for your permission to send certain optional communications. If consent is the lawful basis, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing Your Personal Data

We may share personal data with trusted third parties where necessary for the operation of our business and the delivery of our services. These third parties act as processors or, in some cases, independent controllers. We only share the minimum information necessary and require appropriate safeguards.

Examples of processors may include:

Payment processors that securely handle card or electronic payment transactions.
Accounting and bookkeeping providers that assist with financial administration and compliance.
IT and cloud service providers that host or support our business systems.
Scheduling or customer management software providers used to organise bookings and service records.
Professional advisers such as accountants or legal advisers, where needed for compliance or business protection.

Where processors act on our behalf, they are only permitted to use the data according to our instructions and must keep it secure. We do not sell personal data.

5. International Transfers

In some cases, our processors may store or access data outside the UK. Where this happens, we will ensure that appropriate safeguards are in place so that your personal data receives a level of protection that is consistent with UK data protection law. These safeguards may include UK adequacy regulations, standard contractual clauses, or equivalent legal protections.

6. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, or as required by law. Retention periods depend on the type of information and the reason for holding it.

Customer service records are generally kept for the duration of the service relationship and for a reasonable period afterwards.
Invoice, payment, and tax records are retained for the period required under accounting and tax laws.
Correspondence and complaint records are kept long enough to resolve issues and defend or establish legal claims if needed.
Consent-based records are kept until you withdraw consent or the information is no longer needed.

When data is no longer required, we will securely delete it, anonymise it, or destroy it in a safe manner.

7. Your Rights

Under data protection law, you have several rights regarding your personal data. These rights may be subject to legal limits or exceptions, but we will always assess and respond appropriately.

Right of access – you can ask for a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in certain circumstances, you can request that we delete your data.
Right to restriction – you can request that we limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests in some cases.
Right to data portability – where applicable, you can request a copy of certain data in a structured, commonly used format.
Right to withdraw consent – if processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed. We encourage you to raise concerns with us first so that we may try to resolve them promptly.

8. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, loss, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and the careful selection of processors. While no system can be guaranteed to be completely secure, we work diligently to safeguard your information.

9. Children’s Data

Our services are intended for adults and business customers arranging services for residential or commercial premises. We do not knowingly collect personal data from children unless it is incidental and necessary for service delivery, and only where lawful to do so.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any revised version will apply from the date it is published. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

11. Summary of Our Commitment

Upminster Bridge Carpet Cleaners respects your privacy and is committed to processing personal data responsibly. We collect only the information needed to provide our services, rely on a clear lawful basis, retain data only for as long as necessary, and use trusted processors with proper safeguards. We also recognise and support your rights under data protection law.

This policy applies to all Upminster Bridge Carpet Cleaners customers in the Upminster Bridge area and to anyone who uses or enquires about our services. We aim to keep your data secure, your rights respected, and our handling of personal information transparent and lawful. For that reason, we review our practices regularly and maintain a privacy-first approach in all relevant business activities.