Privacy Policy - Carpetcleaning Hollandpark

This Privacy Policy explains how Carpetcleaning Hollandpark collects, uses, stores, shares, and protects personal data. It applies to all Carpetcleaning Hollandpark customers in the area, including individuals who request quotes, book services, receive cleaning treatments, or communicate with us in connection with our carpet cleaning services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Personal Data We Collect

We collect only the data that is necessary to provide our services, manage customer relationships, and meet legal obligations. Depending on how you interact with us, we may collect the following categories of personal data:

Identity data such as your name, title, or customer reference number.
Contact data such as your address, email address, and telephone number.
Service data such as the type of cleaning requested, property details relevant to the service, appointment date, and special instructions.
Payment data such as transaction records, billing information, or payment status. We do not retain full card details unless required by a secure payment processor.
Communication data such as messages, calls, complaints, feedback, and service-related correspondence.
Technical data such as basic information about how you interact with our digital systems, if applicable, including device type or browser data.
Legal or compliance data where needed to meet tax, accounting, insurance, or regulatory requirements.

We do not intentionally collect more information than is necessary for the purposes described in this policy. Where we receive special category data unintentionally, such as information that may reveal health conditions through a service note, we will handle it with extra care and only where necessary.

2. How We Use Personal Data

We use personal data for specific, legitimate purposes connected to our business operations. These include:

providing quotations and responding to service requests;
booking, delivering, and managing carpet cleaning appointments;
processing payments and maintaining business records;
communicating with customers about appointments, changes, or service issues;
handling complaints, disputes, and after-service support;
improving service quality, customer experience, and operational efficiency;
meeting legal, tax, accounting, and insurance obligations;
protecting against fraud, misuse, or unlawful activity.

We will only use your personal data for the purpose for which it was collected, unless we reasonably determine that we need to use it for another compatible purpose and that this is permitted by law.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing personal data. Carpetcleaning Hollandpark relies on the following lawful bases, depending on the context:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotations, confirming bookings, delivering cleaning services, and managing payment or service follow-up.

Legal obligation

We process certain data to comply with legal obligations, such as maintaining financial records, supporting tax compliance, and responding to lawful requests from public authorities.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer enquiries, maintaining service records, improving our operations, and protecting our business from misuse or fraud. We always consider whether the processing is proportionate and necessary.

Consent

In limited cases, we may rely on your consent. For example, if we ever send optional marketing communications where consent is required, you will be given a clear choice and the ability to withdraw consent at any time. If consent is withdrawn, this will not affect the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Processors

We may share personal data with trusted third parties only where necessary to operate our business and deliver services. These third parties act as processors or, in some cases, independent controllers.

Examples of processors and service providers may include:

Payment service providers that securely process transactions;
Accounting or bookkeeping providers that assist with tax and financial recordkeeping;
IT and cloud service providers that host data, maintain systems, or support email and communications;
Scheduling or administrative systems used for managing appointments and customer records;
Professional advisers such as insurers, legal advisers, or auditors, where needed;
Regulators, law enforcement, or public authorities where disclosure is required by law.

We require processors to handle personal data only on our instructions, to implement appropriate security measures, and to process data only for the purposes agreed. Where data is transferred outside the European Economic Area, we will ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent legal protections.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including the need to satisfy legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the reason it was collected.

Customer and service records are usually retained for the duration of the customer relationship and for a reasonable period afterward to manage queries or disputes.
Financial and tax records are kept for the period required by applicable law.
Communication records may be retained for a shorter or longer period depending on whether they are needed for service history, complaint handling, or legal defence.
Marketing preferences are retained until you withdraw consent or object, where applicable.

When personal data is no longer needed, it will be securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner. We do not retain data indefinitely; we review retention needs regularly to ensure information is not kept longer than necessary.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures are designed to reflect the nature of the data we hold and the risks involved. Access to personal data is restricted to authorised personnel and service providers who require it to perform their duties.

Although we take strong steps to safeguard information, no system can be guaranteed to be completely secure. Where required by law, we will notify affected individuals and relevant authorities of a personal data breach.

7. Your Rights Under GDPR

As a data subject, you have several rights in relation to your personal data. These rights may apply depending on the circumstances and the legal basis for processing.

Right of access – you can request confirmation of whether we process your data and obtain a copy of it.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in certain circumstances, you can ask us to delete your personal data.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests, including direct marketing where applicable.
Right to data portability – where processing is based on consent or contract and carried out by automated means, you may ask for your data in a structured, commonly used format.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with your local data protection authority if you believe your data has been handled unlawfully. We encourage you to raise any concerns with us first so that we can try to resolve them promptly and fairly.

8. Children's Data

Our services are intended for adults and property occupants who arrange cleaning services. We do not knowingly collect personal data from children for marketing or general service purposes. If a child’s information is incidentally included in service communications, we will handle it only where necessary and with appropriate safeguards.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. When we do so, we will revise the policy accordingly. We encourage customers to review it periodically so they remain informed about how their data is used.

10. Summary of Our Commitments

Carpetcleaning Hollandpark is committed to processing personal data lawfully, transparently, and securely. We collect only what we need, use it for clear and legitimate purposes, share it only with trusted processors when necessary, and retain it only for as long as required. We respect your rights and aim to handle all customer information with care, fairness, and accountability.

By using our services, all Carpetcleaning Hollandpark customers in the area acknowledge that their personal data may be processed as described in this Privacy Policy.