Privacy Policy - Crystalpalace Carpet Cleaners

This Privacy Policy explains how Crystalpalace Carpet Cleaners collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all Crystalpalace Carpet Cleaners customers in the area, including prospective customers, current customers, and individuals who have previously used our services.

We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy should be read carefully so you understand how your information is used and what rights you have.

1. Information We Collect

We collect only the information necessary to provide our services effectively, manage customer relationships, and meet legal obligations. The types of personal data we may collect include:

Identity details such as your name and, where relevant, business name.
Contact details such as your telephone number, email address, and service address.
Service information including the type of cleaning requested, property details, appointment dates, access notes, and service preferences.
Payment information such as payment status, invoice details, and transaction references. We do not store full card details where a secure payment processor is used.
Communication records including enquiries, complaints, feedback, and correspondence by phone, email, text, or online forms.
Technical data where relevant, such as basic website usage information collected through standard analytics or security tools.

We do not intentionally collect special category data unless it is necessary and you have provided it to us voluntarily, or it is required for a specific legal or service-related reason. If you share such information, we will only process it where permitted by law and with appropriate safeguards.

2. How We Use Your Data

We use personal data to deliver our services and to operate our business responsibly. The main purposes include:

Providing quotations and responding to enquiries.
Booking, confirming, and delivering services at your property.
Processing payments, issuing invoices, and managing account records.
Handling customer support, complaints, and service follow-up.
Improving our services, training staff, and maintaining quality standards.
Meeting legal, tax, accounting, and insurance obligations.
Preventing fraud, protecting our business, and ensuring the safety of our staff and customers.

We only use your data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose allowed by law.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for every type of processing activity. Depending on the situation, Crystalpalace Carpet Cleaners relies on the following lawful bases:

Contract

Processing is necessary for a contract when we need your personal data to provide a quote, schedule a service, complete the cleaning work, or manage related billing and communication.

Legal Obligation

We may process data to comply with legal obligations, including tax, accounting, regulatory, and record-keeping requirements. This may include retaining invoices and transaction records for the period required by law.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include managing customer relations, improving service quality, preventing misuse of our services, and protecting our business from fraud or unlawful activity.

Consent

Where required, we may rely on your consent, for example for certain marketing communications or for optional cookies and similar technologies, if used. When consent is used as the lawful basis, you may withdraw it at any time.

4. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected and to meet legal, accounting, or insurance requirements. Retention periods may vary depending on the nature of the data and the purpose for which it is used.

Quotation and enquiry records are usually kept for a limited period after the enquiry closes, unless a longer period is needed for ongoing business purposes.
Customer service and transaction records are kept for the duration necessary to deliver the service and manage any follow-up issues.
Invoices, payment records, and accounting data are retained for the period required by tax and financial laws.
Complaint and dispute records may be retained longer where needed to resolve issues or defend legal claims.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

5. Processors and Third Parties

We may share personal data with trusted third-party service providers who help us run our business. These parties act as processors or independent controllers depending on the service they provide.

Examples of processors may include:

Payment processors that securely handle card or electronic payments.
Accounting and bookkeeping providers that support invoicing, taxation, and financial administration.
IT and cloud service providers that help with data storage, email, scheduling, and system security.
Customer communication tools used for appointment reminders, service updates, or administrative messaging.
Professional advisers such as legal, insurance, or audit providers where needed.

We require processors to protect your data, use it only for the specified purpose, and comply with applicable data protection obligations. We do not sell your personal data.

We may also disclose data where required by law, regulation, court order, or where necessary to establish, exercise, or defend legal claims.

6. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our data handling practices.

While no method of transmission or storage is completely secure, we work to maintain a high standard of protection and only grant access to personal data when it is necessary for legitimate business purposes.

7. Your Rights

As a data subject under UK GDPR, you have important rights regarding your personal data. Subject to certain conditions and exemptions, you may have the right to:

Access the personal data we hold about you.
Rectification of inaccurate or incomplete information.
Erasure of your data in certain circumstances.
Restriction of processing in certain cases.
Object to processing based on legitimate interests or direct marketing.
Data portability where processing is based on consent or contract and carried out by automated means.
Withdraw consent at any time where we rely on consent.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully or unfairly. We encourage you to contact us first so we can address your concerns promptly.

8. Marketing Communications

We may send administrative messages related to bookings, payments, or service updates where necessary for the performance of our services. We will only send marketing communications where permitted by law and, where required, with your consent. You may opt out of marketing at any time by following the instructions provided in the communication or by contacting us through appropriate channels.

9. Cookies and Online Data

If we use a website or digital tools, small files or similar technologies may be used for functionality, analytics, or security purposes. Any non-essential cookies or tracking tools will be used only where lawful and, if required, after obtaining your consent. You can manage cookie preferences through your browser settings or applicable consent tools.

10. Children’s Data

Our services are aimed at adult customers and property occupiers. We do not knowingly collect personal data from children unless it is incidentally provided in the course of service delivery and only where appropriate and necessary. If we become aware that we have collected data from a child without a valid lawful basis, we will take reasonable steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically to stay informed about how we protect personal information.

12. Summary of Our Commitment

Crystalpalace Carpet Cleaners is committed to respecting your privacy and using your personal data responsibly. We collect only the information needed to provide cleaning services, communicate effectively, keep proper records, and comply with the law. We process data on appropriate lawful bases, retain it only as long as necessary, use trusted processors where required, and support your rights under data protection law. Your trust matters to us, and we aim to handle every customer’s information with care, transparency, and integrity.