Privacy Policy - Hanwell Carpet Cleaners

Hanwell Carpet Cleaners is committed to protecting your privacy and handling your personal data in a transparent, lawful, and secure manner. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our services. It applies to all Hanwell Carpet Cleaners customers in the area, including prospective customers, existing customers, and any individual who contacts us or receives services from us.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is designed to help you understand your rights and our responsibilities. By using our services, you acknowledge that your information may be processed as described below.

1. Information We Collect

We only collect personal data that is necessary for delivering our services, managing customer relationships, and meeting legal obligations. The types of information we may collect include:

Identity information such as your name and, where relevant, business name.
Contact details such as address, telephone number, and email address.
Service information such as details about the cleaning service requested, property access instructions, and preferred appointment times.
Payment information such as transaction records and billing details, although full card details are not usually stored by us.
Communication records such as emails, messages, call notes, complaints, and service-related correspondence.
Technical and usage data if you interact with our digital systems, including basic device and browser information where necessary for security or service improvement.

We do not intentionally collect special category data unless it is provided to us by you and is relevant to a service request, such as information that may affect access to your property or service delivery. If such information is received, we handle it with extra care and only where lawful to do so.

2. How We Use Your Data

Your personal data is used for legitimate business and operational purposes, including:

providing carpet cleaning and related services;
managing bookings, quotes, and appointments;
processing payments and issuing invoices;
communicating service updates, reminders, or changes;
responding to enquiries, complaints, and feedback;
maintaining accurate business and customer records;
meeting legal, tax, and regulatory obligations;
protecting against fraud, misuse, or security incidents.

We use personal data only for the purposes for which it was collected, unless we reasonably determine that we need to use it for another compatible purpose and that such use is lawful.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Depending on the context, Hanwell Carpet Cleaners relies on one or more of the following lawful bases:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering services, confirming appointments, and handling payments.

Legal Obligation

We may process personal data to comply with legal duties, including tax recordkeeping, accounting requirements, and responses to lawful requests from public authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided these do not override your rights and freedoms. This may include managing customer records, improving service quality, preventing fraud, and maintaining business security.

Consent

Where required, we rely on your consent. For example, if we need to use your information for specific optional communications or for certain types of marketing, we will ask for your clear permission. You can withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as data processors or, in some cases, independent controllers. We ensure that any sharing is limited, secure, and compliant with data protection law.

Examples of processors or service providers may include:

Payment service providers that handle transaction processing;
Accounting and bookkeeping services that support financial recordkeeping;
IT, software, and cloud storage providers that help us manage customer information securely;
Scheduling or communication tools used to manage appointments and service messages;
Professional advisers such as accountants, legal advisers, or insurers where necessary;
Public authorities where disclosure is required by law.

All processors are required to handle data securely, act only on our instructions, and maintain appropriate technical and organisational safeguards. We do not sell your personal data.

Where a third party acts as an independent controller, for example a bank or public authority, that party will be responsible for its own processing and privacy obligations.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. Retention periods may vary depending on the type of data and the reason for processing.

In general:

Customer and service records are retained for as long as needed to manage our relationship and support service history;
Financial and tax records are retained for the period required by law;
Correspondence and complaints are retained for an appropriate period to resolve issues and maintain evidence of communications;
Consent records may be retained to demonstrate compliance with data protection obligations.

When personal data is no longer required, we securely delete, anonymise, or archive it in line with our retention practices.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our systems and procedures.

While we work hard to protect your data, no system can be guaranteed completely secure. If a personal data breach occurs and is likely to result in a risk to your rights and freedoms, we will take appropriate action in accordance with applicable law.

7. Your Rights

Under data protection law, you have several rights regarding your personal data. These rights may apply depending on the circumstances of the processing:

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – in certain cases, you may request that we delete your data.
Right to restrict processing – you may ask us to limit how we use your data in certain situations.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to data portability – you may request a copy of certain data in a commonly used format.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

Important: exercising one of these rights does not always mean we can comply in full, as some rights are subject to legal limits or exceptions. We will always explain any limitations where relevant.

8. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children unless it is incidental and necessary for service delivery, such as where a family home is being serviced and an adult customer provides relevant information. If we become aware that we have collected data unlawfully from a child, we will take appropriate steps to delete it.

9. International Transfers

If any of our processors store or access data outside the United Kingdom, we ensure that appropriate safeguards are in place so that your personal data remains protected to the required standard. Such safeguards may include adequacy regulations, contractual protections, or other lawful transfer mechanisms.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage you to review this policy periodically so that you remain informed about how your data is used.

11. Complaints and Further Information

If you have concerns about how your personal data is handled, you have the right to raise a complaint with the relevant data protection authority. You may also contact us through our usual service channels to request clarification, exercise your rights, or raise a privacy concern.

We will aim to respond to data protection requests promptly and within the timeframes required by law. If a request is complex or if multiple requests are received, we may extend the response period as permitted by applicable regulations.

12. Summary of Our Commitment

Hanwell Carpet Cleaners is committed to respecting your privacy, limiting data collection to what is necessary, and processing personal information fairly and securely. We only use lawful grounds for processing, share information with trusted processors where needed, retain data for appropriate periods, and support your rights under GDPR. This policy applies to all Hanwell Carpet Cleaners customers in area and is intended to provide a clear and transparent explanation of our practices.