Ruislip Carpet Cleaners Privacy Policy
This Privacy Policy explains how Ruislip Carpet Cleaners collects, uses, stores and protects personal data relating to our customers and prospective customers. It applies to all individuals who live in or use our services within the Ruislip area and surrounding neighbourhoods, including when you contact us, request a quote, make a booking or use our carpet cleaning and related services.
Ruislip Carpet Cleaners acts as the data controller in relation to the personal data described in this Privacy Policy. We are committed to complying with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018, together referred to as GDPR in this document.
Personal data we collect
We collect and process different types of personal data depending on how you interact with us. The categories of data we may collect include:
Identity and contact details such as your name, address, property location, and other basic contact information necessary to provide our services and communicate with you.
Booking and service information such as preferred dates and times for appointments, details of the premises where the work is to be carried out, access instructions, and any relevant notes you provide about the property or specific cleaning requirements.
Communication records including the content of telephone conversations where we make written notes, and details of enquiries or complaints you make so that we can manage your request and maintain service quality.
Payment related information such as limited transaction details and payment confirmations. We do not store full payment card numbers. Where card payments are processed electronically, these are handled by a secure payment processor acting on our behalf.
Marketing preferences and feedback such as whether you wish to receive information about our services in future, and any feedback or reviews you provide about our work.
Technical and usage information such as limited information that may be collected when you visit our online pages, including basic device and browsing information necessary to operate and secure our website and online contact forms.
Lawful bases for processing
We only process personal data where we have a valid lawful basis under GDPR. Depending on the specific activity, we may rely on one or more of the following bases:
Contractual necessity where the processing is required to enter into or perform a contract with you, for example to provide quotes, confirm bookings, attend your property and deliver carpet cleaning or related services, issue invoices and manage payments.
Legitimate interests where the processing is necessary for our legitimate business interests and these are not overridden by your rights and interests. This includes maintaining accurate records of services carried out, planning routes and schedules, improving our services, handling customer queries and complaints, and protecting our business and property.
Consent where you have given us clear consent to process your personal data for a specific purpose, for example to receive optional marketing communications such as promotions, service updates or reminders. You may withdraw your consent at any time.
Legal obligation where we need to process personal data to comply with legal or regulatory requirements, such as tax and accounting laws, record keeping obligations, or complying with requests from competent authorities where required by law.
How we use your personal data
We use the personal data described in this Privacy Policy for the following purposes:
To respond to enquiries, provide quotes, and communicate with you about your requests and bookings.
To schedule and deliver carpet cleaning and related services, including attending your address and carrying out the requested work.
To process payments, manage invoices and receipts, and maintain accurate financial records.
To manage our customer relationship with you, including handling feedback, complaints, queries and aftercare.
To plan and improve our operations, including route planning for appointments, staff scheduling and service quality monitoring.
To send you service related messages, such as booking confirmations, appointment reminders and important information about your booking.
To send you optional marketing messages about our services, promotions or offers where you have given consent or we are otherwise permitted by law. You can opt out of such communications at any time.
To protect our business, staff and customers, including detecting and preventing fraud or misuse of our services and complying with legal obligations.
Data sharing and processors
We may share your personal data with carefully selected third parties where this is necessary for the purposes described above and permitted by law. These third parties act as data processors or independent controllers in limited situations.
Processing on our behalf may include:
IT and hosting providers who host our digital systems and help us operate our website and communication tools.
Payment processing providers who securely process card or electronic payments on our behalf.
Business support services such as accountants or professional advisers who assist with our financial and legal obligations.
Where we use data processors, they are only permitted to process your personal data according to our instructions and are required to protect it in line with GDPR. We do not sell your personal data to third parties.
We may also share your information with public authorities, regulators or law enforcement bodies if we are legally required to do so or if it is necessary to protect our rights, property, staff or customers.
Data retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting or reporting requirements. Retention periods may vary depending on the data type and legal obligations.
In general, we will retain basic customer and booking records for a period that allows us to manage repeat bookings, handle any queries or complaints and comply with applicable legal retention requirements. Financial records such as invoices and payment information are typically kept for the period required by tax and accounting regulations.
Once personal data is no longer required, we will take reasonable steps to delete it securely or anonymise it so that you can no longer be identified from it.
International transfers
Our main operations and data storage are intended to be within the United Kingdom or the European Economic Area. If we ever need to transfer your personal data outside this area, we will ensure that appropriate safeguards are in place, such as using countries with an adequacy decision or implementing standard contractual clauses or equivalent safeguards as required by GDPR.
How we protect your data
We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, alteration or disclosure. These measures include restricting access to personal data to staff and contractors who need it to perform their duties, using secure systems and methods for storing information, and training staff about data protection responsibilities.
Your data protection rights
Under GDPR, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions under the law. These include:
The right of access to obtain confirmation about whether we process your personal data and to receive a copy of that data.
The right to rectification to have inaccurate or incomplete personal data corrected.
The right to erasure in certain circumstances, for example where the data is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
The right to restriction of processing in certain situations, for example while we are checking the accuracy of your data or considering an objection you have raised.
The right to object to processing based on our legitimate interests, including profiling based on those interests. In such cases we will stop processing your personal data unless we have compelling legitimate grounds which override your interests or the processing is required for legal claims.
The right to object to direct marketing at any time. Where you object, we will stop using your personal data for marketing purposes.
The right to data portability where processing is based on consent or contract and carried out by automated means, allowing you to receive your personal data in a structured, commonly used and machine readable format and to request that we transmit it to another controller where technically feasible.
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Cookies and similar technologies
If we use cookies or similar technologies on our website, these may collect limited technical information to enable basic site functionality and improve user experience. Where required by law, we will seek your consent before placing non essential cookies and you will be able to manage your cookie preferences.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we offer. Any updated version will apply to all customers in the Ruislip area and surrounding neighbourhoods from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.