Canary Wharf Carpet Cleaners Privacy Policy
This Privacy Policy explains how Canary Wharf Carpet Cleaners collects, uses, stores and protects your personal data when you use our carpet and upholstery cleaning services. It applies to all Canary Wharf Carpet Cleaners customers and prospective customers within our service area, whether you contact us online, by post, or in person.
We are committed to handling your personal data in accordance with the UK General Data Protection Regulation GDPR, the Data Protection Act 2018, and any other applicable data protection laws. Please read this Privacy Policy carefully to understand how we process your information and what rights you have.
Personal Data We Collect
We collect only the personal data that is necessary for us to provide our services and manage our business. The types of personal data we may collect include:
Identification and contact details, such as your name, address, property access details, and other contact information you choose to provide. Service and booking information, such as details of the services you request, dates and times of bookings, property type, areas to be cleaned, and any specific instructions you provide. Payment and transaction details, such as information relating to payments made for our services, payment method type and relevant transaction references. We do not store full payment card details when payments are processed by external payment providers. Communication records, such as emails, written correspondence and records of communications relating to enquiries, bookings, complaints, feedback and customer support. Technical and usage data, which may include basic device and usage information when you visit our online channels, such as IP address, browser type and pages visited, where this is collected by our technical service providers for security, analytics or performance monitoring purposes.
We obtain personal data directly from you when you contact us or use our services, and indirectly from third party service providers acting on our behalf, such as payment processors or analytics providers.
Lawful Basis for Processing Your Data
We process your personal data only where we have a lawful basis to do so. Depending on the context, we rely on the following legal grounds:
Performance of a contract. We process your data when it is necessary to enter into and perform a contract with you, for example to accept bookings, provide cleaning services, issue invoices and manage payments. Legal obligation. We may process your data to comply with legal or regulatory obligations, such as keeping financial records for tax and accounting purposes or responding to requests from competent authorities. Legitimate interests. We may process your data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This may include managing our relationship with you, improving our services, ensuring network and information security, handling queries and complaints, and preventing fraud or misuse of our services. Consent. In limited circumstances we may rely on your consent, for example where required to send certain types of direct marketing communications. Where we rely on consent, you can withdraw it at any time by contacting us using the details provided in your service documentation.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage our services, including handling enquiries, confirming bookings, carrying out carpet and upholstery cleaning, and arranging access to your premises. To process payments and manage accounts, including issuing invoices, processing refunds and maintaining financial records. To communicate with you, such as sending booking confirmations, service updates, customer service responses, and important notices relating to your use of our services. To manage our business operations, such as monitoring service quality, training staff, producing internal reports, and improving our processes and customer experience. To ensure security and prevent misuse, including detecting and preventing fraud, protecting our systems, and ensuring safe and secure access to customer premises. To comply with legal and regulatory requirements, including data protection, tax, accounting and health and safety obligations. To send relevant marketing communications, where permitted by law and, where required, where you have given your consent. You can opt out of marketing communications at any time.
Data Retention
We keep your personal data only for as long as it is reasonably necessary for the purposes for which it was collected, including satisfying any legal, regulatory, tax, accounting or reporting requirements.
In general, we apply the following retention principles:
Customer and booking records are kept for as long as you remain a customer and for a reasonable period afterwards, to handle queries, complaints and potential legal claims. Financial and transaction data is typically retained for the period required by applicable tax and accounting laws. Correspondence and communication records are retained for a period necessary to respond to your enquiries, manage our relationship with you and demonstrate how we have dealt with customer requests and complaints. Technical and usage data used for security and analytics is retained for periods appropriate to maintain system integrity, investigate incidents, and analyse trends.
When personal data is no longer required, we will securely delete it or anonymise it so that it can no longer be associated with you.
Sharing Your Personal Data and Use of Processors
We do not sell your personal data. We may share your personal data with selected third parties where necessary for the purposes described in this Privacy Policy and where appropriate safeguards are in place. These third parties act as data processors on our behalf or as independent controllers, depending on their role.
Data processors who may process your data on our behalf include:
Payment processing providers who handle card or electronic payments for our services. IT and hosting providers who supply the systems and infrastructure we use to manage bookings, communications and data storage. Communication and customer service tools that enable us to send notifications, respond to enquiries and manage customer interactions. Professional advisers such as accountants or legal advisers who assist us with compliance, finance and legal matters.
Where we use processors, they are only permitted to process your personal data in accordance with our instructions, for the purposes we specify, and subject to appropriate confidentiality, security and data protection obligations.
We may also share personal data where necessary with law enforcement agencies, regulators or other authorities if required by law or where we believe disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud or security issues.
International Transfers
Some of our service providers may process personal data outside the United Kingdom or the European Economic Area. Where this occurs, we will ensure that appropriate safeguards are in place to protect your personal data, such as using countries with an adequacy decision or implementing standard contractual clauses and additional measures where required.
Your Data Protection Rights
Under data protection laws, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these include:
Right of access. You can request confirmation of whether we hold personal data about you and obtain a copy of that data, together with information about how it is processed. Right to rectification. You can ask us to correct inaccurate or incomplete personal data we hold about you. Right to erasure. You can, in certain circumstances, request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing. Right to restriction of processing. You can request that we limit the processing of your personal data in specific situations, such as while we are verifying its accuracy or assessing an objection you have raised. Right to data portability. In certain cases, you can request that we provide your personal data in a structured, commonly used and machine readable format, and that we transmit it to another controller where technically feasible. Right to object. You can object to processing based on our legitimate interests, including profiling, and we will stop processing your personal data unless we have compelling legitimate grounds that override your interests, rights and freedoms or where processing is required for legal claims. You always have the right to object to direct marketing. Rights related to consent. Where we rely on your consent, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise any of your rights, please contact us using the details provided in your service documentation. We may need to verify your identity before responding to your request. We aim to respond without undue delay and within the timescales required by law.
Data Security
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, secure storage, staff training and regular review of our security practices. However, no system can be guaranteed as completely secure, and you should take care when sharing information with us.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the law, our services or our data processing practices. Any updated version will apply to all customers within our service area from the date it is made available. You should review this Privacy Policy periodically to stay informed about how we protect your information.