Privacy Policy - Woodside Carpet Cleaners

Effective date: This Privacy Policy applies to all Woodside Carpet Cleaners customers in our service area and explains how we collect, use, store, share, and protect personal data.

Woodside Carpet Cleaners is committed to handling personal information in a lawful, fair, and transparent manner. This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It explains what data we collect, why we collect it, the lawful basis we rely on, how long we keep it, who may process it on our behalf, and the rights you have in relation to your information.

1. Personal Data We Collect

We collect only the information we need to provide carpet cleaning and related services, manage our business operations, and meet legal obligations. The personal data we may collect includes:

Identity details: your name and any preferred title.
Contact details: address, telephone number, and email address.
Service details: information about the property, carpets, rugs, upholstery, cleaning requests, booking preferences, and service history.
Payment information: records of payments made and payment status. We do not intentionally store full card details where payment is processed securely through a third party.
Communication records: emails, messages, call notes, and any feedback or complaints.
Technical information: limited data such as IP address or device information if you visit or interact with our online services, where applicable.
Special category data: we do not generally seek to collect special category data. If such information is voluntarily provided and relevant to a service request, we will handle it with additional care and only where a lawful basis applies.

We aim to keep data collection minimal and relevant. If we do not need certain information to perform our services or meet legal duties, we will not ask for it.

2. How We Use Your Data

Woodside Carpet Cleaners uses personal data for the following purposes:

to arrange and deliver cleaning services;
to confirm bookings and manage appointments;
to prepare quotations and invoices;
to process payments and maintain financial records;
to communicate about service updates, changes, or follow-up matters;
to handle complaints, queries, and customer support;
to maintain business records and improve service quality;
to comply with legal, tax, accounting, and regulatory obligations;
to protect our business, customers, and staff against fraud or misuse.

We will not use your personal data for purposes that are incompatible with the reasons it was originally collected, unless we have a lawful basis to do so.

3. Lawful Basis for Processing

We only process personal data where we have a lawful basis under UK GDPR. Depending on the situation, we rely on one or more of the following:

Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes booking services, providing quotations, completing cleaning work, and issuing invoices.

Legal Obligation

We may process and retain data where required by law, such as for tax records, accounting purposes, or compliance with regulatory requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. Examples include managing customer relationships, maintaining service records, preventing fraud, and improving our business operations. We balance these interests carefully and only process data that is reasonably necessary.

Consent

In limited situations, we may rely on your consent, for example where we wish to send optional marketing communications or process certain information beyond what is needed for the service. Where consent is used, it must be freely given, specific, informed, and unambiguous. You may withdraw consent at any time.

4. Data Sharing and Processors

We do not sell your personal data. However, we may share information with trusted third parties who help us operate our business. These parties act as data processors when they process data on our instructions and only for the purposes we specify.

Examples of processors may include:

IT and hosting providers: for storing business records, emails, or customer management systems.
Payment processors: for handling secure card or electronic payments.
Accounting software providers: for bookkeeping, invoicing, and tax administration.
Communication service providers: for sending messages, booking confirmations, or service updates.
Professional advisers: such as accountants, insurers, or legal advisers, where necessary.

Where processors are used, we ensure appropriate contractual and security safeguards are in place. They are required to protect your information and may not use it for their own purposes.

In limited circumstances, we may also disclose data to independent controllers such as government authorities, courts, or law enforcement, where we are legally obliged to do so or where disclosure is necessary to protect rights, safety, or property.

5. International Transfers

If any of our processors store or access personal data outside the United Kingdom, we will take steps to ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms.

6. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including to meet legal, accounting, or reporting obligations. Retention periods may vary depending on the type of data and the reason it is held.

Customer and service records: kept for the duration of our relationship and for a reasonable period afterwards to manage queries, disputes, and business administration.
Financial and tax records: retained for the period required by law and relevant accounting rules.
Correspondence and complaint records: kept as long as needed to resolve issues and defend legal claims.
Marketing preferences: retained until you withdraw consent or object to processing, where applicable.

When data is no longer needed, we will delete it securely or anonymise it so it can no longer be linked to you. We review our retention practices regularly to ensure we are not holding information for longer than necessary.

7. Security of Your Information

We use appropriate technical and organisational measures to protect personal data from accidental loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, password protection, secure storage, staff confidentiality obligations, and careful selection of service providers.

While we take reasonable steps to safeguard data, no system can be guaranteed to be completely secure. We therefore encourage customers to share only the information needed for service delivery and to contact us if they suspect misuse of their data.

8. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to legal exceptions or limits, but we will always consider and respond to requests appropriately.

Right of access: you can ask for a copy of the personal data we hold about you.
Right to rectification: you can request correction of inaccurate or incomplete data.
Right to erasure: you may ask us to delete your data in certain circumstances.
Right to restriction: you can request that we limit how we use your data in certain cases.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request a portable copy of certain data.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you make a rights request, we may need to verify your identity before responding. We aim to handle requests within the time limits required by law.

9. Marketing Communications

If we send optional marketing messages, we will do so only where permitted by law and, where required, with your consent. You can opt out of marketing at any time. Even if you opt out, we may still contact you for essential service-related matters such as appointment confirmations, invoices, or important customer notices.

10. Cookies and Similar Technologies

If our online services use cookies or similar technologies, these may be used for basic functionality, security, analytics, or improving user experience. Where required, we will provide appropriate information and choices about their use. Any non-essential tracking will only be used where lawful.

11. Children’s Data

Our services are intended for adults responsible for arranging cleaning services. We do not knowingly collect personal data from children as part of our ordinary business activities. If we become aware that we have inadvertently collected a child’s data without a proper basis, we will take steps to delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. The updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed.

13. Contact and Complaints

If you have concerns about how your personal data is handled, you may raise them with us so that we can review and address the issue. You also have the right to make a complaint to the UK Information Commissioner’s Office if you believe your data protection rights have been infringed.

Summary: Woodside Carpet Cleaners explains how customer data is collected, used, shared, retained, protected, and how individuals can exercise GDPR rights.