Privacy Policy for Brixton Carpet Cleaners Customers
This Privacy Policy explains how Brixton Carpet Cleaners collects, uses, stores and protects personal data relating to all customers and prospective customers in our service area. We are committed to processing your personal data in a lawful, fair and transparent manner in accordance with the UK General Data Protection Regulation and applicable data protection laws.
Who This Policy Applies To
This Privacy Policy applies to all individual customers, prospective customers and household decision makers who contact Brixton Carpet Cleaners, request a quotation, make a booking, receive services from us, or otherwise interact with us in our service area. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Personal Data We Collect
We collect and process only the personal data that is necessary for the purposes set out in this policy. This may include the following categories of data.
Identification and contact details, such as your name, address, property access details, and general location information required to attend your premises. Communication details, such as your preferred contact method and records of your communications with us, including enquiries, feedback and complaints. Booking and service details, such as service history, dates and times of visits, instructions you provide, and any notes necessary to safely and effectively deliver our services. Payment and billing information, such as details of payments made, payment method type, invoices and receipts. We do not store full card details where payment is processed through secure third party providers. Technical and usage data, where applicable, such as basic information generated when you visit our website or interact with our online booking or enquiry forms, including date and time of access and the pages you view.
We do not intentionally collect special category personal data. If you choose to share sensitive information with us, for example about health or mobility requirements which may affect access to your property, we will treat this information with particular care and use it only as necessary to deliver our services safely and appropriately.
How We Collect Your Data
We collect personal data directly from you when you contact us by phone, online forms, messaging channels or in person, when you request a quote or make a booking, and during the provision of our services at your premises. We may also receive personal data from third parties where it is necessary to provide services to you, for example from landlords, letting agents or property managers who book services on your behalf.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis under the GDPR. The main lawful bases we rely on are:
Performance of a contract. We process your data to provide our services to you, including taking bookings, managing appointments, carrying out carpet cleaning and related services, issuing invoices and handling payments.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests and these interests are not overridden by your rights. This includes managing customer relationships, maintaining and improving our services, handling queries and complaints, and maintaining appropriate records.
Legal obligations. We process personal data where necessary to comply with legal or regulatory requirements, including tax and accounting rules.
Consent. In limited cases, we may rely on your consent, for example for certain types of marketing communications. Where we rely on consent, you have the right to withdraw your consent at any time.
How We Use Your Personal Data
We use personal data for the following purposes:
To respond to your enquiries, provide quotations and manage your bookings. To deliver carpet cleaning and related services at your property. To communicate with you about appointments, changes to services, and important information regarding your booking. To process payments and maintain financial and accounting records. To improve our services, including quality reviews, training and internal analysis. To handle feedback, queries and complaints and to resolve disputes. To meet our legal and regulatory obligations.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with selected third parties only where this is necessary for the purposes described in this policy or where we are legally required to do so. Such third parties may include:
Service providers and contractors who act as data processors on our behalf, such as payment processors, IT and system support providers, customer management systems, and providers of secure data storage. Professional advisers, such as accountants or legal advisers, where necessary for compliance, legal or business reasons. Public authorities or law enforcement agencies where required by law, regulation, or to protect our rights, property or safety or that of our customers or others.
Where we use third party processors, we ensure that appropriate contractual and technical safeguards are in place so that your personal data is processed only in accordance with our instructions, is kept secure, and is not used for the processor’s own purposes.
International Transfers
If any of our service providers or systems transfer or store personal data outside the United Kingdom, we will ensure that appropriate safeguards are used, such as adequacy regulations, standard contractual clauses or equivalent measures required by applicable data protection laws.
Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, including for satisfying legal, accounting or reporting requirements.
Customer and booking records are generally retained for a period that allows us to manage ongoing relationships, respond to queries about past work and comply with applicable tax and accounting regulations. Payment and invoice data are retained for the period required by financial and tax legislation. Records of communication, feedback and complaints may be kept for a reasonable period after resolution, in order to demonstrate how we handled the matter and to improve our services.
When personal data is no longer needed, we will securely delete, anonymise or otherwise dispose of it in a safe manner.
How We Protect Your Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures include access controls, secure storage, staff awareness and training, and procedures for handling suspected data breaches. While we take reasonable steps to protect your data, no system can be completely secure, and you should take care when sharing information with us through public or unsecured channels.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions.
Right of access. You have the right to request confirmation of whether we hold personal data about you and to request a copy of that data.
Right to rectification. You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or updated.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected and we have no legal obligation to retain it.
Right to restriction of processing. You may request that we restrict the use of your personal data in certain situations, for example while we confirm its accuracy or consider an objection you have raised.
Right to object. You may object to our processing of your personal data where we rely on legitimate interests as the lawful basis. We will stop processing unless we have compelling legitimate grounds that override your interests and rights or where processing is required for legal claims.
Right to data portability. Where processing is based on your consent or on a contract and is carried out by automated means, you may have the right to request that we provide your personal data in a structured, commonly used and machine readable format and to request that it is transmitted to another controller where technically feasible.
Where we rely on consent for processing, you have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
Exercising Your Rights and Contacting Us
If you wish to exercise any of your data protection rights or have questions about this Privacy Policy or how we handle your personal data, you can contact us using the usual contact channels you use for our services. We may need to verify your identity before responding to certain requests in order to protect your privacy and security.
If you are not satisfied with our response, you also have the right to lodge a complaint with the relevant data protection supervisory authority. We encourage you to contact us first so we can try to resolve your concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or the way we process personal data. Any changes will take effect when the updated policy is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data.