Privacy Policy - Barnes Cray Carpet Cleaners

This Privacy Policy explains how Barnes Cray Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Barnes Cray Carpet Cleaners customers in area, including anyone who enquires about, books, receives, or pays for our cleaning services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Barnes Cray Carpet Cleaners provides carpet cleaning and related cleaning services to residential and commercial customers in the area. For the purposes of data protection law, we are the data controller for the personal data described in this policy. This means we decide why and how your personal data is processed.

2. Information We Collect

We only collect personal data that is relevant and necessary for providing our services, managing our business, and meeting legal obligations. The information we may collect includes:

Identity details such as your name or business name.
Contact information such as your phone number, email address, and service address.
Booking and service details such as the type of cleaning requested, dates of service, access notes, and job history.
Payment information such as payment status, transaction reference, and invoicing records. We do not store more card data than is necessary to process payments securely.
Communication records including enquiries, complaints, service updates, and feedback.
Technical and website-related data if you interact with any online forms or digital services, such as basic usage information, device details, or IP address logs where applicable.
Special instructions that may be needed to complete a cleaning service safely and effectively, such as access arrangements or information about delicate surfaces.

We do not intentionally collect sensitive personal data unless it is necessary and relevant to a specific request or legal requirement. If we ever need to process special category data, we will do so only where permitted by law and with appropriate safeguards.

3. How We Use Your Data

We use personal data only for clear and legitimate purposes. These include:

handling enquiries and providing quotations;
confirming and managing bookings;
delivering carpet cleaning services safely and efficiently;
processing payments and issuing invoices or receipts;
communicating service updates, changes, or follow-up information;
responding to complaints, claims, or requests for support;
keeping business and tax records;
improving service quality, training, and customer experience;
meeting legal, regulatory, and insurance obligations;
preventing fraud, misuse, or unlawful activity.

We only use data in ways that are compatible with the original purpose for which it was collected, unless we have a lawful reason to use it differently.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each use of your personal data. Barnes Cray Carpet Cleaners relies on the following bases:

Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes taking bookings, carrying out cleaning services, managing payments, and handling service-related communications.

Legal Obligation

We may process data to comply with tax, accounting, record-keeping, consumer law, or other legal duties.

Legitimate Interests

We may use data where it is necessary for our legitimate business interests, provided your rights and interests do not override those interests. This may include improving our services, keeping appropriate internal records, preventing fraud, and managing customer relationships. We always consider whether such processing is proportionate and respectful of your privacy.

Consent

In limited circumstances, we may rely on your consent, for example if we ask to send certain types of optional marketing communications. Where consent is used, you may withdraw it at any time.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes described in this policy, and no longer than required by law. Retention periods depend on the type of information and the reason it was collected.

Booking and service records are kept for a reasonable period to manage customer relationships and resolve any disputes.
Invoices, payment records, and accounting information are kept in line with legal and tax requirements.
Communication records may be retained for customer support, service improvement, and evidential purposes.
Data that is no longer needed is securely deleted, anonymised, or otherwise disposed of.

We apply retention controls so that personal data is not stored indefinitely. If a specific legal claim or investigation is ongoing, we may retain relevant information for longer where necessary and lawful.

6. Sharing Your Data and Processors

We do not sell personal data. However, we may share it with trusted third parties when necessary to operate our business and provide services. These parties may act as processors or independent controllers depending on the service they provide.

Processors We May Use

Payment processors to handle secure payment transactions.
Booking and administration software providers to manage appointments, records, and communications.
Cloud storage and IT service providers to securely store and protect business information.
Accounting and invoicing providers to support financial administration and tax compliance.
Email or communication service providers to send service-related messages.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

Any processor we use is required to handle data securely, follow our instructions, and process personal data only for the agreed purpose. We take reasonable steps to ensure appropriate contracts and safeguards are in place before sharing data.

Other Disclosures

We may also disclose personal data if required by law, court order, regulatory authority, or to protect our rights, property, staff, customers, or the public.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality practices, and limiting access to data to those who need it for legitimate business purposes. While no system can be guaranteed to be completely secure, we take data protection seriously and regularly review our safeguards.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to legal limits, you may have the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete information;
erase your data in certain circumstances;
restrict our processing in certain situations;
object to processing based on legitimate interests;
data portability where processing is based on consent or contract and carried out by automated means;
withdraw consent where processing relies on consent;
complain to the Information Commissioner’s Office if you believe your rights have been infringed.

If you exercise any of these rights, we may need to verify your identity before responding. Some rights are not absolute and may not apply in every case. For example, we may need to retain certain records to comply with legal obligations or to establish, exercise, or defend legal claims.

9. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate legal protections are in place, such as adequacy regulations or approved contractual safeguards. We only make such transfers where necessary and where the recipient provides a suitable level of data protection.

10. Cookies and Similar Technologies

If we use any online forms, booking tools, or digital services, these may use cookies or similar technologies to support functionality, improve performance, and understand how the service is used. Where required, we will provide appropriate notices and obtain consent before setting non-essential cookies. You can usually manage cookie preferences through your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. Any updates will take effect when published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

12. Summary of Our Commitment

At Barnes Cray Carpet Cleaners, we believe privacy should be handled with care, clarity, and respect. We collect only the data we need, use it for lawful purposes, keep it for no longer than necessary, and protect it with appropriate safeguards. We also recognise your right to understand and control how your information is used. Our approach is designed to be transparent, lawful, and focused on maintaining trust with every customer we serve in the area.