Privacy Policy - Docklands Carpet Cleaners
This Privacy Policy explains how Docklands Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Docklands Carpet Cleaners customers in the area, including prospective customers, current customers, and anyone who enquires about our services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Docklands Carpet Cleaners provides carpet cleaning and related cleaning services to customers in the local area. For the purposes of data protection law, we act as the data controller when we determine why and how personal data is processed. This means we are responsible for ensuring your information is used properly and securely.
2. Personal Data We Collect
We only collect personal data that is relevant and necessary for delivering our services, managing customer relationships, and meeting legal or operational requirements. Depending on how you interact with us, we may collect the following categories of data:
- Identity data: name, title, and any identifying details you provide.
- Contact data: address, email address, telephone number, and preferred communication details.
- Service data: property access notes, service preferences, cleaning instructions, appointment details, and service history.
- Payment data: payment status, billing records, and transaction information. We do not retain unnecessary payment information beyond what is needed for processing and accounting.
- Communication data: messages, queries, complaints, feedback, and records of correspondence.
- Technical data: limited information such as device identifiers or IP-related details if collected through digital systems used to manage bookings or security.
- Legal and compliance data: records required to comply with tax, accounting, insurance, or contractual obligations.
We do not intentionally collect special category data unless you choose to provide it and it is necessary for a specific purpose, such as access arrangements or health-related information relevant to service delivery. In such cases, we will only process that information where there is a valid lawful basis and where appropriate safeguards are in place.
3. How We Collect Personal Data
We may collect personal data directly from you when you:
- request a quotation or service;
- make a booking or amend an appointment;
- communicate with us by phone, email, text, or other channels;
- complete forms or provide information in person;
- leave feedback, make a complaint, or ask a question.
We may also receive data from third parties where necessary, such as from payment providers, referral partners, building managers, or property representatives, but only where this is lawful and relevant to the service requested.
4. Lawful Basis for Processing
We process personal data only when we have a lawful basis under UK GDPR. The main lawful bases we rely on are:
- Contract: to take steps at your request before entering into a contract and to perform our cleaning services once a contract exists.
- Legitimate interests: to manage and improve our business, respond to enquiries, maintain records, prevent fraud, protect our operations, and ensure service quality, provided your rights do not override these interests.
- Legal obligation: to comply with tax, accounting, record-keeping, consumer protection, and other legal requirements.
- Consent: where we rely on your consent for specific activities, such as optional marketing communications. You may withdraw consent at any time.
Where we process special category data, we will identify both a lawful basis under Article 6 and an additional condition under Article 9 where required. We will only do this when necessary and appropriate.
5. Why We Use Your Data
We use personal data for the following purposes:
- to provide cleaning services and manage bookings;
- to confirm appointments and service details;
- to communicate with customers about service delivery, changes, or updates;
- to issue invoices, process payments, and maintain financial records;
- to deal with queries, complaints, and customer support;
- to maintain accurate business records;
- to meet legal and regulatory duties;
- to protect against misuse, fraud, or unauthorized access;
- to improve our services and operations.
We will not use your personal data for purposes that are incompatible with those stated in this Privacy Policy without informing you and, where necessary, obtaining a valid lawful basis.
6. Sharing Your Data with Processors
We may share personal data with carefully selected third-party service providers who act as processors on our behalf. These processors only handle data according to our instructions and are required to protect it under written agreements. Typical processors may include:
- IT and software providers: systems used for booking management, scheduling, communication, or record storage;
- Payment processors: providers that facilitate payment transactions;
- Accounting or bookkeeping providers: services used for financial administration and compliance;
- Customer support tools: platforms used to manage enquiries or service records;
- Professional advisers: such as accountants, insurers, or legal advisers where necessary.
We may also disclose data where required by law, court order, or regulatory authority, or to protect our legal rights, property, staff, or customers. We do not sell your personal data.
7. International Transfers
If any service provider stores or processes data outside the United Kingdom, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, approved contractual clauses, or equivalent protection measures. We only permit such transfers where they meet legal requirements and provide a suitable level of security.
8. Data Retention
We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, or insurance requirements. Retention periods depend on the type of information and the reason for processing.
- Customer and service records: retained for the duration of the customer relationship and a reasonable period afterwards for support, dispute handling, and operational reference.
- Financial records: retained for the period required by tax and accounting law.
- Complaint or dispute records: retained for as long as needed to resolve the matter and defend legal claims.
- Marketing data: retained until you withdraw consent or opt out, or until the data is no longer needed.
When data is no longer required, we will delete, anonymise, or securely destroy it. We apply a data minimisation approach and do not keep information indefinitely without a lawful reason.
9. Data Security
We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, limited permissions, and regular review of data handling practices. While no system can be guaranteed completely secure, we work to maintain a high standard of protection.
10. Your Rights Under GDPR
As a data subject, you have rights in relation to your personal data. These rights may apply in full or in part depending on the circumstances and the legal basis for processing. You have the right to:
- Access a copy of the personal data we hold about you;
- Rectification of inaccurate or incomplete data;
- Erasure of data in certain circumstances;
- Restriction of processing in certain situations;
- Object to processing based on legitimate interests or direct marketing;
- Data portability for information processed by automated means and based on consent or contract, where applicable;
- Withdraw consent at any time where processing is based on consent;
- Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your rights have been infringed.
To exercise your rights, you may make a request using the communication methods provided by Docklands Carpet Cleaners. We may need to verify your identity before responding. We aim to handle requests promptly and within the time limits set by law.
11. Automated Decision-Making
We do not use personal data to make decisions based solely on automated processing that have legal or similarly significant effects on you. If this changes in the future, we will update this policy and provide the necessary information required by law.
12. Children’s Data
Our services are intended for adults and property holders or occupiers arranging cleaning services. We do not knowingly collect personal data from children for marketing or service administration purposes. If we become aware that we have collected data from a child without lawful grounds, we will take appropriate steps to delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, business operations, or data processing practices. Any updates will take effect when published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we handle personal data.
14. Summary of Our Commitments
Docklands Carpet Cleaners is committed to processing personal data responsibly, securely, and transparently. We only collect information that is necessary, use it for clear and lawful purposes, retain it only as long as needed, and protect it with appropriate safeguards. We also respect your rights and will respond to reasonable requests in line with data protection law.
By using our services, you acknowledge that this Privacy Policy applies to all Docklands Carpet Cleaners customers in the area. We take privacy seriously and will continue to review our practices to ensure ongoing compliance with GDPR principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.
