Privacy Policy - Burnt Oak Carpet Cleaners

This Privacy Policy explains how Burnt Oak Carpet Cleaners collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all Burnt Oak Carpet Cleaners customers in area, including individuals who enquire about our services, book appointments, receive quotations, or otherwise interact with us in connection with our work. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Burnt Oak Carpet Cleaners is the controller of the personal data described in this policy. This means we determine the purposes and means of processing personal data relating to our customers, prospective customers, and other individuals who communicate with us for service-related reasons. We take our responsibilities seriously and aim to ensure that personal data is used only where necessary and appropriate.

2. Information We Collect

We may collect and process the following categories of personal data:

Identity information: name, title, and any relevant details needed to identify you.
Contact information: address, email address, telephone number, and service location.
Service information: details about the carpets, rugs, upholstery, or other items to be cleaned, including stain types, materials, room layout, and any cleaning preferences.
Booking and transaction information: appointment dates, quotations, invoices, payment status, and service history.
Communication records: messages, notes from calls, complaint details, and feedback.
Technical data: if you interact with our digital systems, we may process basic technical data such as device information, logs, and usage information.

In limited situations, we may also collect information that could be considered special category data if it is provided to us and is necessary for the delivery of a service or for safeguarding purposes. For example, this may include information about allergies, sensitivities to cleaning products, or access needs. Where this occurs, we apply additional protections and only process such data where a lawful basis and condition for processing are present.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide quotations and respond to enquiries;
to schedule, manage, and deliver cleaning services;
to communicate about appointments, service updates, and follow-up matters;
to process payments, maintain accounts, and manage invoices;
to handle complaints, claims, or disputes;
to maintain business records and service quality;
to comply with legal and regulatory obligations;
to prevent fraud, misuse, and security incidents;
to improve our operations, customer experience, and service standards.

We only use personal data where it is relevant to our services and where doing so is lawful. We do not sell personal data. We do not use customer data for unrelated purposes without a valid legal reason.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the context, Burnt Oak Carpet Cleaners may rely on one or more of the following bases:

Contract: when processing is necessary to provide a quotation, enter into an agreement, or perform services requested by you.
Legal obligation: when we must process data to comply with tax, accounting, consumer, or other legal requirements.
Legitimate interests: when processing is necessary for our legitimate business interests, provided these are not overridden by your rights and freedoms. This may include managing customer relationships, maintaining records, and improving service quality.
Consent: where required, for example if we need your permission for certain optional communications or for processing special category data in specific circumstances.

Where we rely on legitimate interests, we assess the impact on your privacy and balance our interests against your rights. Where consent is the appropriate basis, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Personal Data and Processors

We may share personal data with trusted third parties where necessary for business operations, service delivery, or legal compliance. These parties may act as data processors on our behalf or, in some cases, as independent controllers. We require appropriate contractual and security safeguards before any sharing takes place.

Examples of processors or service providers may include:

Payment service providers: to process card or online payments securely;
Accounting and bookkeeping providers: to manage invoices, tax records, and financial administration;
Scheduling or administration tools: to manage appointments and customer records;
IT and cloud storage providers: to host systems, store files, and maintain backups;
Communication providers: to support messaging, email, or telephone systems;
Professional advisers: such as accountants, insurers, or legal advisers when needed;
Public authorities: where disclosure is required by law or necessary to protect rights, safety, or property.

We only share the minimum amount of data required for the relevant purpose. Processors are not permitted to use your personal data for their own unrelated purposes.

6. International Transfers

If any of our service providers store or access data outside the UK, we will ensure appropriate safeguards are in place, such as an adequacy decision or approved contractual protections. We take reasonable steps to ensure your information remains protected to a standard consistent with UK data protection law.

7. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. The length of retention depends on the type of information and the reason for keeping it.

Customer service records: retained for a period needed to manage the relationship, respond to queries, and address complaints.
Financial and tax records: retained for the period required by applicable accounting and tax laws.
Communication records: retained for a reasonable period to support service history and dispute resolution.
Security or legal records: retained where necessary to investigate incidents, assert legal rights, or comply with legal obligations.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. Retention periods may vary depending on legal requirements, contractual needs, and operational considerations.

8. How We Protect Personal Data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures may include access controls, password protection, secure storage, data minimisation, and staff training. While no system can be guaranteed completely secure, we work to maintain a level of security appropriate to the risk.

9. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may not apply in every situation, but we will always consider requests carefully.

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to ask us to limit how we use your data in certain cases.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to request transfer of certain data in a structured, commonly used format.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you wish to exercise your rights, we may need to verify your identity before responding. We will respond within the time limits set by law unless an extension is permitted due to complexity or volume of requests.

10. Complaints

If you are unhappy with how we handle your personal data, we encourage you to raise the issue with us so that we can review it promptly. You also have the right to lodge a complaint with the UK data protection regulator if you believe your rights have been infringed. We would appreciate the opportunity to address your concerns first where possible.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business operations. Any updates will take effect when published. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

12. Summary of Our Commitment

Burnt Oak Carpet Cleaners is committed to respecting privacy and handling personal data responsibly. We collect only what is necessary, use it for clear and lawful purposes, keep it only as long as needed, and apply safeguards when sharing it with processors or other third parties. We also ensure that all Burnt Oak Carpet Cleaners customers in area are covered by this policy and can rely on their rights under applicable data protection law.

We aim to be transparent, proportionate, and accountable in every aspect of data handling.

This policy is intended to support lawful and fair processing while maintaining the trust of our customers.