Privacy Policy - Mill Hill Carpet Cleaners

Effective Date: This Privacy Policy applies to all customers of Mill Hill Carpet Cleaners in the Mill Hill area.

Mill Hill Carpet Cleaners is committed to protecting your privacy and handling your personal data in a lawful, fair, and transparent manner. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our carpet cleaning and related services. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to all Mill Hill Carpet Cleaners customers in the area, including individuals who request a quote, book a service, make an enquiry, or otherwise interact with us in connection with our cleaning services. It also applies to anyone whose personal data we process as part of delivering our services, such as property owners, tenants, landlords, and authorised representatives.

2. Personal data we collect

We only collect personal data that is necessary for providing our services, managing our relationship with you, and meeting legal obligations. The types of information we may collect include:

Identity details such as your name.
Contact details such as your address, email address, and telephone number.
Service details such as the type of cleaning requested, property information, preferred dates, and service instructions.
Payment information such as billing details and transaction records. We do not store full card details where payment is processed securely by a payment provider.
Communication records such as emails, messages, call notes, and service feedback.
Technical and usage data where relevant, such as basic website or device information if you contact us through digital channels.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, or we are required to process it for a lawful reason. We ask that you do not share sensitive personal information unless it is needed for the service.

3. How we use your personal data

We use your personal data for the following purposes:

To provide quotes and respond to enquiries.
To arrange, deliver, and manage carpet cleaning and related services.
To communicate with you about bookings, changes, service updates, and invoices.
To process payments and maintain accounting records.
To improve our services, customer experience, and internal operations.
To deal with complaints, disputes, insurance matters, or service follow-up.
To comply with legal, tax, and regulatory obligations.

We will only use your personal data for the purposes explained in this policy or for closely related purposes that you would reasonably expect.

4. Lawful basis for processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the situation, we rely on one or more of the following legal bases:

Contract: We process your data when it is necessary to enter into or perform a contract with you, such as taking bookings, carrying out services, and managing payments.
Legal obligation: We process data where required to comply with laws, including tax, accounting, and record-keeping requirements.
Legitimate interests: We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This can include business administration, service improvement, fraud prevention, and handling enquiries.
Consent: In limited situations, we may rely on your consent, for example where you voluntarily agree to receive certain communications not covered by contract or legitimate interests. You may withdraw consent at any time.

Where we rely on legitimate interests, we ensure that the processing is proportionate, relevant, and limited to what is necessary. We also consider the potential impact on your privacy before carrying out that processing.

5. Data retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason for processing.

Service and booking records are generally retained for as long as needed to manage the service relationship and handle any follow-up matters.
Financial and transaction records are retained for the period required under tax and accounting laws.
Communication records may be retained for a reasonable period to help resolve disputes, respond to queries, or improve customer service.
Where data is no longer required, we will securely delete or anonymise it.

Retention is reviewed regularly to ensure that we do not keep personal data for longer than necessary.

6. Sharing your data and processors

We may share personal data with trusted third parties where necessary to run our business and provide our services. These third parties act as processors when they process data on our behalf, and they are required to protect it and only use it according to our instructions.

Examples of processors and service providers may include:

Payment processing providers.
Booking, scheduling, and administration software providers.
IT, data storage, and cloud service providers.
Accounting and invoicing service providers.
Customer communication tools, where used to manage enquiries or service updates.

We may also disclose information to professional advisers, insurers, law enforcement agencies, or regulators where necessary and lawful. We do not sell your personal data.

Where processors are used, we take reasonable steps to ensure appropriate data protection safeguards are in place, including data processing agreements and security controls.

7. International transfers

In some cases, our processors or service providers may store or process data outside the UK. If this happens, we will ensure that appropriate safeguards are in place to protect your personal data, such as adequacy regulations or standard contractual clauses where required.

8. Data security

We take data security seriously and use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, confidentiality obligations, and regular review of our data handling practices.

While we do our best to protect your personal information, no system can be guaranteed to be completely secure. We therefore encourage you to share only the information needed for your service request.

9. Your rights

Under data protection law, you have rights regarding your personal data. These rights may apply in different circumstances and are not absolute. They include:

Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete information.
Right to erasure: You may request deletion of your data in certain circumstances.
Right to restriction: You may ask us to restrict how we use your data in certain situations.
Right to data portability: You may request that we provide certain information in a structured, commonly used format.
Right to object: You may object to processing based on legitimate interests, and in some cases to direct marketing.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we may need to verify your identity before responding. We will respond within the time limits required by law unless an extension is permitted.

Please note that some rights may be limited where we must keep data for legal compliance, resolve disputes, or protect the rights of others.

10. Marketing communications

We may send service-related communications where necessary to deliver our services. If we send marketing communications, we will do so only where permitted by law. You can opt out of marketing at any time. Transactional or service messages may still be sent where required to complete or manage your booking.

11. Cookies and similar technologies

If we use a website or online service, cookies or similar technologies may be used to support basic functionality, improve performance, or gather limited usage statistics. Where required, we will provide appropriate notice and obtain consent before placing non-essential cookies.

12. Complaints and your right to complain

If you have concerns about how we handle your personal data, you should first raise the issue with us so we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. Any updated version will apply from the date it is published or otherwise communicated to you. We recommend reviewing this policy periodically.

14. Summary of our commitment

Mill Hill Carpet Cleaners is committed to using personal data responsibly, only for clear and lawful purposes, and with respect for your privacy. We collect only what we need, keep it only as long as necessary, and use processors carefully to support our services. Your rights matter to us, and we aim to ensure that all customers in the Mill Hill area can trust us with their personal information.