Privacy Policy

Stockwell Carpet Cleaning Privacy Policy

This Privacy Policy explains how Stockwell Carpet Cleaning collects, uses, stores and protects personal data relating to its customers in its service area. It also sets out your rights under the UK General Data Protection Regulation and related data protection laws. This policy applies to all Stockwell Carpet Cleaning customers and anyone who makes an enquiry or interacts with us in relation to our carpet cleaning and associated services.

Scope and Data Controller

Stockwell Carpet Cleaning is the controller of the personal data described in this Privacy Policy. This means that we decide how and why your personal data is processed. This Privacy Policy applies to all customers and prospective customers within the area in which we offer our services.

Categories of Personal Data We Collect

We may collect and process the following types of personal data:

Identification and contact details: name, title, service address, billing address, and other contact details such as your preferred methods of communication.

Service-related information: details about the property or premises relevant to the service, such as type of flooring or furnishings, access instructions, and any special requests or notes you choose to provide.

Booking and transaction data: dates and times of bookings, history of services provided, payment-related information such as amounts charged, payment method used, and whether payments were successful. We do not store full payment card details; where card payments are used, these are processed securely by third-party payment providers.

Communication data: information you provide when you contact us by phone, online form, or other channels, including enquiries, feedback and any complaints.

Technical data: limited technical information related to the use of our online presence, such as the basic details your browser or device shares with our website, to the extent necessary for security, troubleshooting and service improvement.

How We Collect Your Personal Data

We collect personal data directly from you when you contact us to request a quote, make a booking, or ask a question, whether by phone, online form, or other communication methods. We may also collect data when we provide services at your premises, for example by recording notes about the work carried out or follow-up actions.

We may receive limited personal data about you from third parties if, for example, a managing agent, landlord or another person books services on your behalf and provides your details as a point of contact or service address.

Lawful Bases for Processing

We will only process your personal data where we have a lawful basis to do so under data protection law. The main lawful bases we rely on are:

Performance of a contract: We process your personal data where this is necessary to provide our services to you, including taking steps at your request before entering into a contract, such as giving a quote, scheduling a visit, and issuing invoices.

Legitimate interests: We may process your data where it is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This includes activities such as managing our relationship with you, improving our services, maintaining accurate records, preventing fraud, and ensuring the security of our systems and staff.

Legal obligations: We may process your personal data where this is necessary to comply with our legal responsibilities, for example keeping certain accounting records for tax and reporting purposes.

Consent: In some cases we may rely on your consent, for example for certain forms of marketing communications where this is required by law. Where we rely on consent, you have the right to withdraw that consent at any time.

Purposes for Which We Use Personal Data

We use your personal data for the following purposes:

To respond to enquiries and provide quotes for our services.

To schedule and deliver carpet cleaning and related services at your premises.

To manage billing, process payments through our chosen payment processors, and send invoices or receipts.

To communicate with you regarding your bookings, changes to appointments, follow-up services, and any issues or complaints.

To maintain internal records of the services provided, including for quality control and staff training.

To comply with legal and regulatory requirements, including record-keeping and responding to lawful requests from authorities.

To protect our business, staff, and customers, including by preventing misuse of our services or fraudulent activity.

Use of Data Processors and Third Parties

We may share your personal data with third parties who act as data processors on our behalf. These processors only process your data in accordance with our instructions and for the purposes described in this Privacy Policy. Typical categories of processors include:

IT service providers who host or maintain our booking systems, communication tools or business software.

Payment service providers who securely process card or online payments for our services.

Professional advisers such as accountants, where necessary for the proper running of our business and compliance with legal obligations.

We require all such processors to implement appropriate technical and organisational measures to protect your personal data and to comply with data protection laws. We do not sell your personal data to third parties.

Data Retention

We will retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements.

Booking and service records are generally kept for a period that allows us to maintain a clear history of the services provided and deal with any queries, disputes or warranty issues. Financial and invoicing records may be retained for a longer minimum period as required by tax and accounting regulations.

When personal data is no longer needed, we will either delete it securely or anonymise it so that it can no longer be associated with you.

Security of Your Personal Data

We take reasonable and appropriate measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include limiting access to personal data to staff and processors who need it to perform their duties, using secure systems and tools where appropriate, and maintaining internal policies and training related to data protection and confidentiality.

Your Data Protection Rights

Under data protection law, and subject to certain conditions and exemptions, you have the following rights in relation to your personal data:

Right of access: You have the right to obtain confirmation as to whether we process personal data about you and, if so, to request a copy of that data and information about how we use it.

Right to rectification: You have the right to request that inaccurate or incomplete personal data about you is corrected or updated.

Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.

Right to restriction of processing: You may request that we restrict the processing of your personal data in certain situations, for example while we verify the accuracy of the data or consider an objection you have raised.

Right to object: You may object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including for direct marketing. We will then stop processing your data for that purpose unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms or the processing is required for legal claims.

Right to data portability: Where processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it is transmitted to another controller where technically feasible.

Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

International Transfers

Where we use service providers or systems that may involve transferring personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data, such as using standard contractual clauses or ensuring that the destination country has an adequate level of data protection recognised by law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. The updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.