Knightsbridge Carpet Cleaning Privacy Policy
This Privacy Policy explains how Knightsbridge Carpet Cleaning collects, uses, stores and protects personal data relating to customers and prospective customers within our service area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018, together referred to as GDPR in this policy.
By using our services, making an enquiry or otherwise interacting with Knightsbridge Carpet Cleaning, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all customers and prospective customers of Knightsbridge Carpet Cleaning within our service area, as well as to individuals who contact us with enquiries about our services. It covers all personal data that we process in connection with providing carpet cleaning and related services to residential and commercial clients.
Personal Data We Collect
We only collect personal data that is relevant and necessary for the provision of our services and the operation of our business. Depending on your interactions with us, we may collect the following categories of personal data:
Identification and contact details, such as name, postal address, service address, billing address, and general location information within our service area.
Communication details, such as information you provide when you contact us, request a quote, make a booking, provide feedback or make a complaint.
Service and contract information, including details of the services you request, visit dates and times, access instructions, property type, room and floor information and records of work carried out.
Financial and transaction data, including records of payments made and amounts due. We do not store full payment card details; where card payments are processed, this is carried out by third-party payment processors acting on our behalf.
Technical and usage information, which may include basic technical data generated when you visit our website or online booking tools, such as device type, browser type and general usage statistics. We do not seek to identify individuals from technical data unless necessary for security, fraud prevention or legal reasons.
Marketing preferences, including your choices about receiving updates, offers and service reminders from us.
Lawful Basis for Processing
We process personal data only where we have a valid lawful basis under GDPR. Depending on the context, we rely on the following lawful bases:
Contract. We process personal data to take steps at your request before entering into a contract and to perform our contract with you. This includes arranging and providing cleaning services, managing bookings, issuing invoices and processing payments.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. Our legitimate interests include managing and improving our services, responding to enquiries, maintaining accurate records, preventing fraud, ensuring the security of our systems and premises and promoting our services to existing customers in a proportionate way.
Legal obligation. We may process personal data where necessary to comply with our legal and regulatory obligations, including tax, accounting and reporting requirements.
Consent. In some situations, we may rely on your explicit consent, for example for certain types of direct marketing or where consent is the most appropriate lawful basis. Where we rely on consent, you have the right to withdraw that consent at any time.
How We Use Personal Data
We use personal data for the following purposes:
To provide and manage our services, including handling enquiries and quotes, confirming bookings, planning and performing cleaning services and following up on work completed.
To manage our relationship with you, including customer service, responding to comments or complaints, and contacting you about important changes to our services or this Privacy Policy.
To administer billing and payments, including issuing invoices, managing payment queries and maintaining financial records.
To improve our services, including internal analysis, service quality monitoring, staff training and service development.
For marketing and customer communications, including sending you information about similar services you have previously purchased, service reminders and relevant offers, in line with your communication preferences and applicable laws.
For security, fraud prevention and compliance, including protecting our staff, customers and business, and meeting our legal and regulatory obligations.
Data Sharing and Processors
We do not sell your personal data. We may share personal data with carefully selected third parties where necessary for the operation of our business and the delivery of our services. These third parties act as data processors or independent controllers depending on the circumstances.
Data processors are service providers who process personal data on our behalf and under our instructions. These may include providers of booking and job management systems, payment processing services, accounting and invoicing systems, information technology and cloud storage services, email and communication platforms and marketing or customer relationship management tools.
Where we use processors, we ensure that appropriate data processing agreements are in place and that they provide sufficient guarantees to implement technical and organisational measures that meet GDPR requirements.
We may also share personal data with professional advisers, such as accountants or legal advisers, where necessary for the provision of their services, and with regulatory authorities, law enforcement agencies or courts where required by law or where necessary to establish, exercise or defend legal claims.
If we ever consider a business transfer, such as a merger, acquisition or sale of part of our business, personal data may be transferred as part of that transaction in accordance with data protection laws.
International Transfers
Where any of our processors or service providers are located outside the United Kingdom or the European Economic Area, or use data centres in such locations, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with GDPR. These safeguards may include adequacy regulations issued by the relevant authorities or the use of standard contractual clauses approved for international data transfers.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. The retention period depends on the nature of the data and our legal and operational obligations.
Customer and service records are generally kept for as long as you remain a customer and for a reasonable period thereafter to handle queries, manage any disputes, meet our tax and accounting obligations and maintain accurate records of our business activities.
Financial records, including invoices and related transaction information, are retained for the period required by applicable tax and accounting laws.
Where personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be linked to an identifiable individual.
Your Data Protection Rights
Under GDPR, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. You have the right to:
Access your personal data. You can request confirmation that we are processing your personal data and obtain a copy of that data, along with information about how it is used.
Rectify inaccurate data. You can ask us to correct or complete any personal data that you believe is inaccurate or incomplete.
Erase your data. In certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Restrict processing. You can ask us to restrict the processing of your personal data in specific situations, such as where you contest the accuracy of the data or object to our legitimate interests.
Object to processing. You can object to the processing of your personal data based on our legitimate interests, including profiling, and to processing for direct marketing purposes.
Data portability. Where processing is based on consent or on a contract and is carried out by automated means, you may request to receive your personal data in a structured, commonly used and machine-readable format and to have it transmitted to another controller where technically feasible.
Withdraw consent. Where we rely on your consent, you can withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you are concerned about how we process your personal data. If you are in the United Kingdom, this is typically the Information Commissioner's Office. We encourage you to contact us first so that we can try to resolve your concerns directly.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include access controls, staff training, secure storage and regular review of our processes and systems. While we strive to protect your personal data, no system can be completely secure, and you share information with us at your own risk.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or for other operational reasons. Any changes will take effect when the updated policy is made available. You should review this Privacy Policy periodically to stay informed about how we process personal data.
