Privacy Policy - Brent Carpet Cleaners

Last updated: This Privacy Policy explains how Brent Carpet Cleaners collects, uses, stores, shares, and protects personal data relating to all customers in the Brent area.

This policy applies to all Brent Carpet Cleaners customers in area, including prospective customers, current customers, and anyone who has requested information, booked a service, or communicated with us about carpet cleaning, upholstery cleaning, rug cleaning, stain treatment, or related services. We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data We Collect

We only collect personal data that is necessary for providing our services, managing our business, and meeting legal obligations. The types of information we may collect include:

Identity details such as your name and title.
Contact details such as your address, email address, and phone number.
Service information including booking details, property access requirements, cleaning preferences, and notes relevant to the service.
Payment information such as billing records, payment confirmation, and transaction references. We do not store unnecessary payment card details where these are processed securely by a payment provider.
Communication records including messages, complaints, feedback, and service-related correspondence.
Technical information such as basic device or browser details when you interact with our digital services, if applicable.

We do not intentionally collect special category data unless it is required for a specific lawful and service-related reason. If such information is ever shared with us, we will only process it where there is an appropriate legal basis and adequate safeguards.

2. How We Use Personal Data

We use personal data only for legitimate and clearly defined purposes. These may include:

Managing customer enquiries and responding to service requests.
Arranging appointments, confirming bookings, and delivering cleaning services.
Preparing quotations, invoices, and payment records.
Maintaining service quality, handling complaints, and improving our operations.
Keeping records for accounting, tax, and legal compliance.
Preventing fraud, misuse, and security incidents.
Communicating service updates and necessary administrative information.

We do not use personal data for unrelated purposes without notifying you and ensuring we have a lawful basis to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the situation, Brent Carpet Cleaners relies on the following lawful bases:

Performance of a Contract

We process personal data when it is necessary to provide a quote, arrange a booking, deliver a cleaning service, or carry out any agreement with you. This includes using your contact details, address, and service instructions.

Legal Obligation

We may process and retain certain information to comply with accounting, tax, insurance, and other legal requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided these interests are not overridden by your rights and freedoms. Examples include managing customer relationships, improving services, maintaining records, and protecting our business from misuse.

Consent

In limited cases, we may rely on your consent, especially for optional communications or specific data uses. Where consent is used, you can withdraw it at any time.

Vital Interests and Public Interest

These bases are unlikely to apply in most cases, but we may process data where necessary to protect someone’s vital interests or where required by law.

4. Data Sharing and Processors

We may share personal data with trusted third parties who assist us in operating our business. These parties act as processors when they process data on our instructions and are required to protect it appropriately.

Examples of processors or service providers may include:

Booking and scheduling providers.
Accounting and invoicing software providers.
IT support and data storage providers.
Payment processing services.
Communication tools used for emails, messages, or service administration.

We may also share data with professional advisers, insurers, or public authorities where necessary and lawful. We do not sell personal data. If data is transferred outside the UK, we will ensure appropriate safeguards are in place to protect it.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and for any additional period required by law. Retention periods may vary depending on the type of data and the reason it is held.

Customer and service records are kept for the duration needed to manage the relationship and deal with any follow-up issues.
Invoice and tax records are retained for the period required by accounting and tax law.
Communication records may be kept for a reasonable period to handle complaints, resolve disputes, or improve service delivery.
Technical and security logs are kept only as long as necessary for system protection and troubleshooting.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

6. Security of Personal Data

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, or alteration. These measures may include access restrictions, secure storage, staff confidentiality obligations, and regular review of our data handling practices.

However, no method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security.

7. Your Rights

As a data subject under UK GDPR, you have several rights regarding your personal data. These include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to data portability – to receive certain information in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

These rights are not absolute, and some may not apply in every situation. We will assess each request in line with our legal obligations.

8. How to Exercise Your Rights

You may contact us to exercise your rights or to ask questions about how we handle personal data. We may need to verify your identity before acting on your request. We aim to respond within the time limits required by law and will explain if any exemptions apply.

If you believe your data rights have been infringed, you also have the right to raise a concern with the Information Commissioner’s Office (ICO) or your relevant data protection authority.

9. Children’s Data

Our services are intended for adults and commercial customers. We do not knowingly collect personal data from children unless it is unavoidably included in service-related communications and processing is necessary and lawful.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any updated version will apply from the date it is issued. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

11. Summary of Our Commitments

Brent Carpet Cleaners is committed to processing personal data fairly, lawfully, and transparently. We collect only the information needed to deliver our services, rely on appropriate lawful bases, keep data only as long as necessary, use trusted processors, and respect your data protection rights. This policy applies to all Brent Carpet Cleaners customers in area and forms part of our wider commitment to responsible data handling.