Privacy Policy - Bermondsey Carpetcleaning

This Privacy Policy explains how Bermondsey Carpetcleaning collects, uses, shares, stores, and protects personal data. It applies to all Bermondsey Carpetcleaning customers in the area, including individuals who request quotations, make bookings, receive services, or otherwise interact with us. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By engaging our services, you acknowledge that you have read this Privacy Policy and understand how your information may be processed. We only collect and use personal data where necessary for business operations, service delivery, legal compliance, and legitimate interests.

1. Information We Collect

We collect only the personal data that is necessary to provide our services effectively and manage our customer relationships. Depending on the nature of your interaction with us, we may collect the following categories of information:

• Identity details: your name and, where relevant, business name.
• Contact information: telephone number, email address, and service address.
• Service details: booking information, property access notes, cleaning requirements, and records of work performed.
• Payment information: payment status, transaction references, and billing records. We do not intentionally store full card details unless required by secure payment systems.
• Communication records: correspondence, messages, complaints, feedback, and service instructions.
• Technical data: limited device, browser, and usage information if you communicate with us electronically or use digital booking methods.
• Special category data: we do not routinely collect special category data. If such information is disclosed to us incidentally, for example in relation to access needs or vulnerability considerations, we will handle it with appropriate care and legal safeguards.

We do not collect more data than is reasonably required for our services. We also aim to ensure that the information we hold is accurate and kept up to date.

2. How We Use Your Data

Your personal data may be used for the following purposes:

• to respond to enquiries and provide quotations;
• to schedule and deliver carpet cleaning and related services;
• to manage appointments, access arrangements, and customer preferences;
• to process payments, issue invoices, and maintain accounting records;
• to communicate service updates, changes, or follow-up information;
• to handle complaints, disputes, and customer support requests;
• to meet legal, tax, insurance, and regulatory obligations;
• to improve our services, operational efficiency, and customer experience;
• to maintain security, prevent fraud, and protect our business, staff, and customers;
• to establish, exercise, or defend legal claims.

We will not use your personal data for purposes that are incompatible with those listed above unless permitted or required by law.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Bermondsey Carpetcleaning relies on the following lawful bases, depending on the circumstances:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotations, confirming bookings, carrying out cleaning services, and managing payment arrangements.

Legal Obligation

We may process data where necessary to comply with legal obligations, including tax, accounting, insurance, and record-keeping requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. Examples include managing business operations, maintaining service quality, preventing fraud, keeping internal records, and responding to enquiries or complaints.

Consent

In limited situations, we may rely on your consent, for example where you actively agree to receive certain forms of direct marketing or where consent is otherwise required by law. You may withdraw consent at any time where it is the lawful basis relied upon.

We do not rely on consent where another lawful basis is more appropriate and more reliable for the relevant processing activity.

4. Sharing Your Information and Processors

We may share personal data with trusted third parties where necessary for legitimate business purposes, legal compliance, or service delivery. When we use external service providers, they act as processors or independent controllers depending on their role. Where they act as processors, they process your data only on our instructions and are bound by data protection obligations.

Examples of processors and recipients may include:

• Payment service providers that handle transactions securely;
• Accounting and bookkeeping providers that help us manage invoices and financial records;
• IT and cloud storage providers that support secure data storage, email, scheduling, or backup systems;
• Customer communication tools used to manage messages, service updates, or appointment reminders;
• Professional advisers such as insurers, legal advisers, or auditors where necessary;
• Public authorities where disclosure is required by law, court order, or regulatory request.

We require appropriate safeguards from all processors that handle personal data on our behalf. We do not sell personal data to third parties.

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law. The length of time we keep information depends on the type of data and why it is held.

• Customer and service records: retained for a reasonable period after service completion to manage queries, complaints, warranty-type issues, and operational records.
• Financial and tax records: retained for the period required by law and accounting rules.
• Correspondence and support records: retained for as long as needed to resolve issues and maintain business records.
• Marketing preferences: retained until you withdraw consent or object, where applicable.

When personal data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention procedures.

6. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our information handling practices.

While we take security seriously, no method of transmission or storage is completely risk-free. We therefore encourage customers to share only the information necessary for their service request.

7. Your Rights

Under data protection law, you have a number of rights regarding your personal data. These rights may be subject to legal conditions or exemptions, but we will always respond appropriately and transparently. Your rights include:

• Right of access: you can request a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct inaccurate or incomplete information.
• Right to erasure: in certain circumstances, you can request deletion of your data.
• Right to restriction: you can ask us to limit how we use your data in certain situations.
• Right to object: you can object to processing based on legitimate interests or direct marketing.
• Right to data portability: where applicable, you can request your data in a structured, commonly used format.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

We will not discriminate against you for exercising your rights.

If you believe your data protection rights have been infringed, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

8. International Transfers

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place to protect it. This may include approved contractual protections or transfers to countries recognised as providing an adequate level of protection.

9. Children’s Data

Our services are generally intended for adult customers and commercial or domestic property holders. We do not knowingly collect personal data from children unless it is necessary in a limited context and lawful to do so. If we become aware that we have inadvertently collected such data without appropriate justification, we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or the services we provide. Any revised version will apply from the date of publication or communication, as appropriate. We encourage customers to review this policy periodically so they remain informed about how personal data is handled.

11. Summary of Our Privacy Commitment

Bermondsey Carpetcleaning is committed to processing personal data responsibly, securely, and only for legitimate business purposes. We collect only what we need, use it on a proper lawful basis, retain it for no longer than necessary, and share it only with trusted processors or where required by law. We respect your rights and aim to ensure that all customers in the Bermondsey Carpetcleaning area can rely on a clear, lawful, and transparent approach to privacy.

This Privacy Policy applies to all Bermondsey Carpetcleaning customers in area.

Last updated: 2026