Privacy Policy - Kingston Carpetcleaning

This Privacy Policy explains how Kingston Carpetcleaning collects, uses, stores, shares, and protects personal data relating to customers and prospective customers. It applies to all Kingston Carpetcleaning customers in area, including individuals who request quotes, book services, make enquiries, or otherwise interact with our business. We are committed to handling personal information in a lawful, fair, transparent, and secure manner in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We collect only the personal data that is necessary for operating our services, managing customer relationships, and meeting legal and contractual obligations. The categories of data we may collect include:

Identity information such as your name and, where relevant, business name.
Contact information such as address, email address, telephone number, and service location.
Service details including information about the type of cleaning requested, property access notes, booking preferences, and special instructions.
Payment information such as billing details, transaction records, and payment confirmation data.
Communication records including correspondence by phone, email, text, or other messaging methods.
Technical information where applicable, such as basic website usage data or device information if you interact with our digital services.
Feedback and complaint information relating to customer satisfaction, service issues, or resolution requests.

We do not intentionally collect special category data unless it is provided by you and is necessary for a specific service request or to accommodate a legitimate concern, and even then only where lawful to do so.

2. How We Use Your Personal Data

We use personal data for legitimate business purposes connected with providing carpet cleaning services and managing our relationship with you. This may include:

responding to enquiries and providing quotations;
arranging appointments and delivering services;
processing payments and maintaining financial records;
communicating service updates, confirmations, or follow-up information;
handling complaints, feedback, and service recovery;
maintaining records for accounting, tax, insurance, and compliance purposes;
improving our services, customer experience, and operational efficiency;
preventing fraud, misuse, or security incidents;
meeting any legal, regulatory, or contractual obligations.

We only use personal data for purposes that are compatible with the reasons it was collected. If we need to use your information for a new purpose, we will ensure that we have a valid legal basis for doing so.

3. Lawful Basis for Processing

We process personal data only where we have a lawful basis under data protection law. Depending on the circumstances, we may rely on one or more of the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotes, confirming bookings, carrying out cleaning services, and managing payment-related matters.

Legal Obligation

We may process personal data to comply with legal requirements, such as tax, accounting, business recordkeeping, and responding to lawful requests from public authorities.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include improving services, maintaining customer records, managing service quality, and protecting our business from fraud or misuse.

Consent

In limited circumstances, we may rely on your consent, for example where it is required for optional communications or specific processing activities. Where consent is used, you have the right to withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These organisations act as data processors or independent controllers depending on the service provided. We take care to work only with parties that implement appropriate safeguards.

Processors may include:

Payment service providers who process transactions securely.
Accounting and bookkeeping providers who assist with financial administration and tax compliance.
Booking, scheduling, or customer management tools used to manage appointments and service records.
IT and cloud storage providers who support data hosting, backups, and system maintenance.
Communication service providers who help us send confirmations, reminders, or service updates.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

We may also disclose personal data if required by law, to defend legal claims, to protect our rights, or to prevent unlawful activity. We do not sell personal data.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, and reporting requirements. Retention periods depend on the type of information and the reason for processing it.

Customer and service records are generally retained for the duration of the customer relationship and for a reasonable period afterwards.
Financial and tax records are kept for the period required by law.
Communication records may be retained for resolving disputes, managing service quality, or maintaining business records.
Consent-based data is retained until consent is withdrawn or the purpose no longer applies.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful oversight of third-party providers.

Although we take reasonable steps to safeguard personal information, no system can be guaranteed to be completely secure. If a data incident occurs, we will respond in line with our legal obligations and internal procedures.

7. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to ask us to limit how we use your information in certain situations.
Right to data portability – to receive some data in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

To exercise your rights, you may need to provide information that helps us verify your identity. We will respond within the time limits required by law unless an extension is permitted.

8. Children’s Data

Our services are directed to adults and business customers. We do not knowingly collect personal data from children unless it is incidental to a service request made by an adult customer and necessary for completing that request lawfully.

9. International Transfers

If any of our processors store or access personal data outside the UK, we will ensure that appropriate safeguards are in place before any transfer takes place. These safeguards may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms recognised by data protection law.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updates will take effect when published or otherwise communicated to you. We encourage you to review this policy periodically so that you remain informed about how we use personal data.

11. Summary of Our Commitments

Kingston Carpetcleaning is committed to responsible, transparent, and secure handling of personal data. We collect only what we need, use it for clear and lawful purposes, retain it for appropriate periods, and share it only with trusted processors or where required by law. We also respect your rights and will support you in exercising them.

This Privacy Policy applies to all Kingston Carpetcleaning customers in area and is intended to provide clear information about how personal data is managed in connection with our services.