Privacy Policy - Sipson Carpet Cleaners

This Privacy Policy explains how Sipson Carpet Cleaners collects, uses, stores, shares, and protects personal data relating to our customers in the Sipson area. It applies to all Sipson Carpet Cleaners customers in area, including individuals who request quotations, book services, receive cleaning services, or otherwise interact with us in connection with carpet, upholstery, rug, and related cleaning services.

We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to help you understand what information we collect, why we collect it, how long we keep it, and what rights you have over your personal data.

1. Who We Are

Sipson Carpet Cleaners provides professional cleaning services to residential and commercial customers. In the course of delivering these services, we act as a data controller for the personal data we collect and determine the purposes and means of processing that information.

We are responsible for ensuring that any personal information we handle is used only for legitimate business purposes and protected with appropriate security measures.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, and any other identifying details you provide.
Contact data: address, email address, telephone number, and service location details.
Booking and service data: information about the services requested, service preferences, property access notes, and relevant instructions.
Payment data: billing information and transaction details, where applicable.
Communication data: messages, enquiries, complaints, feedback, and records of correspondence.
Technical data: limited information such as device type, browser information, and usage details if you interact with our digital systems.
Special circumstances data: any personal information you choose to share that is relevant to delivering the service, for example access needs or property-related concerns.

We collect most information directly from you when you request a quote, make a booking, communicate with us, or use our services. In some cases, we may receive data from third parties such as business partners, referral sources, or payment providers where necessary to complete a transaction or fulfil a service request.

3. How We Use Your Personal Data

We use personal data only where it is permitted by law and only for specified purposes. These include:

responding to enquiries and providing quotations;
arranging and delivering cleaning services;
managing appointments, attendance, and operational scheduling;
processing payments and maintaining business records;
communicating service updates or responding to customer requests;
handling complaints, disputes, and service-related issues;
maintaining security, preventing fraud, and protecting our operations;
complying with legal, accounting, and regulatory obligations;
improving our services, customer experience, and internal processes.

We will not use your personal data in a way that is incompatible with the purposes set out in this policy.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing your personal data. Depending on the circumstances, we rely on the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotations, confirming bookings, delivering cleaning services, and taking steps at your request before entering into a contract.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include improving service quality, managing operations, keeping basic service records, and protecting against misuse or fraud.

Legal Obligation

We may process and retain certain information where required to comply with legal, tax, accounting, or regulatory obligations.

Consent

In limited cases, we may rely on your consent, for example where you voluntarily provide information that is not required for service delivery. Where consent is the basis, you may withdraw it at any time.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties where this is necessary for business operations, legal compliance, or service delivery. These third parties act as processors or independent controllers, depending on their role.

Examples of processors may include:

payment service providers;
IT and cloud hosting providers;
customer management and administration software providers;
communication and email service providers;
professional advisers such as accountants or legal advisers, where appropriate;
subcontractors or operational partners engaged to help deliver services.

Where we use processors, we ensure they are subject to appropriate contractual obligations to protect personal data, act only on our instructions, and implement suitable security measures. We do not sell personal data.

We may also disclose information where required by law, court order, or lawful request from a public authority. In all cases, we aim to limit disclosures to what is necessary and relevant.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting obligations. Retention periods may vary depending on the type of data and the reason it was collected.

As a general approach:

quotation and enquiry records may be kept for a limited period to manage follow-up and business administration;
service and booking records may be kept for the duration needed to provide the service and handle aftercare or complaints;
payment and invoicing records may be retained for the period required by tax and accounting law;
communication records may be retained for a reasonable period to manage customer service and resolve disputes.

When personal data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices.

7. Data Security

We take the security of personal data seriously and use appropriate technical and organisational measures to help protect it from unauthorised access, loss, alteration, or disclosure. These measures may include access controls, secure storage, confidentiality practices, and restricted data access on a need-to-know basis.

While no system is completely secure, we work to reduce risk and to handle data in a responsible and careful manner. If a personal data breach occurs that affects your rights and freedoms, we will respond in line with legal requirements.

8. Your Rights Under GDPR

You have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these rights include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to ask us to limit how we use your data in certain situations.
Right to data portability: to receive certain data in a structured, commonly used format where applicable.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully. We encourage you to contact us first so we can try to resolve your concern promptly.

9. Children’s Data

Our services are generally intended for adults. We do not knowingly collect personal data from children unless it is necessary in the context of a customer’s property or service arrangement and only where lawful to do so.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our operations, or how we process personal data. The most current version will apply from the date it is published or otherwise communicated. We encourage customers to review it periodically.

11. Summary of Your Responsibilities

When you provide information to Sipson Carpet Cleaners, please ensure it is accurate and up to date. If you provide personal data about another person, you should only do so where you have a lawful basis and, where needed, their knowledge or permission. This helps us maintain accurate records and provide services effectively.

By using our services, you acknowledge that we may process your personal data as described in this policy, subject always to applicable data protection law.

This Privacy Policy applies to all Sipson Carpet Cleaners customers in area.