Privacy Policy - Forestdale Carpet Cleaners

This Privacy Policy explains how Forestdale Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Forestdale Carpet Cleaners customers in area, including prospective customers, current customers, and anyone who communicates with us about our services.

We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is written to help you understand what information we collect, why we collect it, how long we keep it, and what rights you have.

1. Data We Collect

We may collect and process the following categories of personal data:

Identity data: your name and any business name you provide.
Contact data: address, phone number, and email address.
Service information: details about the carpet cleaning services you request, including property type, access notes, preferred appointment times, and cleaning requirements.
Billing and payment data: payment records, transaction details, and invoicing information.
Communication data: messages, enquiries, complaints, feedback, and service-related correspondence.
Technical data: limited website or device data if you contact us online, such as IP address or browser type, where applicable.
Photo or condition data: images or notes relating to stain conditions, carpet condition, or work completed, where needed for service records.

We do not intentionally collect special category data unless it is provided voluntarily and is necessary for a specific legal or service-related reason. If such data is ever relevant, we will only process it where permitted by law and with additional safeguards.

2. How We Use Your Data

We use personal data for the following purposes:

To provide carpet cleaning and related services.
To book, confirm, reschedule, and manage appointments.
To communicate with you about your service request or customer account.
To prepare quotes, estimates, invoices, and receipts.
To process payments and manage accounting records.
To respond to questions, complaints, or requests.
To maintain business records and service history.
To improve our services, training, and operational performance.
To comply with legal and regulatory obligations.

We only collect data that is relevant and necessary for these purposes. We do not use your personal data for decisions based solely on automated processing that produce legal or similarly significant effects.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process your personal data. Depending on the situation, Forestdale Carpet Cleaners may rely on one or more of the following lawful bases:

Contract

We process your personal data when it is necessary to enter into or perform a contract with you. This includes taking bookings, carrying out cleaning work, issuing invoices, and managing customer requests.

Legal Obligation

We may process your data where we must comply with a legal requirement, such as tax, accounting, insurance, fraud prevention, or record-keeping obligations.

Legitimate Interests

We may process your data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing customer communications, improving services, protecting our business against misuse, and maintaining service records.

Consent

In limited circumstances, we may rely on your consent, for example when it is required for optional communications or specific data uses. Where consent is used, you may withdraw it at any time.

4. Sharing Your Data and Processors

We do not sell your personal data. We may share it only when necessary and only with trusted third parties who help us operate our business. These parties act as processors or independent controllers depending on the nature of their services.

Examples of processors may include:

Payment processors, which handle card or electronic payments.
Accounting and bookkeeping providers, which help manage financial records.
IT and cloud storage providers, which support secure storage, email, scheduling, or business software.
Customer management tools, which assist with appointments, record keeping, and communications.

Where we use processors, we ensure appropriate contractual safeguards are in place so your data is only processed on our instructions and protected to the required standard.

We may also share personal data where required by law, regulation, a court order, or with insurers, legal advisers, or law enforcement agencies where necessary and lawful.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.

Retention periods may vary depending on the type of data and purpose. As a general approach:

Customer service and booking records are kept for a period necessary to manage the service relationship and resolve queries.
Invoices, payment records, and accounting information are kept for the period required by tax and financial laws.
Complaint or dispute records may be retained longer where needed to defend legal claims or comply with obligations.

When data is no longer needed, we will securely delete, anonymise, or otherwise dispose of it in line with our retention practices.

6. Data Security

We take reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure systems, staff awareness, and limited access to customer records.

However, no method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security.

7. Your Rights

Under data protection law, you have important rights over your personal data. Subject to legal limits, these include:

Right of access: you can ask for a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: you can ask us to delete your data in certain circumstances.
Right to restriction: you can ask us to limit how we use your data in certain cases.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you can request certain data in a structured, commonly used format where applicable.
Right to withdraw consent: if we rely on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the relevant data protection authority if you believe your data has been handled unlawfully. We encourage you to contact us first so we can try to resolve any concerns.

8. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is necessary and authorised by a parent, guardian, or lawful customer arrangement.

9. International Transfers

Where any service provider stores or accesses data outside the UK, we will ensure appropriate safeguards are in place so that personal data remains protected in line with applicable law.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. Any updated version will apply from the date it is published or otherwise communicated to customers.

11. Contact and Further Information

If you have questions about this Privacy Policy, your personal data, or your rights, you may raise your concerns through our usual customer communication channels. We will review requests and respond within a reasonable timeframe in line with applicable data protection law.

Forestdale Carpet Cleaners values your privacy and is committed to using your personal data responsibly, securely, and only where it is lawful to do so.