Privacy Policy - Harrow Carpetcleaning

This Privacy Policy explains how Harrow Carpetcleaning collects, uses, stores, and protects personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Harrow Carpetcleaning customers in area, including prospective customers, current customers, and any person who interacts with our services. We are committed to handling personal information lawfully, fairly, and transparently.

1. Introduction

We value the privacy of every customer and take our responsibilities seriously. When you use our services, request a quote, make an enquiry, or otherwise engage with Harrow Carpetcleaning, we may collect and process certain personal data. This policy explains what data we collect, why we collect it, the legal grounds on which we rely, how long we keep it, who may process it on our behalf, and what rights you have in relation to your information.

We only collect information that is necessary for delivering our services, managing our business, meeting legal obligations, and improving the customer experience. We aim to keep data accurate, secure, and up to date, and we do not sell personal information to third parties.

2. Data We Collect

Depending on the nature of your interaction with us, we may collect the following categories of personal data:

Identity details such as your name.
Contact details such as your phone number, email address, and service address.
Service information such as your booking history, preferences, property details relevant to carpet cleaning, and notes required to perform the service.
Communication records including messages, inquiries, complaints, feedback, and correspondence.
Payment and transaction information where needed to process invoices, payments, refunds, or accounting records.
Technical data such as basic device or browser information if you interact with our digital systems.
Operational records such as attendance notes, service completion records, and internal job documentation.

We do not intentionally collect special category data unless it is necessary and lawful to do so. Special category data includes information about health, religion, ethnicity, political views, or similar sensitive matters. If such data is ever provided voluntarily and is relevant to a service request, we will only process it where a valid legal basis exists and appropriate safeguards are in place.

3. How We Use Personal Data

We use personal data only for legitimate business and operational purposes. These may include:

Arranging and delivering carpet cleaning and related services.
Managing bookings, quotations, and customer enquiries.
Processing payments and maintaining financial records.
Communicating about appointments, service updates, or follow-up matters.
Handling complaints, disputes, and quality assurance.
Maintaining internal records and improving service efficiency.
Meeting legal, regulatory, tax, and accounting obligations.
Protecting our business, staff, and customers from fraud or misuse.

We do not use personal data for purposes that are incompatible with those described in this policy unless we have obtained consent or are otherwise permitted or required by law.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Harrow Carpetcleaning relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes taking booking details, arranging visits, carrying out services, and handling payment-related matters.

Legal Obligation

We may process data when required to comply with legal obligations, such as tax, accounting, record-keeping, fraud prevention, and responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. Examples include service administration, customer support, business planning, maintaining internal records, and safeguarding our operations.

Consent

In some situations, we may rely on your consent, especially where the law requires it for specific forms of communication or optional data processing. If we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods vary depending on the type of information and the purpose of processing.

Customer service records are retained for a period appropriate to manage ongoing service history, complaints, and warranty or dispute matters.
Financial records are retained for the period required by tax and accounting laws.
Communication records may be retained for a reasonable time to support customer care, evidence of instructions, and quality control.
Operational records are retained only as long as needed for business management and service performance.

When data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a safe and responsible manner. If information must be kept due to a legal dispute or official investigation, it will be retained only for that purpose and no longer than necessary.

6. Processors and Third Parties

We may use trusted third parties to process personal data on our behalf. These organisations act as processors and may include service providers that assist with:

Appointment administration and record keeping.
Payment processing and financial administration.
IT systems, data storage, and secure backup services.
Communication tools used for service-related messages.
Professional advice, such as accounting or legal support.

All processors are required to protect personal data, follow our instructions, and comply with data protection law. We only share the minimum information necessary for the relevant task. Where required, we also ensure that appropriate contractual safeguards are in place.

In limited circumstances, we may disclose personal data to other parties where this is required by law, necessary to protect our rights, or needed to prevent fraud or unlawful activity. We do not permit third parties to use customer data for their own marketing unless you have been informed and, where needed, consent has been obtained.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and data minimisation practices. While no system can be guaranteed completely secure, we work continuously to maintain high standards of protection.

Staff and any authorised processors are expected to handle information with care and confidentiality. Access is limited to individuals who need the data to perform legitimate duties.

8. Your Rights

As a data subject, you have rights under GDPR in relation to your personal data. These rights may apply in different circumstances and are not absolute. They include:

Right of access — you may request a copy of the personal data we hold about you.
Right to rectification — you may ask us to correct inaccurate or incomplete information.
Right to erasure — in certain cases, you may request deletion of your data.
Right to restriction — you may ask us to limit how we process your data in some situations.
Right to object — you may object to processing based on legitimate interests or direct marketing.
Right to data portability — where applicable, you may request your data in a structured, commonly used format.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

Please note that some rights may be limited where we need to retain data to comply with legal duties, defend legal claims, or complete contracted services. If you exercise any of these rights, we may need to verify your identity before responding.

9. Children’s Data

Our services are generally intended for adult customers or individuals acting on behalf of a property owner or occupier. We do not knowingly collect personal data from children unless it is necessary in connection with a lawful service arrangement and appropriate authorisation exists.

10. International Transfers

Where any processor or technology provider stores or accesses data outside the United Kingdom, we will ensure that suitable safeguards are in place to protect the information in accordance with applicable law. This may include approved contractual protections or transfer mechanisms.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service operations. Any updated version will apply from the date it is published. We encourage customers to review this policy periodically so they remain informed about how we handle personal data.

12. Summary of Our Commitment

Harrow Carpetcleaning is committed to responsible data handling, transparency, and respect for customer privacy. We collect only the personal data we need, use it for clear and lawful purposes, retain it only as long as necessary, and require any processors to protect it properly. We also recognise and support your rights over your personal information.

By using our services, you acknowledge that you have read and understood this Privacy Policy.