Privacy Policy

Paddington Carpet Cleaning Privacy Policy

This Privacy Policy explains how Paddington Carpet Cleaning collects, uses, stores and protects personal data relating to our customers and prospective customers in our service area. It also explains the rights you have under the UK General Data Protection Regulation and related data protection laws.

This Privacy Policy applies to all Paddington Carpet Cleaning customers and individuals who contact us, request a quotation, use our services, or otherwise interact with us within our operating area.

Who we are and scope of this policy

Paddington Carpet Cleaning is a carpet and upholstery cleaning service provider operating in the local area around Paddington. In the context of applicable data protection laws, we act as the data controller for the personal data we collect and process about you in connection with the provision of our services.

This Privacy Policy covers personal data that relates to customers, potential customers, and individuals who contact us about our services, whether by telephone, online forms, or other communication methods.

Types of personal data we collect

We only collect personal data that is necessary for the purposes described in this Privacy Policy. The types of data we may collect include:

Identification and contact details: name, title, billing address, service address, and other address details that you provide to us for service delivery.

Communication details: any information contained in enquiries, messages, and correspondence you send to us, including the date, time and subject of the communication.

Service details: information about the type of property, areas to be cleaned, materials or fabrics, images you choose to share with us to obtain a quote, and details about past and upcoming bookings.

Payment and transaction information: information related to payments for our services, such as transaction amounts, dates and payment methods. We do not store full payment card details when third party payment processors are used.

Technical and usage information: limited technical information that may be collected when you visit our online pages, such as browser type, general location, and pages visited, where this is necessary for security and performance.

How we collect your personal data

We collect personal data through the following methods:

Directly from you when you contact us for a quotation, make a booking, request customer support, or otherwise communicate with us.

Through our website or online contact forms when you submit your details for enquiries, quotations or bookings.

During the provision of our services at your premises, for example when our technicians confirm details of the job or update records relating to completed work.

From third party processors, such as payment service providers, when they confirm that a payment has been made or provide transaction references.

Purposes and lawful basis for processing

We process your personal data only where we have a lawful basis to do so. The main purposes and corresponding lawful bases are:

To provide quotations and respond to enquiries. We process your contact and service details in order to give you information you request and prepare quotes. The lawful basis is our legitimate interest in responding to potential customers and, where you have requested specific information, taking steps at your request prior to entering a contract.

To perform and manage our contract with you. When you book a service with us, we process your personal data to manage the booking, deliver the service, take payment, and communicate with you about the work. The lawful basis is performance of a contract.

To manage customer accounts and records. We may keep records of your past services, invoices and communications to manage our relationship with you and to address any queries, complaints, or legal claims. The lawful basis is our legitimate interest in running our business and, where necessary, compliance with legal obligations.

To send service-related communications. We may send you messages about your appointments, changes to services, or updates necessary to deliver our services. The lawful basis is performance of a contract and our legitimate interests.

To comply with legal and regulatory obligations. We may process and retain certain information for tax, accounting, and other legal requirements. The lawful basis is compliance with a legal obligation.

To improve our services and operations. We may analyse anonymised or aggregated data to understand service usage and improve the efficiency and quality of our services. Where data remains identifiable, our lawful basis is our legitimate interests, and where required, your consent.

Marketing communications. We only send direct marketing communications where we have your consent or where the law otherwise permits us to do so. You can opt out of marketing communications at any time.

Data retention and storage

We keep your personal data only for as long as necessary for the purposes for which it was collected, and in accordance with applicable legal and regulatory requirements.

In general:

Customer records and service history may be kept for up to six years after the end of our relationship with you, to comply with tax and accounting rules and to handle potential legal claims.

Enquiry information from individuals who do not become customers will normally be retained for a shorter period, typically up to two years, unless a longer period is required to handle ongoing enquiries.

Financial transaction records will be retained for as long as required by tax and financial regulations.

When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be linked to you.

Data processors and third party recipients

We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are only permitted to process your data in accordance with our instructions and for the purposes described in this Privacy Policy. They are required to implement appropriate technical and organisational measures to protect your data.

Types of processors and third party recipients may include:

Payment service providers that process your payments securely on our behalf.

IT and cloud service providers that host our systems, store data, or provide communication and booking tools.

Accountants or professional advisers who assist with our financial or legal obligations.

Where necessary, we may also share personal data with law enforcement agencies, regulators, or other authorities where we are legally required or permitted to do so.

We do not sell your personal data to third parties.

International transfers

Where any of our service providers are located outside the United Kingdom or the European Economic Area, and where this results in the transfer of your personal data to a country that does not provide an equivalent level of data protection, we will ensure that appropriate safeguards are in place. These may include standard contractual clauses or other legally recognised transfer mechanisms under the GDPR.

Security of your personal data

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, or destruction. These measures include access controls, secure storage solutions, and staff awareness of data protection responsibilities. While we take reasonable precautions, no method of transmission or storage can be guaranteed as completely secure.

Your data protection rights

Under data protection law, you have certain rights in relation to the personal data we hold about you. These include:

Right of access. You have the right to request confirmation of whether we process your personal data and to request a copy of that data, together with information about how it is used.

Right to rectification. You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or updated.

Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer needed for the purpose for which it was collected or where you withdraw consent.

Right to restrict processing. You may request that we restrict the processing of your data in specific situations, such as while we are considering an objection you have raised.

Right to data portability. For data that you have provided to us and that we process on the basis of consent or contract using automated means, you have the right to receive that data in a commonly used, machine readable format and to request that it be transferred to another controller.

Right to object. You have the right to object to processing based on our legitimate interests, including profiling, and to object at any time to processing for direct marketing purposes.

Right to withdraw consent. Where we rely on your consent to process your personal data, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

If you wish to exercise any of these rights, please contact us using the contact details provided on our main customer communications or website pages.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are unhappy with how we handle your personal data.

Children's data

Our services are directed at adults responsible for managing household or business premises. We do not knowingly collect personal data relating to children. If you believe that a child has provided us with personal information, please contact us so that we can delete it where appropriate.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. Any updated version will be made available through our usual customer information channels and will apply from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.