Rayners Lane Carpet Cleaners Privacy Policy
This Privacy Policy explains how Rayners Lane Carpet Cleaners collects, uses, stores and protects personal data relating to our customers and prospective customers in the Rayners Lane area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all individual customers and prospective customers of Rayners Lane Carpet Cleaners in the Rayners Lane area, including anyone who makes an enquiry, requests a quotation, books a service, or otherwise communicates with us in relation to carpet cleaning or associated services.
Personal data we collect
We collect and process different categories of personal data, depending on how you interact with us. The main types of personal data we may collect include:
Identity and contact details: This may include your name, address, postcode, and any other contact details you choose to provide such as your preferred contact method.
Service and booking information: This may include details of the property or premises where cleaning is required, information about the type and size of the areas to be cleaned, dates and times of appointments, access instructions, and records of services provided.
Communication records: This may include records of your communications with us, such as enquiries, feedback, and any complaints or follow‑up correspondence.
Payment and transaction data: This may include information relating to payments for our services, such as payment amounts, dates, and methods. We do not store full payment card details when payments are processed through secure third-party payment processors.
Technical and usage data: If you visit our website, we may collect limited technical information such as your Internet Protocol address, browser type and version, and information about how you use our website, through cookies or similar technologies, where this is permitted by applicable law.
How we collect personal data
We collect personal data from you directly when you contact us, for example by phone, in person, through an enquiry or booking form, or by any other communication method you choose to use. We may also receive personal data indirectly if another person arranges a service for you and provides your details, in which case we rely on them to have your permission to share that information.
Lawful bases for processing personal data
We only process personal data where we have a lawful basis to do so. The main lawful bases we rely on are:
Contract: We process personal data when it is necessary to enter into or perform a contract for carpet cleaning or related services. This includes handling bookings, managing appointments, providing services at your address, and processing payments.
Legitimate interests: We may process personal data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This can include managing and improving our services, keeping appropriate business records, handling customer enquiries, and promoting our services to existing customers in a proportionate way.
Legal obligations: We may process personal data where necessary to comply with legal or regulatory obligations, for example for tax, accounting, or insurance purposes, or to respond to lawful requests from public authorities.
Consent: In some limited situations, we may rely on your consent, for example for certain types of marketing communications where required by law. Where we rely on consent, you have the right to withdraw that consent at any time.
How we use personal data
We use personal data for the following purposes:
To respond to enquiries, provide quotations, and manage bookings and appointments.
To deliver carpet cleaning and related services at the agreed address and time.
To communicate with you about your appointment, including confirmations, reminders, and any changes.
To process payments and maintain accurate financial and service records.
To manage customer relationships, handle feedback and complaints, and resolve any disputes.
To improve our services, internal processes, and customer experience.
To meet legal, regulatory, and insurance requirements, and to establish, exercise, or defend legal claims if necessary.
Data retention
We keep personal data only for as long as is reasonably necessary for the purposes set out in this Privacy Policy, and to comply with our legal and regulatory obligations.
Service and booking records are typically retained for a period that allows us to respond to questions about past work, handle any follow‑up services, and meet our tax and accounting obligations. Financial records are usually kept for a minimum period required by applicable tax and accounting laws.
Where personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be associated with an identifiable individual.
Data processors and third parties
We may share personal data with trusted third‑party service providers who act as data processors on our behalf. These processors may assist us with functions such as payment processing, accounting support, appointment management, or information technology services.
When we use data processors, they are only permitted to process personal data in accordance with our instructions, for specified purposes, and must provide appropriate technical and organisational measures to protect the data.
We may also share personal data with other third parties in the following circumstances:
With professional advisers, such as accountants or legal advisers, where necessary for legitimate business purposes.
With public authorities, regulators, or law enforcement agencies where we are required to do so by law or to protect our rights or the rights of others.
In the context of a business transfer, such as a merger, acquisition, or sale of part of the business, where personal data may form part of the transferred assets, always subject to applicable data protection law.
International transfers
Our primary business operations are based in the United Kingdom. If personal data is ever transferred outside the United Kingdom or European Economic Area by a third‑party processor, we will take appropriate steps to ensure that this is done in compliance with applicable data protection laws, for example by ensuring an adequate level of protection or using approved safeguards.
Data security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include limiting access to personal data to those employees, contractors, and service providers who need it for legitimate business purposes and are under a duty of confidentiality.
Your data protection rights
Under data protection law, you have certain rights in relation to your personal data. Subject to specific legal conditions and exemptions, these include:
Right of access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, together with information about how it is used.
Right to rectification: You have the right to request that inaccurate or incomplete personal data is corrected or updated.
Right to erasure: You have the right to request that certain personal data is deleted, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of data or consider an objection.
Right to object: You have the right to object to processing based on legitimate interests, including certain types of direct marketing. We will stop processing your data for such purposes unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to data portability: In some cases, you may have the right to request that we provide personal data to you or to another controller in a structured, commonly used, and machine‑readable format.
You also have the right to withdraw consent at any time where we rely on consent as the lawful basis for processing. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
How to exercise your rights
If you wish to exercise any of your rights, or if you have questions about how we handle personal data, you can contact us using the contact methods you normally use for our services. We may need to verify your identity before responding to your request to protect your privacy and security.
Right to complain
If you have concerns about how we handle your personal data, we ask that you contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any changes will apply from the date they are posted. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
