Privacy Policy - Cann Hall Carpet Cleaners

Cann Hall Carpet Cleaners is committed to protecting your privacy and handling your personal data in a lawful, fair, and transparent manner. This Privacy Policy explains how we collect, use, store, share, and protect personal data relating to our customers, prospective customers, and other individuals who use our services. It applies to all Cann Hall Carpet Cleaners customers in the Cann Hall area, including anyone who contacts us, requests a quotation, books a service, or receives cleaning services from us.

This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We encourage you to read it carefully so you understand how and why your information is used.

1. Data We Collect

We collect only the personal data necessary to provide our services, manage customer relationships, and meet our legal obligations. The types of data we may collect include:

Identity data such as your name.
Contact data such as your address, email address, and telephone number.
Service data such as details about the carpet cleaning services requested, booking notes, property access instructions, and service preferences.
Payment data such as transaction records and payment status. We do not typically store full card details unless processed securely by a payment provider.
Communication data such as messages, complaints, feedback, and correspondence with us.
Technical data if you interact with any digital systems we use, including basic device and usage information where applicable.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, or unless the law requires or permits us to do so. Special category data includes information about health, religious beliefs, political opinions, trade union membership, genetic data, biometric data, sexual orientation, or ethnic origin.

We may receive personal data directly from you when you make an enquiry, request a quote, book a service, leave feedback, or otherwise communicate with us. We may also receive data from third parties where necessary for service delivery, such as from property managers, landlords, letting agents, or referral partners, where they are authorised to share your details with us.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotations and arrange carpet cleaning services.
To manage bookings, attendance, and service delivery.
To communicate with you about appointments, changes, or service queries.
To process payments, issue invoices, and maintain accounting records.
To respond to complaints, feedback, or requests.
To comply with legal, tax, and regulatory requirements.
To maintain records of services provided and improve our operations.

We only use personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose and that reason is lawful under data protection law.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing your personal data. Depending on the circumstances, we may rely on one or more of the following lawful bases:

Contract: when processing is necessary to enter into or perform a contract with you, such as arranging and delivering a cleaning service.
Legal obligation: when we need to comply with a legal requirement, such as accounting, tax, or regulatory obligations.
Legitimate interests: when processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing enquiries, maintaining records, improving services, and preventing fraud.
Consent: in limited cases where consent is required, for example if we ever ask for permission to use your data in a way that is not covered by another lawful basis. You may withdraw consent at any time.

Where we rely on legitimate interests, we assess whether our interests are proportionate and whether your privacy rights remain protected. We do not use personal data in ways that are unfair or unexpected.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These third parties act as processors when they process personal data on our instructions and under a written contract, or as separate controllers where they determine their own purposes for processing.

Examples of processors or service providers may include:

Booking, scheduling, and administrative software providers.
Payment processing providers.
IT and cloud storage providers.
Professional advisers such as accountants or legal advisers.
Waste disposal or specialist subcontractors, where required to deliver a service.

We require all processors to handle personal data securely, only for specified purposes, and in compliance with data protection law. We do not sell your personal data.

We may also disclose personal data if required to do so by law, regulation, court order, or government authority, or to protect our legal rights, property, customers, or staff.

International Transfers

If any processor stores or accesses personal data outside the United Kingdom, we will take appropriate steps to ensure that your data is protected to a standard required by applicable law. This may include approved transfer safeguards and contractual protections.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, tax, and reporting requirements. The exact retention period depends on the type of information and the reason it is held.

In general:

Customer and booking records are retained for a reasonable period after service completion.
Invoices and financial records are kept for the period required by tax and accounting law.
Correspondence and complaints may be retained for as long as needed to resolve issues and manage our relationship with you.
Where we no longer need data, we will delete it securely or anonymise it.

When deciding how long to retain data, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorised use or disclosure, the purposes of processing, and whether those purposes can be achieved by other means.

6. How We Protect Your Data

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff confidentiality expectations, and data minimisation practices.

Although we work hard to protect personal information, no method of transmission or storage is completely secure. If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will take the steps required by law, which may include notifying the Information Commissioner’s Office and, where necessary, informing affected individuals.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the legal basis for processing and the circumstances of the request:

Right of access: you can ask for a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: you can ask us to delete your data in certain circumstances.
Right to restriction: you can ask us to limit how we use your data in certain situations.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you can ask for certain data to be provided in a structured, commonly used, machine-readable format where applicable.
Right to withdraw consent: where we rely on consent, you can withdraw it at any time.

If you wish to exercise your rights, we will respond in accordance with data protection law. We may need to verify your identity before acting on a request. In some cases, we may be unable to comply fully if an exemption applies or if keeping the data is required by law.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed. However, we encourage you to contact us first so we can try to resolve your concern directly.

8. Marketing Preferences

We do not send marketing messages unless permitted to do so under applicable law. If we ever contact you for marketing purposes, you will have the opportunity to opt out. You can object to marketing at any time, and we will respect your choice.

9. Children’s Data

Our services are intended for adult customers and business contacts. We do not knowingly collect personal data from children except where it is incidental to service delivery and necessary for safety, access, or administrative reasons. If we become aware that we have collected data from a child without appropriate authority, we will take reasonable steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The updated version will apply from the date it is made available. We encourage customers in the Cann Hall area to review this policy periodically so they remain informed about how their personal data is handled.

Last updated: This policy is current as of the date published and applies to all Cann Hall Carpet Cleaners customers in area.

11. Summary of Our Commitment

Cann Hall Carpet Cleaners respects your privacy and aims to process personal data responsibly, securely, and only when necessary. We collect limited information to provide quotes, manage bookings, deliver services, process payments, and meet legal obligations. We rely on lawful bases including contract, legal obligation, legitimate interests, and, where needed, consent. We retain data only for as long as required, use trusted processors under appropriate safeguards, and support your rights under UK data protection law.

In short: we handle your personal information with care, only for legitimate purposes, and in a way that respects your rights and protects your privacy.