Privacy Policy - Poplar Carpet Cleaners

This Privacy Policy explains how Poplar Carpet Cleaners collects, uses, stores, shares, and protects personal data when providing carpet cleaning and related services. It applies to all Poplar Carpet Cleaners customers in the area, including prospective customers, current customers, and anyone who interacts with us to request or receive a quotation, booking, or service.

We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only collect data that is necessary for legitimate business purposes and service delivery.

1. Data We Collect

We may collect and process the following categories of personal data:

Identity information such as your name.
Contact details such as your address, email address, and telephone number.
Service details such as property access instructions, cleaning preferences, and information relevant to the services requested.
Billing and payment information such as invoice details, transaction records, and payment confirmation. We do not store full payment card details unless required by a secure payment provider.
Communications including enquiries, complaints, feedback, and any correspondence you send to us.
Technical and usage data if you interact with our digital systems, such as device details, browser type, and basic usage logs, where applicable.

We may also collect limited additional information where it is necessary to provide a tailored service, resolve a dispute, or comply with legal obligations. We do not intentionally collect special category data unless you choose to provide it and it is required for a specific lawful purpose.

2. How We Use Your Data

We use personal data for the following purposes:

To provide carpet cleaning and related services.
To manage bookings, quotations, and appointments.
To communicate with you about your service request or ongoing work.
To issue invoices, process payments, and manage our accounts.
To respond to enquiries, feedback, and complaints.
To maintain business records and support service quality.
To comply with legal, tax, accounting, and regulatory obligations.
To prevent fraud, misuse, or other unlawful activity.

We only use your personal data for the purposes for which it was collected, unless we reasonably believe that another compatible purpose applies and the law permits such use.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the situation, we rely on one or more of the following:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes providing quotations, arranging visits, carrying out carpet cleaning services, and managing payment.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes managing appointments, improving service delivery, maintaining records, preventing fraud, and responding to customer issues. We always consider whether our interests are proportionate and respectful of your privacy.

Legal Obligation

We may process personal data where it is necessary to comply with a legal obligation. This may include tax compliance, accounting requirements, insurance obligations, and record-keeping duties.

Consent

In limited cases, we may rely on your consent, for example where it is appropriate to send optional marketing communications or to process information not otherwise covered by another lawful basis. Where we rely on consent, you can withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors on our behalf. These processors may only use your data according to our instructions and must protect it appropriately.

Examples of processors and service providers may include:

Payment service providers to handle secure transactions.
Accounting and bookkeeping providers to assist with invoicing, tax records, and financial administration.
IT and data storage providers to support secure systems, file storage, and email services.
Appointment or scheduling tools used to organise service visits.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

We may also disclose personal data to public authorities, regulators, courts, or law enforcement where required by law or to protect our rights, customers, or property.

We do not sell personal data. We do not share your information with unrelated third parties for their own marketing purposes.

5. International Transfers

Where a processor stores or accesses data outside the UK, we ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We aim to keep personal data within the UK or the EEA where possible, but some service providers may operate internationally.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements.

Customer service records are generally retained for the duration of the service relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law, typically up to six years or longer where necessary.
Communications and complaints may be retained for a period needed to resolve issues and maintain evidence of decisions.
Consent-based data is retained until consent is withdrawn or it is no longer needed.

When data is no longer required, we securely delete, anonymise, or archive it in line with our retention practices.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction. These measures may include access controls, secure storage, password protection, restricted internal access, and careful selection of processors.

While we take reasonable steps to safeguard information, no system can be guaranteed to be completely secure. If a data breach occurs that poses a risk to your rights and freedoms, we will act in line with our legal obligations.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to legal limits and exceptions.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – in certain circumstances, you can ask us to delete your data.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – where applicable, you can request your data in a structured, commonly used format.
Right to withdraw consent – if we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the time limits set by law and may ask for information to confirm your identity before taking action.

9. Cookies and Similar Technologies

Where we use digital services that involve cookies or similar technologies, these may be used to support functionality, improve performance, and collect basic usage information. Any non-essential cookies, where used, will only be deployed in accordance with applicable law and, where required, with your consent.

10. Children’s Data

Our services are intended for adults and business or household customers. We do not knowingly collect personal data directly from children. If we become aware that we have collected such data without appropriate permission, we will take reasonable steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal duties, or data handling practices. The most current version will apply to our use of personal data. We encourage customers to review this policy periodically.

12. Our Commitment to Privacy

Poplar Carpet Cleaners takes privacy seriously and strives to handle all personal data responsibly. We aim to keep information accurate, secure, and limited to what is necessary for lawful service delivery. By using our services, customers in the area acknowledge that their information may be processed as described in this Privacy Policy.

This policy applies to all Poplar Carpet Cleaners customers in area and sets out how we process personal data in connection with our services.