Privacy Policy - Barnes Carpet Cleaners

This Privacy Policy explains how Barnes Carpet Cleaners collects, uses, stores, shares, and protects personal data in connection with our carpet cleaning services. It applies to all Barnes Carpet Cleaners customers in area, including prospective customers, existing customers, and anyone who interacts with us in relation to a service enquiry, booking, quotation, or aftercare support.

We are committed to handling personal data in a lawful, fair, and transparent manner, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy should be read carefully so you understand how your information is managed when you use our services.

1. Data We Collect

We collect only the information needed to provide our services, manage our business, and meet legal obligations. The personal data we may collect includes:

Identity details such as your name.
Contact details such as address, telephone number, and email address.
Service information including property access notes, cleaning requirements, stain or fabric details, and service history.
Payment information where needed to process invoices, payments, refunds, or accounts records. In many cases, payment card data is handled by secure payment providers rather than stored by us.
Communication records including messages, appointment notes, complaints, reviews, and any correspondence relating to a booking or service.
Technical and usage data where relevant, such as basic information from website enquiries or device identifiers used to support site security and performance.

We do not intentionally collect special category data unless you choose to provide it voluntarily and it is necessary for a specific service request. If any such information is shared with us, we will handle it with appropriate care and only where we have a lawful basis to do so.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotations and respond to service enquiries.
To arrange, deliver, and manage carpet cleaning services.
To communicate about appointments, changes, follow-up matters, and customer support.
To issue invoices, record payments, and maintain financial records.
To deal with complaints, service quality matters, and dispute resolution.
To maintain internal records and improve our services.
To comply with legal, tax, and accounting obligations.
To protect against fraud, misuse, or unlawful activity.

We only use personal data where it is relevant to our business relationship with you. We do not sell your data and we do not use it for unrelated purposes without a valid reason.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each type of processing. Barnes Carpet Cleaners relies on the following bases:

Contract

We process personal data where it is necessary to take steps before entering into a contract or to perform a contract with you. This includes handling enquiries, booking services, completing the cleaning work, and managing payment arrangements.

Legal Obligation

We process some information to comply with legal requirements, such as accounting rules, tax obligations, and recordkeeping duties.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include managing our operations, improving our services, preventing fraud, maintaining security, and keeping proper business records.

Consent

Where we rely on consent, we will ask for it clearly and you may withdraw it at any time. For example, if we ever use your data for optional marketing communications, that will only happen where valid consent applies or another lawful basis is available.

4. Data Sharing and Processors

We may share personal data with trusted third parties only where necessary and appropriate. These parties act as processors or independent controllers depending on the service they provide. We ensure that any processor we use is required to protect your data and process it only on our instructions.

Examples of processors may include:

Booking and scheduling systems.
Accounting and invoicing software providers.
Secure payment service providers.
IT support, cloud storage, and data backup providers.
Customer communication tools used to manage emails or messages.

We may also share personal data with professional advisers, insurers, or public authorities where necessary and lawful. If required by law, we may disclose information to regulatory bodies, law enforcement, or other official organisations.

All sharing is limited to what is necessary and we take reasonable steps to ensure data is handled securely and in accordance with data protection law.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods depend on the type of information and why we hold it.

Customer service records are generally retained for the duration of the customer relationship and for a reasonable period afterwards to manage queries, repeat services, or complaints.
Financial and tax records are retained for the period required by law.
Communication records may be retained to support service history, dispute handling, and business administration.
Consent-based data is retained until consent is withdrawn or the information is no longer needed.

When data is no longer required, we will securely delete, destroy, or anonymise it where appropriate. We do not keep personal data indefinitely and we review retention on a regular basis.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff awareness, and limited access to records on a need-to-know basis.

Although no system can be guaranteed to be completely secure, we work to reduce risk and respond promptly if we become aware of any suspected data incident.

7. Your Rights

As a data subject under GDPR, you have a number of rights in relation to your personal data. These rights are not absolute and may be subject to legal exceptions or limits. Your rights may include:

The right to be informed about how your data is used.
The right of access to obtain a copy of the personal data we hold about you.
The right to rectification if your information is inaccurate or incomplete.
The right to erasure in certain circumstances, also known as the right to be forgotten.
The right to restrict processing in certain situations.
The right to object to processing based on legitimate interests or direct marketing.
The right to data portability where processing is based on consent or contract and carried out by automated means.
The right to withdraw consent at any time where consent is the lawful basis.

If you wish to exercise any of these rights, we will respond in accordance with applicable law. We may need to verify your identity before acting on your request.

8. International Transfers

Where personal data is processed by third-party service providers, it may in some cases be stored or accessed outside the UK. If that happens, we will only use providers that offer appropriate safeguards to protect your data and comply with data protection requirements.

9. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data directly from children unless it is provided by an adult customer in connection with a service appointment or property access arrangement. If we become aware that we have collected data inappropriately, we will take reasonable steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we handle data. The updated version will apply from the date it takes effect. We encourage customers to review this policy periodically so they remain aware of how their data is protected.

11. Summary of Our Commitment

Barnes Carpet Cleaners respects your privacy and is committed to responsible data handling. We only collect data that is relevant to providing our services, we use it for clear and lawful purposes, we share it only when necessary, and we retain it only as long as required. Our approach is based on transparency, security, and respect for your rights.

By using our services, you acknowledge that this Privacy Policy applies to all Barnes Carpet Cleaners customers in area.