Privacy Policy - Maryland Carpet Cleaners

Maryland Carpet Cleaners is committed to protecting the privacy and personal data of our customers. This Privacy Policy explains how we collect, use, share, store, and safeguard personal information in connection with our carpet cleaning, upholstery cleaning, stain treatment, deodorizing, and related services. This policy applies to all Maryland Carpet Cleaners customers in the area and is intended to meet the standards of the General Data Protection Regulation (GDPR) and applicable privacy requirements.

1. Who We Are

For the purposes of data protection law, Maryland Carpet Cleaners acts as a data controller when we determine the purposes and means of processing personal data collected from customers, prospects, and service recipients. In some cases, we may also use third-party service providers that act as data processors on our behalf. We take privacy seriously and aim to process personal data in a lawful, fair, and transparent way.

2. Information We Collect

We collect only the information necessary to provide our services, manage customer relationships, and operate our business effectively. The types of data we may collect include:

Identity information such as name and any preferred title.
Contact details such as phone number and email address.
Service location details necessary to carry out cleaning services at the correct premises.
Billing and payment information required to process transactions, refunds, and accounting records.
Service history including previous appointments, requested treatments, and customer preferences.
Communications including emails, notes from bookings, feedback, complaints, and customer support interactions.
Technical information if collected through our digital systems, such as device type or usage logs, where needed for security or performance.

We do not intentionally collect sensitive personal data unless it is specifically provided by you and necessary for the service. If such data is ever shared with us, we will only process it where a lawful basis exists and where appropriate safeguards are in place.

3. How We Use Personal Data

We use personal data for the following purposes:

To schedule and provide carpet cleaning and related services.
To confirm appointments and manage customer requests.
To process payments and issue invoices or receipts.
To maintain service records and quality assurance.
To respond to inquiries, complaints, or follow-up questions.
To improve our services, training, and customer experience.
To comply with legal, regulatory, tax, and accounting obligations.
To prevent fraud, misuse, or unauthorized access to our systems.

We will only process personal data for the purposes for which it was collected, unless we reasonably believe we need to use it for a compatible purpose or another lawful basis applies.

4. Lawful Basis for Processing

Under GDPR, we must have a valid lawful basis to process personal data. Depending on the context, Maryland Carpet Cleaners may rely on one or more of the following bases:

Contract

We process data when it is necessary to perform a contract with you or to take steps at your request before entering into a contract. For example, we need your contact details and service address to arrange and deliver cleaning services.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include service management, customer support, internal record keeping, business improvement, and fraud prevention. We assess these interests carefully and only use this basis when appropriate.

Legal Obligation

In some cases, we must process personal data to comply with legal obligations, such as tax, accounting, or regulatory requirements. This may include retaining invoices, payment records, and certain business documentation.

Consent

Where required, we rely on your consent. If we ever ask for consent, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

5. Data Sharing and Processors

We may share personal data only when necessary and only with trusted third parties that support our operations. These third parties may act as processors and process data on our behalf under written instructions. They are required to protect data and use it only for the agreed purpose.

Examples of processors or service providers may include:

Payment processors that handle card or electronic transactions.
Scheduling and booking providers that help manage appointments.
IT and cloud service providers that store or secure business data.
Accounting and bookkeeping providers that support financial records.
Customer service tools used to manage communication and records.

We may also disclose data where required by law, court order, or lawful request from public authorities. If a business transfer, merger, or restructuring occurs, personal data may be transferred as part of that transaction, subject to appropriate confidentiality and data protection safeguards.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods may vary depending on the type of information and the reason it was collected.

Customer service records are kept for as long as needed to manage ongoing service relationships and resolve disputes.
Billing and tax records are retained for the period required by applicable law.
Communication records may be kept to maintain a service history and respond to future queries.
Technical logs are kept only for the limited time necessary for security, troubleshooting, or performance analysis.

When data is no longer needed, we will securely delete, anonymize, or otherwise dispose of it in line with our retention practices. We do not keep personal data indefinitely.

7. Your Rights Under GDPR

Depending on your circumstances and subject to legal limits, you have several rights regarding your personal data. These rights include:

Right of access – you may request confirmation of whether we process your data and obtain a copy of it.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – you may request deletion of your data in certain situations.
Right to restriction – you may ask us to limit processing in specific cases.
Right to data portability – you may request your data in a structured, commonly used format where applicable.
Right to object – you may object to processing based on legitimate interests or direct marketing where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you exercise a right, we may need to verify your identity before responding. We aim to respond within the time limits required by law. In some cases, legal obligations may prevent us from fulfilling a request, but we will explain our reasons where appropriate.

8. Data Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff training, and restricted permissions. While no system can be guaranteed completely secure, we take data protection and confidentiality seriously and review our practices regularly.

9. International Transfers

If personal data is transferred outside the European Economic Area, we will ensure that appropriate safeguards are used, such as standard contractual clauses or equivalent legal mechanisms, where required. Any such transfer will be handled with care and only where necessary for business operations or service provision.

10. Children’s Data

Our services are intended for adults and household or business customers. We do not knowingly collect personal data from children without the involvement of a parent, guardian, or other lawful basis. If we become aware that we have collected such data inappropriately, we will take steps to delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or the services we provide. Any updated version will apply from the date it is made effective. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

12. Summary of Our Commitment

Maryland Carpet Cleaners respects your privacy and processes personal data only when necessary, lawfully, and transparently. We collect limited information to provide and manage our services, rely on appropriate lawful bases, use processors under strict controls, retain data only as long as needed, and honor your rights under GDPR. Our approach is guided by the principles of lawfulness, fairness, transparency, data minimization, accuracy, storage limitation, integrity, and confidentiality.