The Cleaning Bureau

1. Who We Are

The Cleaning Bureau ("we", "us", "our") is a professional cleaning services company operating in the United Kingdom. We are committed to protecting your personal data and handling it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any data protection queries, please contact us at [email protected].

2. What Personal Data We Collect

We collect and process the following categories of personal data when you use our website or services:

Identity data: your name and, where applicable, company name.
Contact data: email address, telephone number, and postal address.
Booking data: service type, appointment date and time, property address, duration, and any notes you provide.
Payment data: payment is processed securely by Stripe. We do not store your card details. We retain only the Stripe payment reference and booking amount for our records.
Technical data: IP address, browser type, and pages visited, collected automatically when you use our website.
Communications data: any messages you send us via the contact form or by email.

3. How We Use Your Data

We use your personal data for the following purposes:

To process and manage your cleaning service bookings.
To send booking confirmations, appointment reminders, and payment receipts by email.
To respond to enquiries submitted via our contact form.
To process payments securely through Stripe.
To maintain records required for our business operations and legal obligations.
To improve our website and services based on how they are used.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

Contract performance: processing necessary to fulfil your booking and deliver our services.
Legitimate interests: improving our website, preventing fraud, and maintaining the security of our systems.
Legal obligation: retaining financial records as required by UK tax law.
Consent: where you have opted in to receive marketing communications (you may withdraw consent at any time).

5. How We Share Your Data

We do not sell your personal data to third parties. We share your data only with trusted service providers who help us operate our business, under strict data processing agreements:

Stripe: for secure payment processing. Stripe's privacy policy is available at stripe.com/gb/privacy.
Resend: for transactional email delivery (booking confirmations, reminders).
Our cleaning staff: your property address and appointment details are shared with the team member assigned to your booking.

We may also disclose your data where required by law, court order, or regulatory authority.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Booking records are retained for six years in accordance with UK HMRC requirements. Contact enquiries are retained for two years. You may request deletion of your account and associated data at any time (subject to legal retention obligations).

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restrict processing: to request that we limit how we use your data.
Right to data portability: to receive your data in a structured, machine-readable format.
Right to object: to object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses essential cookies to maintain your login session and ensure the site functions correctly. We do not currently use tracking or advertising cookies. By using our website, you consent to the use of essential cookies as described here.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is transmitted over encrypted HTTPS connections. Payments are handled exclusively by Stripe and are never stored on our servers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.