Privacy Policy

Data controller: Cleanoir Ltd., Hackney, London E8, United Kingdom.
Contact: privacy@cleanoir.co

• Identity & contact data — name, email, phone number, postal address and postcode.
• Booking data — property type, access details, service frequency, appointment history.
• Communications — messages sent to us via the contact form, email or SMS.
• Technical data — IP address, browser type, device and (only with your consent) analytics identifiers.

• Contract — to schedule and deliver the cleaning services you book.
• Legitimate interests — to operate our business, prevent fraud, and improve our services.
• Legal obligation — to keep accounting and tax records.
• Consent — for optional analytics, marketing cookies and marketing emails. You can withdraw consent at any time.

We use a small number of strictly necessary cookies to run the site (e.g. remembering your consent choice and keeping you signed in to the admin portal). Analytics and marketing cookies are only loaded after you click “Accept All” in our cookie banner, or enable them individually under “Manage Preferences”. You can change your choice at any time by clearing thecleanoir_cookie_consententry in your browser storage, and the banner will reappear.

We never sell your personal data. We share it only with vetted processors that help us run the service:

• Our cloud database & authentication provider (EU-hosted), which stores client, booking and staff records under a Data Processing Agreement.
• Our SMS provider (Twilio), used to send booking confirmations and reminders to clients and cleaners.
• Our hosting provider, which serves this website.
• Our accountants and, where legally required, HMRC and law enforcement.

Where a processor is located outside the UK/EEA, transfers are protected by UK-approved Standard Contractual Clauses or an adequacy decision.

• Active client records — for the duration of your subscription plus 12 months.
• Booking history & invoices — 6 years, for HMRC compliance.
• Contact form enquiries — 24 months, then deleted.
• Analytics data — up to 14 months (only if consented).

Under UK GDPR you have the right to:

• Access a copy of your data.
• Correct inaccurate data.
• Request erasure ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.
• Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any right, email privacy@cleanoir.co. We respond within one calendar month.

Personal data is stored in an encrypted database with strict row-level access controls. Administrative access is limited to authenticated Cleanoir staff. All traffic to this site is served over HTTPS.

We may update this policy from time to time. The effective date at the top of the page will change, and material changes will be flagged on this page for 30 days.