Privacy Policy

Last updated: May 2026 · This policy applies to all users of sweeprightcleaning.com and customers of SweepRight Cleaning Services Ltd.

1. Who We Are (Data Controller)

Registered address: 564 Streatham High Road, London, England, SW16 3QQ

ICO Registration Number: [PLACEHOLDER — to be added upon ICO registration]

Email: sweeprightcleaning@outlook.com

Phone: +44 7425 583734

Website: sweeprightcleaning.com

As the data controller, we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.

2. What Personal Data We Collect

We collect and process the following categories of personal data:

Information you provide directly

• Identity data: first name, last name
• Contact data: email address, telephone number
• Address data: property address where the service is to be performed
• Booking data: service type, date, time, property size, special instructions or access notes
• Payment data: payment is processed via Stripe; we do not store card numbers — only a transaction reference and the last four digits of your card for your records
• Communications: records of your enquiries, messages, and complaints submitted via our website, email, or phone
• Cleaner applications: if you apply to become a cleaner, we collect employment-related information including work history, right-to-work documentation, and DBS check results

Information we collect automatically

• Technical data: IP address, browser type and version, time zone, operating system
• Usage data: pages visited, time spent, links clicked, referring URL
• Cookie data: see Section 8 for details

We do not collect any special category (sensitive) personal data such as health information, race, religion, or political opinions unless you voluntarily provide it in correspondence (for example, notifying us of a health condition relevant to your clean).

3. How We Use Your Data & Legal Basis

We only use your personal data where we have a lawful basis to do so under UK GDPR. The table below sets out what we use your data for and our legal basis in each case.

Purpose	Legal Basis
Process and fulfil your booking	Performance of a contract (Article 6(1)(b))
Take payment and issue receipts	Performance of a contract (Article 6(1)(b))
Send booking confirmations and reminders	Performance of a contract (Article 6(1)(b))
Respond to enquiries and complaints	Legitimate interests (Article 6(1)(f))
Share relevant booking details with your assigned cleaner or subcontractor	Performance of a contract (Article 6(1)(b))
Comply with legal obligations (accounting, tax records)	Legal obligation (Article 6(1)(c))
Send marketing emails and promotional offers (where opted in)	Consent (Article 6(1)(a))
Improve our website and services through analytics	Legitimate interests (Article 6(1)(f))
Prevent fraud and ensure platform security	Legitimate interests (Article 6(1)(f))
Process cleaner applications and conduct background checks	Pre-contractual steps / Legal obligation (Article 6(1)(b)/(c))

Where we rely on legitimate interests, we have conducted a balancing test and determined that our interests do not override your rights and freedoms. You may object to processing on this basis — see Section 6.

Where we rely on consent (e.g. marketing emails), you have the right to withdraw that consent at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.

4. Who We Share Your Data With

We do not sell your personal data to third parties. We may share your data with the following categories of recipient only to the extent necessary to deliver our services:

Subcontractors and Service Partners

SweepRight may fulfil bookings through vetted subcontractors (self-employed cleaners and specialist trade professionals). Where we do so, we share only the information they need to perform the job — your name, property address, service details, and any relevant access instructions. All subcontractors are bound by confidentiality obligations and are not permitted to use your data for any other purpose.

Payment Processor

Payments are processed by Stripe, Inc., acting as a data processor on our behalf. Stripe is PCI-DSS compliant. Their privacy policy is available at stripe.com/gb/privacy.

Email & Communication Services

We use Resend to send transactional emails (booking confirmations, reminders). Email content is processed on our behalf under a data processing agreement.

Analytics

We may use analytics tools (such as Google Analytics) to understand how visitors use our website. These tools may collect anonymised or pseudonymised usage data. See Section 8 (Cookies) for more detail.

Legal & Regulatory Disclosure

We may disclose your personal data to law enforcement, regulatory bodies, or courts where we are required to do so by law, or where necessary to protect the rights, property, or safety of SweepRight, our customers, or others.

5. How Long We Keep Your Data

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Data Type	Retention Period	Reason
Booking and transaction records	7 years	HMRC tax and accounting requirements
Customer contact details (active customers)	Duration of relationship + 2 years	Ongoing service delivery and dispute resolution
Customer contact details (inactive customers)	2 years from last interaction	Legitimate interest in re-engagement; right to object applies
Marketing consent records	Until consent is withdrawn + 1 year	Evidence of lawful basis for marketing
Complaints and dispute records	3 years from resolution	Limitation period for legal claims
Cleaner application data (unsuccessful)	6 months from decision	Recruitment practice and appeal period
DBS check records (active cleaners)	Duration of engagement + 1 year	Employment law and safeguarding obligations
Website analytics / technical logs	13 months	Industry standard for analytics comparison periods

After the applicable retention period, your data is securely deleted or anonymised. If you would like us to delete your data before the end of the applicable retention period, please see your right to erasure in Section 6.

6. Your Rights Under UK GDPR

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you (a Subject Access Request, or SAR). We will respond within one calendar month.
• Right to rectification: If your data is inaccurate or incomplete, you can ask us to correct it.
• Right to erasure ("right to be forgotten"): You can ask us to delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing and we have no overriding legitimate grounds. Note that some data may be retained where we have a legal obligation to do so (e.g. financial records).
• Right to restrict processing: You can ask us to suspend processing your data in certain circumstances — for example, while you contest its accuracy.
• Right to data portability: Where processing is based on your consent or a contract, you can ask us to provide your data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including for direct marketing. Where you object to direct marketing, we will stop immediately. For other legitimate interests processing, we will consider your objection and stop unless we have compelling grounds.
• Rights related to automated decision-making: We do not make decisions about you solely by automated means that have a legal or similarly significant effect on you.

We may ask you to verify your identity before acting on a request to protect your data from unauthorised disclosure.

7. International Data Transfers

Some of our third-party service providers (including Stripe and email delivery services) may process data outside the UK or European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK Adequacy Regulations covering transfers to countries deemed to have adequate protection
• Standard Contractual Clauses (SCCs) as approved by the UK ICO
• Provider certification under an approved international framework

You can request details of any international transfer safeguards by contacting us at sweeprightcleaning@outlook.com.

8. Cookies & Tracking

Our website uses cookies and similar tracking technologies to improve your experience and analyse how our site is used.

What are cookies?

Cookies are small text files placed on your device when you visit a website. They help the website remember your preferences and understand how you interact with it.

Types of cookies we use

Category	Purpose	Can be declined?
Strictly necessary	Essential for the website to function — e.g. form submissions, security tokens	No — required for the site to work
Analytics	Help us understand how visitors use the site (e.g. Google Analytics). Data is anonymised where possible.	Yes — via cookie preference settings
Marketing / Tracking	Used to deliver relevant advertising and measure campaign performance	Yes — via cookie preference settings

You can control and delete cookies through your browser settings. Note that disabling cookies may affect the functionality of some parts of our website. For more information about cookies and how to manage them, visit allaboutcookies.org.

9. Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it from unauthorised access, loss, or destruction. These include:

• SSL/TLS encryption for all data transmitted between your browser and our website
• Secure, access-controlled systems for storing customer data
• Limiting access to personal data to employees and contractors who need it to do their job
• Using PCI-DSS compliant payment processing (Stripe) — we never store full card details
• Regular review of our data handling practices

Despite these measures, no internet transmission is ever completely secure. If you believe your data has been compromised, please contact us immediately at sweeprightcleaning@outlook.com.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly without undue delay.

10. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected personal data from a child, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

• Email: sweeprightcleaning@outlook.com
• Phone: +44 7425 583734
• Post: SweepRight Cleaning Services Ltd, 564 Streatham High Road, London, SW16 3QQ