Privacy and cookies
Last updated: [date you publish]
The short version. We only collect what we need to quote, book and carry out your clean. We don't sell your details, we don't send marketing unless you ask for it, and this website doesn't use cookies, analytics or tracking.
1. Who we are
CFL (Cleaning For London) is a trading name of [your full legal name], [address]. We are the controller of the personal information described here and are registered with the Information Commissioner's Office (ICO) under number [ZA000000].
Questions about your information: email [email] or write to the address above.
2. What we collect
- Enquiry details you send through our website form, by phone, email or WhatsApp: your name, phone number, email, postcode, property size, preferred date and anything you write in your message.
- Booking details you give us through our online booking form or otherwise: the property address, size and type, access arrangements (such as where keys are kept), parking, booking dates and times, and any special instructions. We also record when you accepted our terms and, if relevant, when you asked us to start within your 14-day cancellation period.
- Payment and invoicing records: what you bought, amounts and dates paid. Deposits and card payments are handled by Stripe. We never see or store your card number. Stripe tells us your name, email, the amount paid and your booking reference.
- Photos of the property taken before and after a clean. We avoid photographing people, documents or other personal items.
- Messages you send us, including complaints.
- Reviews you send through our review form: the name you want shown, your area, the service you had, your rating and review, your email and booking reference (used only to check you're a real customer, never published).
We don't ask for special category information (such as health data). Please don't send it to us.
3. How we use it and our lawful basis
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Reply to your enquiry and give you a quote | Steps taken at your request before entering a contract |
| Book, carry out and report on your service | Performance of our contract with you |
| Invoice you and keep accounting records | Contract, and legal obligation (tax law) |
| Handle complaints, guarantees and damage claims | Legitimate interests (resolving issues and defending legal claims) |
| Keep property photos as a record of our work | Legitimate interests (showing what we did and protecting both of us in disputes) |
| Check a review against our bookings and publish it with your shown name, area and service | Your consent, given on the review form. Ask us at any time and we'll take your review down. |
| Send occasional offers or news | Only with your consent, which you can withdraw at any time |
For business customers (such as letting agents), we process the names and contact details of your staff on the basis of our legitimate interest in managing the account.
4. Who we share it with
We don't sell your information. We share it only where needed, with:
- the cleaners carrying out your booking (only the details they need);
- service providers who help us run the business: our website host Cloudflare and booking email service Resend, email provider [e.g. Google Workspace or Microsoft 365], payment provider Stripe and accountant [name], each bound to protect it;
- WhatsApp (part of Meta), if you choose to contact us that way;
- our insurer, if there's a claim;
- HMRC, the police or other authorities where the law requires it.
5. Information stored outside the UK
Some of our service providers, such as our form and email providers, may store information outside the UK, including in the United States. When that happens we make sure appropriate protection is in place, such as the UK-US Data Bridge or the UK International Data Transfer Agreement.
6. How long we keep it
- Enquiries that don't lead to a booking: 12 months.
- Customer, booking and invoice records: 6 years after the end of the tax year they relate to, as tax law requires.
- Property photos and reports: 12 months after the clean, or longer if they're needed for an open complaint or claim.
- Keys and access codes: returned or deleted when you ask or when our work for you ends.
7. Keeping it secure
Our website uses an encrypted connection (HTTPS) and doesn't load code from other companies. Our business accounts are protected with strong passwords and two-step verification, and only people who need your information can see it. Keys are stored securely and never labelled with an address. If something goes wrong that puts your information at risk, we'll tell you and, where required, the ICO.
8. Your rights
You have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct or delete it;
- object to, or ask us to restrict, how we use it;
- ask us to transfer it to you or someone else in a usable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, contact us. We'll reply within one month and won't usually charge.
If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
9. Cookies
This website doesn't set any cookies and doesn't use analytics, advertising or tracking tools. Our fonts and images are stored on our own website, so your browser doesn't contact other companies when you visit.
If you click to call, email or message us on WhatsApp, that service's own privacy policy applies. If we ever add cookies or analytics, we'll update this notice first and, where the law requires, ask for your consent.
10. Changes to this notice
We'll update this page if anything changes and show the new date at the top.