Cleaning Express Services Ltd

Adopted: July 2026.

1 Introduction

1.1 Cleaning Express Services Ltd (“we”, “us”, “our”) provides domestic and commercial cleaning services. We are the controller of the personal data we collect about our clients and customers, and we are registered with the Information Commissioner’s Office (ICO).

1.2 This privacy policy explains what personal data we collect about you, how we use it, who we share it with and the rights you have. It applies to our website, our customer portal and mobile app, and to the bookings and services we provide to you.

1.3 Our Data Protection Lead, Michael Bogoyavlenskiy, is responsible for our data protection compliance. If you have any questions about this policy or wish to exercise your rights, you can contact us by email at [email protected] or [email protected].

2 The personal data we collect

2.1 Depending on how you interact with us, we may collect and use the following categories of personal data:

2.1.1 your name, postal address, email address and telephone number;

2.1.2 booking and service details, including the address to be cleaned, access arrangements and any preferences or instructions you give us;

2.1.3 account information where you create an account on our portal or app, including your login details and saved preferences;

2.1.4 payment information, although card and bank details are collected and processed directly by our payment providers (see the section “Who we share your personal data with” below) and we do not store full card details ourselves;

2.1.5 records of our communications with you, including emails, messages and feedback; and

2.1.6 your marketing preferences, including whether you have chosen to receive our newsletters and offers.

3 How we collect your personal data

3.1 We collect personal data when you request a quote or make a booking through our website, portal or app, when you create an account, when you contact us by telephone, email or message, and when you use our services. We may also collect limited technical data through cookies on our website.

4 How we use your personal data and our lawful bases

4.1 We only use your personal data where the law allows us to. The lawful bases on which we rely are:

4.1.1 performance of a contract: to provide quotes, take bookings, deliver our cleaning services, process payments and manage our relationship with you;

4.1.2 legitimate interests: to operate and improve our booking and account systems, to keep records, to send marketing about our own similar services to existing customers (subject to your right to opt out), to prevent fraud and to keep our systems secure;

4.1.3 consent: where we ask for it, for example to send marketing to you if you are not yet a customer, or to take before-and-after photographs of our work; and

4.1.4 compliance with a legal obligation: to meet our tax, accounting and other legal duties.

5 Marketing

5.1 We send occasional newsletters and offers. If you are an existing customer, we may email you about our own similar services in reliance on the “soft opt-in”, and you can opt out at any time.

5.2 You can manage your marketing preferences in your account settings, or by using the unsubscribe link in any marketing email. Once you opt out, we will stop sending you marketing without undue delay.

6 Cookies

6.1 Our website uses cookies. Some are strictly necessary for the website to work, or for security and fraud prevention, and some help us understand how the website is used so that we can improve it. You can control non-essential cookies through your browser settings or our cookie controls.

7 Who we share your personal data with

7.1 We do not sell your personal data. We share it with trusted third-party providers who process it on our behalf as our processors. These fall into the following categories:

7.1.1 payment service providers, who collect and process your card or bank details;

7.1.2 IT and hosting providers, who host our website, portal and app;

7.1.3 workforce scheduling and management providers, which we use to schedule cleans and confirm attendance at your premises;

7.1.4 communications providers, which we use to manage emails and to send you text messages; and

7.1.5 marketing and analytics providers, which we use to send marketing and to analyse booking data.

We require these providers to keep your personal data secure and to use it only on our instructions. A list of our current providers is available on request from [email protected]. We may also disclose personal data where we are required to do so by law.

8 International transfers

8.1 Some of our providers may store or process personal data outside the UK. Where this happens, we make sure that your personal data is protected by an adequacy regulation or, where this is not available, by appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

9 How long we keep your personal data

9.1 We keep your personal data only for as long as is necessary for the purposes described in this policy, and to meet our legal, accounting and tax obligations.

9.2 If you ask us to delete your personal data, we will delete it from our own systems, including our customer relationship management, scheduling and email systems. Records of financial transactions held by our payment providers are kept by those providers in line with their own legal obligations and may not be capable of deletion.

10 Photographs of our work

10.1 With your agreement, we may take “before and after” photographs of our cleaning work, which we may use for marketing. You can opt out of this at any time. Our cleaners are instructed to avoid capturing identifiable people, and any image of a person (in particular a child) that cannot be removed from the frame will have the face blurred before the photograph is used.

11 Keeping your personal data secure

11.1 We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or damage, and we require our providers to do the same.

12 Your rights

12.1 You have the following rights in relation to your personal data:

12.1.1 to be informed about how we use your personal data;

12.1.2 to access the personal data we hold about you;

12.1.3 to have inaccurate or incomplete personal data corrected;

12.1.4 to ask us to delete your personal data (the “right to be forgotten”);

12.1.5 to restrict or object to our processing of your personal data;

12.1.6 to data portability, in certain circumstances; and

12.1.7 to withdraw your consent at any time where we rely on consent.

12.2 You also have the right to complain to us about how we have handled your personal data, which we will acknowledge within 30 days and respond to without undue delay, and the right to complain to the Information Commissioner’s Office.

12.3 To exercise any of your rights, please contact us at [email protected] or [email protected].

13 Changes to this policy

13.1 We review this policy annually and may update it from time to time. The date of the latest review is shown on the front of this document.

This policy was adopted in June 2026 and will be reviewed annually. Version 1.0 — June 2026.