Privacy policy
This is written for the UK GDPR and the Data Protection Act 2018. It says what we hold, why we hold it, and what you can make us do about it.
Who is responsible
SEARCHCLEANER LTD is the data controller for the personal data described here. Our postal address is 167-169 Great Portland Street, London, England, W1W 5PF. For anything about your data, email privacy@searchcleaner.co.uk.
Lawful bases
We rely on contract to run a booking you've asked for, legal obligation to keep tax and accounting records, and legitimate interests to keep the service safe and working, including the bot check on our forms. Analytics runs on consent, which you can withdraw. The waiting list has its own section below.
Data we collect
Account details, addresses for bookings, booking and payment records, messages sent through the service, ratings, and the documents cleaners submit for checks. We don't buy data about you from anyone.
Who sends our emails
We use Brevo to send our emails, including the emails about the waiting list. Brevo acts for us as a processor under a data processing agreement. It sees your email address, your name and the text of each message. Brevo is based in France. The EEA counts as adequate under UK law, so Brevo itself needs no extra transfer safeguard. Brevo may use sub-processors elsewhere, and its data processing terms set the safeguards that apply to them.
Who checks that a form is used by a person
Our sign-up and waiting list forms use Cloudflare Turnstile to tell people from bots. Turnstile reads signals from your device, such as your IP address, browser details and the page you are on. Cloudflare acts for us as a processor for that check. It is also an independent controller for its own use of those signals to improve Turnstile, and explains this in its own privacy policy. Cloudflare is in the United States. The transfer is covered by the UK Extension to the Data Privacy Framework where Cloudflare is certified under it. Otherwise it is covered by the UK Addendum to the EU Standard Contractual Clauses in Cloudflare's data processing terms. Our basis for the check is legitimate interests, keeping our forms safe from abuse.
Who handles your card
Card details are entered into a form served by Stripe, our payment processor, and go to Stripe directly. We never see the card number. We keep only the brand, the last four digits and the expiry, plus a reference Stripe gives us. Stripe sets cookies and similar storage on the pages where you enter a card, to prevent fraud and to run the card form. Stripe is an independent controller of the data it collects for fraud prevention and its own legal duties, and explains this in its own privacy policy.
Retention
Booking and payment records are kept for 6 years to meet tax and accounting rules. Messages you sent are blanked when you delete your account and the thread is kept for 2 years as dispute evidence. Ratings are kept without your name. Vetting documents are deleted when your account is deleted, and the decision is kept for 2 years.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, ask for it in a portable form, and withdraw consent for analytics. We answer within one month.
Waiting list: why we use your details
If you ask to join the waiting list, we use your name, email address and postcode area only to contact you about joining SearchCleaner when we can welcome you. Our lawful basis is Article 6(1)(b) of the UK GDPR, taking steps at your request before a contract. We don't use the list for marketing, and we don't share it with anyone except Brevo, which sends our emails, and Cloudflare, which protects our forms. Giving us these details is optional, but we can't add you to the list without them.
Waiting list: what we keep
We keep your role (client or cleaner), your name, your email address, the first part of your postcode (the district and sector, never the last two letters), and your town or village if you chose to give it. We also keep when you joined and confirmed, and if we invite you, when and why. The reason is one of a short fixed list. Once you have an account, we delete your name and email from the list entry. We keep the rest, which still links to your account, to plan where to open next. Our basis for that is legitimate interests under Article 6(1)(f), and it is deleted when your account is.
Waiting list: how long we keep it
If you don't confirm your email from the link we send, we delete your entry when the link expires. We keep a confirmed entry for up to 12 months, counted from when you confirmed, or from when we added you if we added you ourselves, and then delete it. You can remove it sooner at any time.
Waiting list: your rights
The rights above apply to your waiting list entry. To see what we hold, email privacy@searchcleaner.co.uk and we'll send you the whole entry. To correct something, ask us and we'll replace the entry. You can also ask us to delete it, or object to our use of the entry we keep after you have an account. We answer within one month.
Waiting list: leaving the list
Every email we send about the list has a link in it that removes you from the list. Using it deletes your entry straight away, with no reason needed. You can also email privacy@searchcleaner.co.uk and we'll delete it.
Complaints to us
If you think we've handled your data badly, tell us first. Email complaints@searchcleaner.co.uk or write to 167-169 Great Portland Street, London, England, W1W 5PF, and our data protection lead will deal with it. We'll acknowledge your complaint within 30 days of receiving it. We'll then look into it without undue delay, keep you updated, and tell you the outcome.
Complaints to the Information Commission
You can also complain to the Information Commission, the UK regulator for data protection. Its contact details are on its website.