Privacy notice

Preview review draft. Version privacy-review-draft-v1. Updated 23 October 2026. Business details and legal review remain outstanding; this page is not a guarantee of compliance.

Controller and contact

The controller identity and privacy contact must be verified in Business details before live collection. No unverified registration or privacy contact is invented in this draft.

Information and purposes

Accounts use names, email, password hashes, phone numbers and optional dates of birth (with age derived on the server) for access and communication. Dates of birth and age are restricted to the account owner and agency and are not shown on an assigned-cleaner card; the necessity and purpose for live collection must be confirmed before launch. Residential and cleaning addresses support contact and bookings. Cleaner service-area postcode centres support local job matching and are separate from residential addresses. Registered postcode regions group the agency directory. Declared and agency-approved skills, working windows, unavailable times and travel allowance support replacement matching; no live GPS is used for this grouping. Cover requests, reasons, recipient notices and acceptances support continuity of booked work. Profile photographs identify the assigned cleaner to the owning customer. Private identity-document images support agency eligibility review; upload is not identity verification. Booking-linked ratings and optional review comments support private service feedback between the booking participants and agency; they are not public reviews or automatic payment/approval decisions. Booking, payment-ledger, masked provider metadata, disputes and audit records support operation, fraud prevention and accountability. Full card numbers and CVC are not stored by the platform.

Proposed lawful bases to confirm

Contract necessity is proposed for account, booking and payment administration. Legitimate interests may apply to proportionate security and fraud controls after a documented balancing assessment. Legal obligation applies only where an identified obligation exists. Optional marketing requires a separate choice where applicable. Any special-category information or biometric identity matching requires its own assessment and appropriate condition; this preview does not perform biometric matching or liveness checks.

Access and sharing

Agency access is role restricted. Customers receive assigned cleaner name/photo, not identity documents, home address or payout details. Identity media is stored privately; agency document access is recorded. Relevant processors may include Voteq hosting, Stripe payments, an enabled email provider and postcode lookup/map services. Processor contracts, international transfer arrangements and exact provider disclosures remain to be verified before live use.

Retention and rights

We keep your documents securely for identity verification and cleaner safety. We do not sell them, and we delete them when they are no longer needed for these purposes. Retention is reviewed, including where records are needed for a relevant incident. This sandbox does not automatically delete documents after two years. You may request access, correction, erasure, restriction or objection and portability where applicable; rights have legal limits. Contact the confirmed controller and, if unresolved, the ICO. Do not upload real identity documents to this preview.

Official references

GOV.UK distance selling · CMA cancellation guidance · ICO cookies guidance