Privacy Policy
How we collect, use and protect your personal data in line with UK GDPR and PECR.
Last updated: 6 September 2025
1) Who we are
Controller: CleanMira Solutions Ltd (Company No. 16544346). Registered office: 132a High Street Bromsgrove, Birmingham, United Kingdom, B61 8ES. Contact: info@cleanmira.co.uk.
This Privacy Policy explains how we process personal data when you browse our site, make enquiries, or book our services. We comply with the UK GDPR and the Data Protection Act 2018. For e-mail/SMS, we also follow the Privacy and Electronic Communications Regulations (PECR).
2) Data we collect
- Identity & contact: name, e-mail address, phone number, address/postcode.
- Booking details: service type, property size/condition, access notes, preferred date/time, add-ons, photos you upload (if any).
- Payment data: cardholder name and transaction info via Stripe. We do not store full card numbers.
- Communications: e-mails, messages, call/SMS metadata and notes relevant to your booking or support request.
- Technical data: IP address, device/browser info, cookies (see §11).
3) How we use your data (purposes)
- To provide quotes, take bookings, allocate teams and deliver services.
- To send service communications about your booking (confirmations, reminders, updates, receipts).
- To process payments and refunds securely via Stripe.
- To provide support, handle complaints, re-cleans and quality checks.
- To improve our website, services and customer experience (analytics, troubleshooting).
- To meet legal, tax and accounting obligations.
4) Lawful bases
- Contract: to take steps at your request and perform your booking (including service e-mails/SMS).
- Legitimate interests: running and protecting our business (e.g. fraud prevention, service improvement).
- Consent: marketing e-mails/texts (if you opt in). You can withdraw consent at any time.
- Legal obligation: tax and accounting record-keeping; responding to lawful requests.
5) E-mail & SMS communications (important)
By making an enquiry or booking, you acknowledge and agree that:
- Your e-mail address will be stored and used to send you transactional messages about your booking (e.g. quotes, confirmations, reminders, updates, receipts).
- Your mobile phone number will be stored and may be used to send you SMS alerts regarding your booking (e.g. arrival windows, access issues, follow-up checks).
- These service communications are necessary to perform your contract with us and are not marketing. You can manage notification preferences by contacting us, but you may not opt out of essential messages related to your booking.
- Marketing e-mails/SMS (if any) are sent only with your consent (or under PECR “soft opt-in” where applicable). You can opt out at any time.
6) Payments (Stripe)
We use Stripe to process card payments. When you pay, your card data is handled by Stripe (PCI DSS compliant). We may store a Stripe payment token linked to your account/booking to collect agreed sums (e.g. balance, late cancellation fees permitted by our Terms). We do not store full card numbers.
7) Sharing & processors
- Service partners/teams: limited booking details necessary to perform the service.
- Payment processor: Stripe.
- Messaging providers: e-mail and SMS gateways used to send service communications.
- Booking/contact widget: our embedded form provider (e.g. platform powering contact/booking forms).
- Hosting & IT: website host, CDN, backup, analytics and security services.
- We do not sell your personal data. We require processors to protect it and use it only on our instructions.
8) International transfers
Some providers may process data outside the UK. Where they do, we ensure appropriate safeguards (e.g. UK Addendum to EU Standard Contractual Clauses, adequacy decisions, or equivalent lawful mechanisms).
9) Retention
- Bookings & invoices: typically 6 years (accounting/legal).
- Enquiries (no booking): up to 24 months.
- Marketing consents & opt-outs: kept as long as needed to evidence preferences.
- Operational logs/analytics: shortest practical period for security and improvement.
- We delete or anonymise data when no longer required.
10) Security
We apply technical and organisational measures appropriate to the risks (encryption in transit, access controls, least-privilege, staff training). No system is 100% secure; we act promptly on any suspected incident.
11) Cookies & analytics
Our site uses necessary cookies for core functionality and may use optional analytics/performance cookies to understand usage and improve the site. Where required by PECR, we will ask for your consent to non-essential cookies. You can change browser settings to block cookies; some features may not work without them.
12) Your rights
Under UK GDPR you have the right to request access, rectification, erasure, restriction, portability and to object to certain processing. Where we rely on consent, you may withdraw it at any time. To exercise your rights, contact info@cleanmira.co.uk. We may need to verify your identity.
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO): ico.org.uk.
13) Children
Our services are not directed at children. If we learn we have collected personal data from a child without appropriate consent, we will delete it.
14) Changes to this notice
We may update this Privacy Policy from time to time. The latest version will always be available on this page and will show the “Last updated” date at the top.
Questions about privacy?
We’ll be happy to clarify how we use your data.