Privacy Policy

1. Introduction

My Cleaning Solutions Ltd (trading as "MCS Cleaning & Facilities") is committed to protecting your privacy and personal data. This policy explains how we collect, use, and safeguard your information in compliance with UK GDPR and Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name and contact details (phone, email, address)
• Property details and access information
• Service preferences and requirements
• Payment information
• Communication records

2.2 Website Information

When you visit our website, we may collect:

• IP address and browser information
• Pages visited and time spent on site
• Referral sources
• Device and browser type

3. How We Use Your Information

We use your personal information to:

• Provide and deliver our cleaning services
• Process bookings and payments
• Communicate about services and appointments
• Improve our services and customer experience
• Send relevant marketing communications (with consent)
• Comply with legal obligations

4. Legal Basis for Processing

We process your personal data based on:

• Contract: To fulfil our cleaning service agreements
• Legitimate Interest: To improve services and customer support
• Consent: For marketing communications and cookies
• Legal Obligation: To comply with tax and regulatory requirements

5. Data Sharing

We do not sell or rent your personal information to third parties. We may share your data only in the following circumstances:

• With our cleaning staff to provide services
• With payment processors for transaction processing
• With legal authorities when required by law
• With professional advisors (accountants, lawyers) when necessary

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• Secure data storage and transmission
• Regular security updates and monitoring
• Staff training on data protection
• Limited access to personal data on a need-to-know basis

7. Data Retention

We retain your personal data only for as long as necessary:

• Customer records: 6 years after last service (for tax purposes)
• Marketing communications: Until you opt out
• Website data: 2 years from collection
• Payment records: 6 years (for legal compliance)

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict processing of your data
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us using the details below.

9. Cookies and Tracking

9.1 Cookie Usage

Our website uses cookies to improve your browsing experience and provide personalised content:

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand how visitors use our site
• Marketing Cookies: Used to deliver relevant advertisements (with consent)
• Preference Cookies: Remember your choices and settings

9.2 Cookie Management

You can control cookie preferences through:

• Browser settings (instructions available in your browser help section)
• Our cookie preference centre (when available)
• Third-party opt-out tools for advertising cookies

Note: Disabling certain cookies may affect website functionality.

10. International Data Transfers

We primarily process your personal data within the UK. Where data is transferred outside the UK or European Economic Area (EEA), we ensure adequate protection through:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by the ICO
• Binding corporate rules where applicable
• Certification schemes and codes of conduct

11. Automated Decision Making

We do not use automated decision-making or profiling that would significantly affect you. Any automated processing is limited to:

• Basic spam filtering for communications
• Website analytics and performance monitoring
• Fraud prevention measures

You have the right to object to automated processing and request human intervention in decision-making processes.

12. Data Breach Procedures

In the event of a personal data breach, we will:

• Assess the severity and potential impact
• Contain and investigate the breach
• Notify the ICO within 72 hours if required
• Inform affected individuals if there's a high risk to their rights
• Document the breach and our response
• Review and improve our security measures

13. Children's Privacy

Our services are designed for business customers and are not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will delete it promptly.

14. Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. Changes will be posted on our website with the updated date. Significant changes will be communicated directly to our customers via email or through prominent website notices.

We encourage you to review this policy periodically to stay informed about how we protect your personal information.

15. Contact Information and Data Protection Officer