Professional cleaning tools and equipment

Privacy Policy

Last updated: September 2026. Your privacy matters to us. This policy explains how we handle your data.

1. Introduction & Data Controller

Khadis Cleans ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, request a quote, book a service, or otherwise interact with us.

Data Controller: Khadis Cleans, London, UK. Contact: info@khadiscleans.co.uk | support@khadis.co.uk

We are registered with the Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect only the data necessary to provide our services and communicate with you:

Personal Identifiers

  • Full name
  • Email address
  • Phone number
  • Service address (including postcode)

Service & Booking Details

  • Property type, size, and layout information
  • Service type and frequency requested
  • Preferred dates and access instructions
  • Special requirements (allergies, pets, security codes)

Billing & Payment Information

  • Invoice details (name, address, company name if applicable)
  • Payment records (transaction IDs, dates, amounts)
  • We do not store full card details — payments are processed via secure, PCI-DSS compliant payment processors.

Technical & Usage Data

  • IP address, browser type, operating system
  • Pages visited, referral source, time spent
  • Collected via essential cookies only (see Section 7)

3. How We Use Your Data

We process your data under the following lawful bases:

  • Contract performance (Article 6(1)(b) UK GDPR): To provide cleaning services, send confirmations, manage scheduling, and process payments.
  • Legitimate interest (Article 6(1)(f) UK GDPR): To improve our services, respond to enquiries, send service updates, and prevent fraud.
  • Legal obligation (Article 6(1)(c) UK GDPR): To maintain financial records for HMRC, comply with health & safety regulations.
  • Consent (Article 6(1)(a) UK GDPR): For marketing communications (optional, opt-in only).

4. Non-Disclosure Guarantee

We Never Sell Your Data

Your personal information is handled solely for scheduling, service delivery, invoicing, and customer support. We do not sell, rent, lease, or distribute your personal data to any third parties for marketing or commercial purposes.

We only share data with trusted service providers who process data on our behalf under strict data processing agreements:

  • Payment processors: Stripe, SumUp (for secure card payments)
  • Communication: Email service provider (for transactional emails only)
  • Form handling: Formspree (contact form submissions)
  • Legal/regulatory: When required by law, court order, or regulatory authority

All processors are UK/EU-based or provide adequate safeguards under UK GDPR Article 46.

5. Data Storage & Security

  • Encryption: All data transmitted via HTTPS (TLS 1.2+). Stored data encrypted at rest.
  • Access control: Role-based access limited to authorised personnel only.
  • Retention: Personal data retained for the duration of our relationship plus 6 years for financial records (HMRC requirement). Marketing data retained until you unsubscribe.
  • Backups: Encrypted, geographically redundant backups with 30-day retention.
  • Incident response: We have procedures to detect, contain, and notify (within 72 hours where required) any personal data breach.

6. Your Rights (UK GDPR)

You have the following rights regarding your personal data:

  • Right of Access: Request a copy of all personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data where no legal obligation requires retention.
  • Right to Restrict Processing: Limit how we use your data in certain circumstances.
  • Right to Data Portability: Receive your data in a structured, commonly used format.
  • Right to Object: Object to processing based on legitimate interests, including direct marketing.
  • Rights related to automated decision-making: We do not use automated decision-making or profiling.

How to Exercise Your Rights

Email support@khadis.co.uk with "Data Subject Request" in the subject line. Include your name, email, and the right you wish to exercise.

We will respond within 30 days (extendable by 60 days for complex requests). There is no fee for standard requests.

Complaints: If you are unsatisfied with our response, you may complain to the ICO: ico.org.uk/make-a-complaint

7. Cookies & Tracking

Our website uses only essential cookies required for core functionality:

  • Session management (form submissions, booking flow)
  • Security (CSRF protection)
  • Accessibility preferences (reduced motion, contrast)

We do not use analytics cookies, advertising cookies, or third-party tracking. No cookie banner is required as we only use strictly necessary cookies under PECR Regulation 6.

8. Marketing Communications

We only send marketing emails (seasonal offers, service updates) if you have explicitly opted in. You can unsubscribe at any time via the link in every email or by emailing support@khadis.co.uk.

Transactional emails (booking confirmations, invoices, service updates) are sent regardless of marketing preferences as they are necessary for contract performance.

9. Children's Data

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us immediately and we will delete it.

10. International Transfers

We do not transfer personal data outside the UK/EU. All processors are UK-based or covered by UK adequacy regulations / Standard Contractual Clauses.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The "Last updated" date at the top indicates the latest revision. Material changes will be communicated via email or a prominent website notice.

12. Contact Us

Questions, concerns, or data subject requests? Contact our Data Protection team: