Privacy policy

[Company legal name] Ltd, company number [company number], registered office [registered office address]. For anything about your personal information, email privacy@windowcleaningpilot.co.uk.

For most of the information in this policy, we are the controller. When members pass customer details to each other through the marketplace, each member is also a controller of the details they hold; our Data protection (UK GDPR) policy explains who is responsible for what.

The member map shows other members only an anonymous dot near the centre of your postcode district. It never shows your name, business or address, and you can switch it off at any time.

The marketplace exists to connect people who want their windows cleaned with local cleaners. We receive customers' details in three ways:

• Pilot bookings: when a homeowner books a clean with us, directly or through our booking partner HighLevel, we collect their name, address, phone, email, property details and the service they want.
• Member listings: when a member lists one of their customers for sale or exchange, they give us the customer's name, address, phone and notes about the property.
• Canvassing: when a canvasser signs customers up for a new round, they upload the details they collected (usually name, address, phone, price and frequency).

We use these details to arrange the window cleaning the customer asked for, by passing them to the member who takes the job on. Until a job is bought, other members only see the postcode district, property type and job details, never the address or contact details. After purchase, only the buying member (and the seller, for their own listing) can see them.

Lawful basis: taking steps the customer asked for (arranging their window cleaning), and our and our members' legitimate interests in running a marketplace that transfers cleaning customers between local businesses. Where a canvasser or seller relies on the customer's consent, they must record it; our Data protection policy sets out their duties.

If you are a homeowner and want to know who holds your details, or you don't want them passed to another cleaner, email privacy@windowcleaningpilot.co.uk and we will help, including telling the member involved.

We don't sell personal information to advertisers or data brokers, and we don't let members use customer details for anything other than window cleaning and related services the customer wants.

Some of our providers (Vercel, Stripe and HighLevel) are based in, or may access data from, the USA. Where information leaves the UK, we rely on the UK Extension to the EU–US Data Privacy Framework where the provider is certified, or the UK International Data Transfer Addendum with standard contractual clauses, so that it stays protected to UK standards.

• Member accounts: while your account is open, then 6 years for payment and tax records. Other account details are deleted within 12 months of closing your account.
• Customer details on jobs: the listing details and the transfer record are kept for 6 years, so disputes and refunds can be dealt with. Contact details on unsold listings are deleted within 90 days of the listing being removed.
• Customer lists (CSV) from round builds and round sales: removed from our storage 90 days after the sale completes. The buyer keeps their own copy as the new controller.
• Security logs: up to 12 months.

Under UK data protection law you can ask us to: give you a copy of your information; correct it; delete it; restrict or object to how we use it (including for legitimate interests); and move it to another provider. Where we rely on consent, you can withdraw it at any time.

Email privacy@windowcleaningpilot.co.uk. We reply within one month. There is normally no charge. If you're unhappy with how we've handled your information, you can complain to the ICO at ico.org.uk or on 0303 123 1113, though we'd appreciate the chance to put things right first.

We only use cookies that are strictly necessary: to keep you logged in and to protect your account. We don't use advertising or tracking cookies, so we don't ask for cookie consent. If we ever add analytics or marketing cookies, we will ask first.

Customer addresses and contact details are stored separately from public job information and are only released to the buyer. Access is controlled by database rules, passwords are never stored in readable form, all connections are encrypted, and card details are handled only by Stripe. If a breach puts your information at risk, we will tell you and the ICO where the law requires.

We will post any changes here and update the date at the top. If a change is significant, we will email members first.