Data Protection Policy

 Introduction

Sparklehub Cleaning Services Ltd is committed to protecting your privacy and handling your personal information lawfully, fairly, and transparently. This Privacy & Data Protection Policy explains how we collect, use, store, share, and protect personal data when you use our website, contact us, request a quotation, book our services, or otherwise interact with our business.

We take data protection seriously and process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK privacy laws.

 Who We Are

 Scope of This Policy

This policy applies to customers, prospective customers, website visitors, employees, subcontractors, suppliers, and any other individuals whose personal data we process in connection with our business activities.

 Legal Framework

We process personal data in accordance with:

• UK General Data Protection Regulation (UK GDPR)

• Data Protection Act 2018 (as amended)

• Privacy and Electronic Communications Regulations (PECR)

• Data (Use and Access) Act 2025

• Other applicable UK legislation

 Our Data Protection Principles

We follow the seven UK GDPR principles:

• Lawfulness, fairness, and transparency

• Purpose limitation

• Data minimisation

• Accuracy

• Storage limitation

• Integrity and confidentiality

• Accountability

 Personal Information We Collect

We may collect:

• Name

• Email address

• Telephone number

• Property address

• Billing and payment information

• Service preferences

• Booking history

• Access arrangements for cleaning services

• Employment or subcontractor information (where applicable)

• Website usage data and cookies

 How We Collect Your Information

Information may be collected when you:

• Complete a contact form

• Request a quotation

• Book a service

• Call or email us

• Subscribe to marketing communications

• Apply for work

• Use our website

 Lawful Bases for Processing

We rely on the following lawful bases under Article 6 UK GDPR:

 How We Use Your Information

We use personal data to:

• Provide cleaning services

• Arrange appointments

• Process payments

• Respond to enquiries

• Improve our services

• Maintain security

• Comply with legal obligations

• Send service updates

• Send marketing communications where permitted

 Special Category & Criminal Offence Data

We do not routinely process special category data or criminal offence data. Where such processing is necessary (for example, health information relating to workplace adjustments or legally required DBS checks), we apply the additional protections required by UK law.

 Cookies & Website Technologies

Our website may use cookies to improve functionality, analyse traffic, and enhance user experience.

Where required by law, we will ask for your consent before placing non-essential cookies on your device.

 Marketing Communications

We may send marketing communications to existing customers where permitted by law and to prospective customers who have provided consent.

You can opt out at any time by contacting us or using the unsubscribe link in our emails.

 Sharing Your Information

We may share personal data with:

• Subcontractors delivering services

• Accountants and insurers

• Payment providers and banks

• Cloud and IT service providers

• Government authorities where required by law

 International Data Transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the Standard Contractual Clauses.

 Data Security

We use appropriate technical and organisational measures to protect personal data, including:

• Password-protected systems

• Device encryption

• Multi-factor authentication

• Restricted access controls

• Secure cloud storage

• Secure disposal of data and devices

 Data Retention

We retain personal data only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention periods vary depending on the type of information involved.

 Your Rights

Under UK GDPR, you have the right to:

• Be informed about how your data is used

• Access your personal data

• Correct inaccurate data

• Request erasure of data in certain circumstances

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent where consent is the basis for processing

• Object to direct marketing

 Subject Access Requests

You may request a copy of the personal data we hold about you. We will respond within the timeframe required by law and may seek clarification where necessary to process the request efficiently.

 Data Protection Complaints

If you have concerns about how we handle your personal data, please contact us first so we can investigate and respond.

You also have the right to complain to the Information Commissioner’s Office (ICO):

 Personal Data Breaches

We maintain procedures for identifying, investigating, and responding to personal data breaches. Where required by law, we will notify the ICO within 72 hours and inform affected individuals where there is a high risk to their rights and freedoms.

 Children’s Privacy

Our services are not directed at children, and we do not knowingly collect personal data from children without appropriate consent.

 Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.

 Changes to This Policy

We may update this policy from time to time to reflect changes in our services, technology, or legal obligations. The latest version will always be available on our website.