Privacy Policy

This privacy policy explains how All Shines ("we", "us", "our") collects, uses and protects the personal data of visitors to our website and our customers. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are the data controller responsible for your personal data. If you have any questions about this policy, please contact us using the details in the Contact us section below.

1. Information we collect

We collect personal data that you provide directly to us, including:

Contact form – your name, email address, phone number and the contents of your message.
Quote requests – your name, email address, phone number, property address and postcode, and details about your property (such as property type, number of bedrooms and storeys, and the services you are interested in).
Newsletter sign-up – your email address.
Technical data – when you use our website we may automatically collect limited technical information such as your IP address, browser type and anonymised usage statistics (see the Cookies and analytics section).

2. How we use your information

We use your personal data to:

respond to your enquiries and provide quotes;
arrange, deliver and manage our cleaning services;
communicate with you about your bookings and our services;
send you our newsletter, where you have signed up to receive it;
protect our website from spam and fraudulent submissions;
comply with our legal obligations.

3. Legal basis for processing

Under UK GDPR, we rely on the following legal bases to process your data:

Consent – for sending you marketing communications such as our newsletter. You can withdraw your consent at any time.
Contract – to take steps at your request before entering into a contract (such as providing a quote) and to perform our services for you.
Legitimate interests – to respond to enquiries, run and improve our business, and keep our website secure.
Legal obligation – where we are required to retain certain records by law.

4. How we store and share your data

We do not sell your personal data. We use trusted third-party service providers to operate our website and business. These providers act as our data processors and only process your data on our instructions:

Airtable – securely stores enquiry, quote and newsletter records.
Resend – delivers form submissions to us by email.
Cloudflare Turnstile – protects our forms from spam and abuse.
Google Maps Platform (Places) – provides address suggestions on our quote form.
GoCardless (via CleanerPlanner) – securely sets up and processes Direct Debit payments where you choose to pay by Direct Debit.
Vercel – hosts our website and provides anonymised performance data.

Some of these providers may process data on servers outside the UK. Where this happens, we take steps to ensure appropriate safeguards are in place (such as Standard Contractual Clauses) so that your data remains protected to UK standards.

5. How long we keep your data

We keep your personal data only for as long as necessary for the purposes set out in this policy. Enquiry and quote records are kept while we are in contact with you and for a reasonable period afterwards in case you get back in touch. Customer records may be kept for longer where required to meet our legal and accounting obligations. Newsletter records are kept until you unsubscribe.

6. Cookies and analytics

Our website uses a small number of cookies and similar technologies that are necessary for the site to function and to keep it secure (for example, Cloudflare Turnstile). We also use Vercel Speed Insights to collect anonymised, aggregated performance data, which does not identify you personally. We do not use cookies for advertising. Most browsers let you control or block cookies through their settings.

7. Your rights

Under UK GDPR you have the right to:

access the personal data we hold about you;
ask us to correct inaccurate or incomplete data;
ask us to delete your data (the "right to be forgotten");
restrict or object to how we process your data;
request a copy of your data in a portable format;
withdraw consent at any time where we rely on consent.

To exercise any of these rights, please contact us using the details below. You will not usually have to pay a fee, and we will respond within one month.

8. Complaints

If you have concerns about how we handle your data, please contact us first so we can try to resolve them. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.

9. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "last updated" date.