01Who we are
Sanctuary Premium Clean (“we”, “us”) is a carpet and upholstery cleaning business based in Stanley, County Durham. We are the data controller for the personal data described in this notice, which means we decide how and why it is used.
Contact us about anything in this notice by email at [email protected] or by phone on 07821 757834.
02What we collect
We only collect what we need to answer you and do the job:
- Enquiry and quote details: your name, phone number and/or email address, the service you are interested in, room or item details, approximate sizes, your town or postcode and anything you write in your message.
- Booking details: the address of the property, access notes, the date and time of your appointment and the work agreed.
- Messages: what you send us by phone, text, email, WhatsApp or Facebook.
- Payment records: the amount, date and method of payment. We do not store card details.
- Photos: before-and-after photos of carpets or furniture. We never photograph people or identifying details without asking first.
- Technical data: our web server keeps standard access logs (IP address, browser type, page requested, time) for security. The forms keep a short-lived, one-way scrambled (hashed) record of the connection to stop spam.
We do not knowingly collect special category data (such as health information). Please don’t include it in a message unless it matters for the job, for example an allergy to a cleaning product.
03Why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Replying to your enquiry and giving you a quote | Steps taken at your request before entering a contract (6(1)(b)) |
| Booking, carrying out and following up the cleaning work | Performance of a contract (6(1)(b)) |
| Invoices, payments and accounting records | Legal obligation (6(1)(c)): HMRC record-keeping |
| Keeping the website and forms secure and spam-free | Legitimate interests (6(1)(f)) |
| Using before-and-after photos of your carpets on our website or social media | Legitimate interests, with no personal details shown; we will remove any photo on request |
| Asking you for a review after the job | Legitimate interests; you can tell us not to ask |
We never sell your data, never rent it out and never add you to marketing lists. We do not use automated decision-making or profiling.
05International transfers
Our website data is stored in the UK and the European Economic Area, which the UK recognises as giving adequate protection. If you contact us on WhatsApp or Facebook, Meta may process that data outside the UK under its own safeguards.
06How long we keep it
| Data | How long |
|---|---|
| Enquiries that don’t lead to a booking | Up to 12 months, then deleted |
| Customer, booking and job records | 6 years after the job (limitation period) |
| Invoices and payment records | 6 years after the end of the tax year (HMRC) |
| Anti-spam records (hashed) | About 1 hour |
| Web server access logs | Up to 90 days |
07How we keep it safe
The whole site runs over an encrypted HTTPS connection. Form submissions are emailed to us and a backup copy is kept on the server in a private folder that cannot be reached from the web. The server is professionally managed, patched and monitored, and access to your data is limited to the people who need it to do your job.
08Your rights
Under UK GDPR you have the right to:
- Access: get a copy of the data we hold about you.
- Rectification: have anything wrong corrected.
- Erasure: ask us to delete your data, unless we must keep it by law.
- Restriction: ask us to limit how we use it.
- Objection: object to anything we do based on legitimate interests, such as using a photo or asking for a review.
- Portability: get your data in a common, machine-readable format.
- Withdraw consent: where we rely on your consent, at any time.
To use any of these rights, email [email protected] or call 07821 757834. It is free, and we will reply within one month. We may ask you to confirm your identity first.
09Complaints
If you are unhappy with how we have handled your data, please tell us first and we will put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, helpline 0303 123 1113.
11Children
Our services are for adults. We do not knowingly collect data from anyone under 16.
12Changes to this notice
If we change how we use your data, we will update this page and the date at the top. Material changes will be highlighted on the site.