Wycombe Cleaning Co Ltd ("we", "our", "us") explains here exactly what personal data this website and our business collect, who it is sent to, how long it is kept, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy describes what actually happens on this site. If you spot something here that does not match your experience, tell us at hello@wycombecleaning.co.uk and we will correct it.
1. Who we are
Wycombe Cleaning Co Ltd is a cleaning company based in High Wycombe, Buckinghamshire, United Kingdom. For the purposes of UK GDPR, we are the data controller for the personal data we collect about you.
Contact details for data matters:
Wycombe Cleaning Co Ltd
High Wycombe, Buckinghamshire, United Kingdom
Email: hello@wycombecleaning.co.uk
Phone: 07377 506669
2. What this website collects
When you submit a form
Every form on this site — the quote forms, the homepage form, the call-to-action forms, and the contact form — is submitted directly to Formspree, a third-party form service, which forwards the submission to us by email.
- Quote forms collect: your name, phone number, postcode, the service you want, property type, property size, preferred date, and any notes you type.
- The contact form collects: your name, email address, phone number (optional), subject, and your message.
- Each form also carries a hidden anti-spam field. If it is filled in, the submission is discarded — that field is for bots, not for you.
Because submission goes to Formspree first, your submission is processed on Formspree's infrastructure before it reaches our inbox. Formspree is based in the United States. See section 8 on international transfers.
When you tap a phone or WhatsApp link
When you click a tel: or WhatsApp link on this site, a small background request is sent
to our own server recording which kind of link you clicked and which page you
clicked it from. Alongside that, our server records the referring URL, your browser's
user-agent string, and a one-way salted hash of your IP address.
We hash the IP rather than storing it, so the stored value cannot be reversed back to your address. We use the same hash to rate-limit abuse of our forms. This is our own first-party logging; it is not sent to any analytics company, and it does not set a cookie.
What this website does NOT do
For the avoidance of doubt, and because a previous version of this page said otherwise: this site runs no Google Analytics, no Plausible, no advertising or social pixels, no call recording, no call tracking, and no cross-site tracking of any kind. There is no cookie consent banner because there are no non-essential cookies to consent to.
3. What we collect away from the website
- Booking information: the property address, access notes, key or lockbox arrangements, and any special requirements, so the cleaning team can do the job.
- Correspondence: emails, WhatsApp messages, and notes from phone calls.
- Payment information: card payments are taken on the day through a card terminal operated by our payment provider. We do not store full card numbers.
We do not knowingly collect special category data (health, ethnicity, religion, political views).
4. Lawful basis
- Contract: when you book, we need your data to arrange the visit, carry out the job, and invoice.
- Legitimate interests: replying to quote requests, keeping the site secure, rate-limiting abuse, and understanding which pages produce enquiries.
- Consent: for any marketing message. You can withdraw it at any time.
- Legal obligation: records required by HMRC and other UK law.
5. Who your data is shared with
- Formspree — receives and forwards every form submission made on this site.
- Vercel — hosts this website and runs its server-side endpoints.
- Resend — sends the internal email notification when a quote is submitted through our own endpoint.
- Our database host — stores quote records, the click log described above, and rate-limit counters.
- The cleaner assigned to your job — sees the address, access notes, and requirements needed to do it.
- Our accountant and HMRC — for invoicing, tax and statutory accounts.
- Legal authorities — only if required by law.
We do not sell your personal data, and we do not share it for third-party marketing.
6. How long we keep it
- Quote requests that do not convert: up to 12 months from the enquiry.
- Customer records: for the duration of our relationship plus 3 years after your last job.
- Accounts and invoices: 6 years (HMRC requirement).
- Click-log entries and rate-limit counters: these hold no directly identifying data, only a hashed IP, and are kept while they remain operationally useful.
- Marketing consents: until you unsubscribe; we keep a record of the unsubscribe so we can honour it.
7. Your rights under UK GDPR
- Access: request a copy of the data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete your data where there is no ongoing legitimate reason to keep it.
- Restriction: ask us to pause processing while an issue is resolved.
- Portability: receive your data in a portable electronic format.
- Objection: object to processing based on legitimate interests, or to direct marketing.
- Withdraw consent: at any time, where consent is the basis.
- Complain to the ICO: see section 10.
To exercise any of these, email hello@wycombecleaning.co.uk with "Data Request" in the subject line. We respond within one month of a verified request.
8. International transfers
Formspree, Vercel and Resend are US-headquartered. Where your data is transferred to the United States, the transfer relies on the UK Extension to the EU-US Data Privacy Framework or on UK-approved Standard Contractual Clauses, depending on the provider. If you would rather not use a US processor, you can avoid the forms entirely and call or email us instead.
9. Security
The site is served over HTTPS with HSTS, a content security policy, and standard hardening headers. IP addresses are hashed with a secret salt rather than stored. The staff area is protected by a signed, HttpOnly session cookie and login rate-limiting. Paper records, where any exist, are securely destroyed. No system is perfectly secure, so if we detect a personal data breach that affects your rights we will notify you and the ICO within 72 hours.
10. How to complain
Please contact us first at hello@wycombecleaning.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator:
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
11. Children
Our services are not intended for children and we do not knowingly collect personal data about anyone under 16. If you believe we hold such data in error, contact us and we will delete it.
12. Changes to this policy
We update this page when our processing changes. Material changes get a new "Last updated" date here.
13. Contact
Questions about this policy or your data: email hello@wycombecleaning.co.uk or call 07377 506669.