This Privacy Policy explains how EcoShine Leeds Ltd collects, uses, stores, protects, and manages personal data when you visit our website, register for an account, request a cleaning quote, apply for a job, or use our cleaning services across Leeds and West Yorkshire.
The data controller responsible for the processing of personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 is:
EcoShine Leeds Ltd
Operating in Leeds and surrounding West Yorkshire communities.
Privacy Contact & Data Inquiries: [email protected]
We collect only the categories of personal data necessary to provide our cleaning services, manage customer accounts, secure our platform, and evaluate employment applications:
When you register for an account or book services, we collect your full name, email address, telephone number, and hashed authentication credentials (passwords are securely hashed using Argon2; we never store plain-text passwords).
If you choose to register or log in using Google OAuth, we receive your Google account identifier (sub), verified email address, full name, and profile avatar URL.
Important: EcoShine Leeds does not receive, access, or store your Google account password.
To prepare accurate estimates and deliver cleaning services, we collect property addresses, postal codes, property types (domestic, commercial, end-of-tenancy), room configurations, requested cleaning frequency, preferred appointment dates/times, and any voluntary special instructions or access details you provide.
When you apply for advertised job vacancies via our Careers portal, we collect your full name, email address, telephone number, cover letter, and uploaded CV document (PDF/Word format). Uploaded CVs are scanned for security and stored in restricted recruitment storage.
When you interact with our website and APIs, our systems automatically log IP addresses, browser types, device information, session cookies (access_token, refresh_token), rate-limiting metadata, and security verification tokens to prevent abuse and maintain service integrity.
We use Cloudflare Turnstile on our authentication and form submission endpoints to protect against automated bots, brute-force attacks, and form spam. Turnstile assesses technical request signals (such as device telemetry and browser characteristics) in a privacy-preserving manner without using interactive CAPTCHAs or tracking users across unrelated websites.
Our website utilizes minimal, essential cookies and storage technologies:
access_token and refresh_token) strictly necessary to maintain your logged-in session, protect against CSRF attacks, and verify authorized access.You can configure your browser to reject cookies, though doing so will prevent you from signing in to the client portal.
We use your personal information solely for legitimate operational purposes:
Under UK data protection law, every processing activity relies on an established lawful basis:
We do not sell, rent, or trade your personal data to third parties for marketing purposes. We share personal information only with vetted technical service providers necessary for operating our platform:
Our core database and backend application servers are located in the UK and European economic region. Where technical service providers (such as Google or Cloudflare) process data globally, transfers are protected by UK adequacy regulations, the UK International Data Transfer Addendum (IDTA), or standard contractual clauses to ensure your personal data receives equivalent protection to UK law.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
We maintain rigorous technical and organisational safeguards to protect your personal data:
Under UK data protection law, you have specific rights regarding your personal information:
Right of Access
Request confirmation and a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal records.
Right to Erasure
Request deletion of personal data where no overriding legal obligation exists.
Right to Restrict & Object
Object to processing based on legitimate interests or request processing restrictions.
Right to Data Portability
Request your personal data in a structured, commonly used machine-readable format.
Right to Withdraw Consent
Withdraw previously given consent at any time without affecting prior lawful processing.
Please note that certain rights are subject to statutory exemptions under the Data Protection Act 2018 (such as records we are legally required to retain for tax or legal defense purposes).
To exercise any of your data rights or to submit a privacy enquiry, please contact our data team at [email protected]. We respond to verified data subject requests without undue delay and within one calendar month as required by UK law.
We do not perform automated decision-making or profiling that produces legal or similarly significant effects on individuals. Security checks (such as Turnstile bot verification and API rate-limiting) are used solely for technical traffic defense.
Our cleaning services and platform are directed toward individuals aged 18 and over. We do not knowingly collect personal data relating to children.
For operational terms governing quote requests, service standards, cancellations, lockout policies, and liability, please consult our Terms & Conditions. Terms & Conditions acceptance is separate from personal data processing and privacy rights.
If you are dissatisfied with how we handle your personal data, we invite you to contact us first at [email protected] so we can investigate and resolve your concerns promptly.
You also retain the legal right to submit a complaint directly to the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
We may update this Privacy Policy from time to time to reflect changes in our legal obligations, technical integrations, or cleaning service operations. Any substantive updates will be reflected with a revised "Last updated" date at the top of this page.
Our privacy team is available to assist you with any questions, data subject requests, or data security queries.
Contact [email protected]