Last updated: 21 August 2026
This Privacy and Cookie Policy explains how Organicleanings Ltd collects, uses, shares and protects personal information, and how we use cookies and similar technologies, when you visit either of our websites, contact us, submit an enquiry, apply to work with us, request a quotation or use our online booking system.
We are committed to handling personal information fairly, transparently and securely in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (“PECR”), each as amended from time to time, including by the Data (Use and Access) Act 2025 where applicable, and other applicable UK privacy laws.
1. Who we are
Organicleanings Ltd operates the OrganiCleaning and OrganiCleaning Home brands and is the data controller responsible for the personal information described in this policy.
Company registration number: 15606375
Registered address: 15 Archer Square, London SE14 6EX, United Kingdom
Email: info@organicleaning.co.uk
Telephone: 0203 947 9739
In this policy, “OrganiCleaning”, “we”, “us” and “our” refer to Organicleanings Ltd. “You” and “your” refer to the person whose personal information we process.
This policy applies to both of our websites:
- https://www.organicleaning.co.uk/ (our main commercial and short-let cleaning website); and
- https://organicleaning-home.co.uk/ (our domestic and Airbnb cleaning website).
2. Who this policy applies to
This policy applies to:
- Visitors to either OrganiCleaning website;
- People requesting quotations for commercial, office, gym, managed-building, domestic, one-off, Airbnb or short-let cleaning services;
- People requesting or purchasing domestic, one-off, recurring, Airbnb or full-turnover services through our online booking system;
- Customers and prospective customers who contact us by telephone, email or another communication channel;
- Property owners, tenants, guests or representatives whose information is provided in connection with a service; and
- People acting on behalf of a business customer.
- People who apply to work with us or submit recruitment information through either website.
If you give us personal information about another person, you must have authority to do so and should make this policy available to them.
3. Personal information we collect
Information you provide directly
Depending on how you interact with us, we may collect:
- Identity and contact details: your name, email address and telephone number;
- Service address: address line, flat or unit information, town or city and postcode;
- Booking information: requested service, preferred date and time, number of hours, property size, bedrooms, bathrooms and selected add-on services;
- Commercial enquiry information: business or organisation name, premises type, site address, approximate floor area, workforce or visitor numbers, cleaning frequency, preferred service times and other quotation requirements;
- Access and service information: parking details, key or concierge arrangements, access instructions, priority areas and other notes you choose to provide;
- Airbnb management enquiry information: property size and the requirements you describe;
- Recruitment information: information submitted through our Work With Us page, such as your work history, experience, availability, location, right-to-work information and any CV or supporting information you choose to provide;
- Communications: emails, telephone notes, questions, feedback, complaints and other correspondence;
- Contract and consent records: the version of the terms accepted and the date and time of your acceptance, early-service request and payment authorisation;
- Transaction information: agreed amount, invoices, payments, refunds, failed-payment status and booking reference; and
- Marketing preferences: where you separately choose to receive marketing communications.
Payment information
Where our online booking system offers payment setup, it uses Stripe to save a payment method and process the agreed charge after the cleaning service. Card fields are provided directly by Stripe. OrganiCleaning’s WordPress booking system does not receive or store your full card number, card expiry date or CVC security code.
We store limited Stripe references, such as a Stripe customer identifier, payment-method identifier, SetupIntent or invoice identifier, payment status and amount. Stripe may collect payment details, contact information, device information and transaction information in accordance with the Stripe Privacy Policy.
Information collected automatically
When you use either website, our website platforms, hosting providers, security tools, consent-management tools, analytics services and payment provider may automatically collect:
- IP address and a temporary pseudonymous value derived from it for security and rate limiting;
- Browser, device and operating-system information;
- Pages visited, dates, times, referring pages and basic website interaction information;
- Cookie identifiers and consent preferences; and
- Technical logs, error reports and security events.
The booking system may temporarily store booking-session information in your browser so that the booking can continue after secure Stripe authentication. This information is used for the booking process and is not intended for advertising. More information about cookies, browser storage and similar technologies appears in section 12.
How we obtain personal information
We normally obtain personal information directly from you. We may also receive it:
- From someone booking or communicating on your behalf, such as a property owner, tenant, host, guest or authorised representative;
- From Stripe, banks or payment providers in connection with payment setup, authentication, invoices, refunds, failed payments or disputes;
- From our website hosting, email, security and technical-service providers through service and security logs; and
- From analytics, advertising, consent-management and communication providers where those services are enabled and their use is permitted by law; and
- From cleaners, team members, insurers, professional advisers or authorities where necessary to manage a service, incident, complaint or legal obligation.
If we receive your information from another person, we will provide or make this Privacy and Cookie Policy available to you where required.
Required and optional information
Fields marked as required are necessary for us to assess, arrange and provide the requested service, communicate with you and, where applicable, save a payment method for the booking. If you do not provide the required information, we may be unable to process or confirm your booking.
Fields identified as optional, including additional notes and instructions, are voluntary. Please provide only information that is relevant to the requested service.
4. Please do not provide unnecessary sensitive information
Please do not enter health information, identity documents, bank-account details, criminal-record information or other sensitive personal information in booking, enquiry or recruitment notes unless we have specifically asked for it through an appropriate secure process.
If health or accessibility information is genuinely necessary to arrange a safe and suitable service, please contact us before submitting it. We will explain why it is needed, restrict access to it and identify an appropriate legal basis and additional condition before processing it.
5. How we use personal information and our lawful bases
| Purpose | Information used | Lawful basis |
|---|---|---|
| Responding to an enquiry, quotation request or booking request | Contact, property, business, service and communication information | Taking steps at your request before entering a contract; legitimate interests where you represent a business or another person |
| Assessing premises and preparing a commercial quotation | Business, premises, contact and service-requirement information | Taking steps at your request before entering a contract; legitimate interests in responding to business enquiries |
| Confirming, arranging and providing a cleaning service | Contact, booking, address, access and service information | Performance of our contract with you; legitimate interests for business customers and authorised representatives |
| Saving a payment method and processing payments, refunds or payment problems | Contact, transaction and Stripe reference information | Performance of our contract; legitimate interests in collecting amounts due and preventing fraud; legal obligations for financial records |
| Managing cancellations, complaints, damage reports, insurance matters and legal claims | Booking, correspondence, transaction and incident information | Performance of our contract; legal obligations; legitimate interests in resolving disputes and protecting legal rights |
| Operating, securing and improving our websites, forms and booking system | Technical, security, device, cookie-consent and usage information | Legitimate interests in providing secure and effective services; consent where required for non-essential cookies or similar technologies |
| Measuring website use and advertising effectiveness | Cookie identifiers, device, referral, usage and conversion information | Consent where required by PECR and UK data-protection law |
| Assessing applications to work with us | Contact, recruitment, availability and work-history information | Taking steps at your request before entering a contract; legitimate interests in recruitment and workforce planning; legal obligations where applicable |
| Maintaining tax, accounting and company records | Booking, invoice, payment and customer information | Compliance with legal obligations |
| Sending optional marketing communications | Name, email address and marketing preferences | Consent, or legitimate interests where the law permits; you may opt out at any time |
Where we rely on legitimate interests, we consider whether the processing is necessary and balance our interests against your rights and reasonable expectations. You may contact us for more information about this assessment.
6. Enquiries, quotations and booking confirmation
Submitting an enquiry or quotation form does not create a cleaning contract. Submitting an online booking form creates a booking request, not an automatically confirmed appointment. A member of our team reviews the request and confirms availability or proposes an alternative time.
We use the information you provide to check service-area eligibility, calculate an estimate, arrange the service, communicate with you and maintain a record of the booking. Automated postcode and security checks may prevent an invalid or out-of-area request from continuing, but you may contact us for a manual review.
7. Who we share personal information with
We share personal information only where reasonably necessary. Recipients may include:
- Assigned cleaners and team members, who receive the information necessary to provide and manage the service;
- Stripe, banks, card networks and payment providers, for saving payment methods, payment processing, authentication, fraud prevention, refunds and disputes;
- Website hosting, WordPress, email, backup, IT-support and security providers, which help us operate and protect our systems;
- Consent-management, analytics, advertising, form and communication providers, where enabled and permitted by your choices and applicable law;
- Recruitment, screening or workforce-support providers, where reasonably necessary to assess an application or meet legal and operational requirements;
- Professional advisers, accountants, insurers, legal advisers and debt-recovery providers, where reasonably necessary;
- HM Revenue & Customs, courts, regulators, law-enforcement bodies and other authorities, where disclosure is required or permitted by law; and
- A purchaser or successor to our business, if part or all of the business is reorganised, sold or transferred, subject to appropriate confidentiality and data-protection safeguards.
We do not sell or rent personal information.
8. Cleaners and access information
We provide an assigned cleaner or team member with the customer name, service address, appointment information and relevant access or service instructions. They must use this information only to provide or manage the booked service and must keep it confidential.
Please provide only the access information necessary for the appointment. Access codes and similar security information should be changed after use where practical. We remove access information from active records when it is no longer needed for a one-off service or recurring arrangement, unless it must be retained temporarily for a complaint, incident or legal claim.
9. Payment security and Stripe
Where payment setup is offered through our booking system, your card information is entered into Stripe’s secure payment fields. We receive confirmation that a payment method has been saved and store the corresponding Stripe identifiers, but we do not receive or store the complete card number, expiry date or CVC.
For a one-off service, the saved payment method is retained only while needed to collect the agreed final amount and resolve any directly related refund, failed payment or dispute. For recurring services, it may be retained for the duration of the arrangement. We periodically review saved payment methods and remove or detach them when they are no longer needed. Stripe may retain transaction information for longer where required by law or its own regulatory obligations.
10. International transfers
Some providers, including payment, hosting, email or technical-service providers, may process personal information outside the United Kingdom.
Where a restricted transfer takes place, we require an appropriate legal safeguard. Depending on the destination and provider, this may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another safeguard permitted by UK data-protection law. Where required, we also assess whether the information will continue to receive an appropriate level of protection.
You may contact us for more information about the safeguards relevant to your personal information.
11. How long we keep personal information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including contractual, accounting, tax, insurance and legal requirements. Our normal retention periods are:
| Record | Normal retention period |
|---|---|
| Unconfirmed booking requests and enquiries that do not lead to a service | Normally up to 12 months after the last contact |
| Confirmed booking, contract, service and customer correspondence records | Normally six years after the service or customer relationship ends |
| Invoices, payments and accounting records | Normally six years from the end of the relevant accounting period, or longer if legally required |
| Access codes and temporary entry instructions | Until the one-off service is complete or the recurring arrangement ends, unless temporarily required for an incident or dispute |
| Complaints, incidents, insurance matters and legal claims | Normally six years after closure, or longer while a claim or legal obligation remains active |
| Unsuccessful recruitment applications | Normally up to six months after the recruitment decision, unless we have a lawful reason to retain them for longer |
| Security, rate-limit and website logs | The booking rate-limit value expires after approximately one hour; other logs are normally retained for up to 12 months unless needed for security investigation |
| Cookie-consent records | For as long as needed to demonstrate and respect your choices, normally up to 24 months after the preference was recorded or renewed |
| Marketing records | Until you opt out or the information is no longer needed; we may keep a minimal suppression record to respect your opt-out |
These periods may be shortened or extended where reasonably necessary, for example because of a legal requirement, ongoing complaint, fraud concern, insurance matter or legal claim. When information is no longer needed, we delete it securely or anonymise it.
12. Cookies and similar technologies
This section is our Cookie Policy for both organicleaning.co.uk and organicleaning-home.co.uk. The cookies and services used can differ between the two websites and between individual pages, particularly where a page contains a quotation form, booking system, payment field, chat tool, video or social-media content.
Cookies are small text files stored on your computer, phone or other device when you visit a website. Similar technologies include pixels, tags, scripts, local storage and session storage. They can recognise a device, remember choices, enable website features, protect forms and payments, measure website use or support advertising.
How consent works
We may use strictly necessary cookies without consent where they are essential to provide a service you request, maintain security, remember your privacy choices or complete a booking or payment. We do not use these cookies for unrelated advertising.
Analytics, advertising, social-media tracking and other non-essential technologies are not activated until you give the required consent. You can accept all, reject all or choose individual categories through the cookie banner. Rejecting non-essential cookies must be as easy as accepting them.
Your choice applies to the website on which you make it. Because our two websites use different domains, you may need to set or change your preferences separately on each website.
Cookie categories and services
Depending on the website, page and features currently enabled, the following categories and providers may be used. The cookie-settings panel on each website provides the most current list detected for that website, including the name, provider, purpose and expiry of individual cookies.
| Category and provider | Purpose and example technologies | Typical duration and consent |
|---|---|---|
| Strictly necessary OrganiCleaning, WordPress, hosting, Wordfence and Complianz | Operate the website, protect forms and accounts, prevent abuse, manage sessions and save cookie choices. Examples may include cmplz_*, wordpress_*, wordpress_logged_in_*, wp-settings-* and wfwaf-authcookie*. | Session to 12 months, depending on function. No consent required where strictly necessary. |
| Security and form protection Google reCAPTCHA, where enabled | Distinguish genuine users from automated abuse and protect forms. Examples may include _GRECAPTCHA and rc::a, rc::b or rc::c. | Session to approximately six months. Used without consent only where the technology and its purpose qualify as strictly necessary; otherwise consent is requested before it loads. |
| Booking and payment Stripe, where a payment or payment-method setup is requested | Provide secure payment fields, authenticate a payment method, prevent fraud and maintain the booking flow. Examples may include __stripe_mid, __stripe_sid and m. | Session to approximately two years, depending on Stripe’s security purpose. Used without consent only where strictly necessary for the requested payment service. |
| Analytics and performance Google Analytics, Google Tag Manager or Site Kit | Understand visits, page use, referral sources and website performance. Google Tag Manager delivers configured tags but the services loaded through it may set cookies. Examples may include _ga, _ga_* and _gid. | Usually 24 hours to 24 months. Consent required under our current approach. |
| Advertising and conversion measurement Google Ads and related Google services | Measure enquiries or bookings resulting from advertisements, limit or personalise advertising and attribute conversions. Examples may include _gcl_*, IDE and test_cookie. | Usually 15 minutes to 13 months, depending on the cookie. Consent required. |
| Communications and optional functionality Intercom or another chat provider, where enabled | Provide chat, remember a conversation and support customer communication. Examples may include intercom-id-*, intercom-session-* and intercom-device-id-*. | Usually seven days to nine months. Consent required before non-essential storage or access. |
| Social media and embedded content Facebook, Instagram, Meta, TikTok or other embedded platforms, where enabled | Display embedded content and, if permitted, measure engagement or support advertising. Examples may include _fbp, fr and _ttp. | Session to approximately 13 months, depending on the provider. Consent required before tracking technologies load. |
Cookie names and lifespans can change when a provider updates its technology or when we change a website feature. We review our cookie scan and cookie-settings information periodically and update it when the technologies in use materially change.
Third-party providers
Some cookies and similar technologies are provided by third parties. Where they receive personal information for their own purposes, their privacy information also applies. Relevant notices include the Google Privacy Policy, Stripe Privacy Policy, Intercom Privacy Policy, Meta Privacy Policy and TikTok Privacy Policy.
Changing or withdrawing your choice
You can change or withdraw your consent at any time by reopening “Cookie Settings” or “Manage Consent” on the relevant website. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. We may ask for consent again if our purposes or technologies change materially or after a reasonable period.
You can also block or delete cookies through your browser settings. Deleting cookies may remove your saved preference, so the cookie banner may appear again. Blocking strictly necessary cookies or browser storage may prevent forms, bookings, secure payment authentication or other parts of the website from working correctly.
13. Direct marketing
Submitting an enquiry, quotation request, job application or booking request does not automatically subscribe you to marketing emails.
If you separately ask to receive offers or updates, we may contact you in accordance with UK data-protection and electronic-marketing rules. You can unsubscribe at any time by using the link in a marketing email or contacting info@organicleaning.co.uk.
Service communications about a booking, payment, safety issue or customer-support matter are not marketing and may still be sent where necessary.
14. Security
We use appropriate technical and organisational measures designed to protect personal information against accidental loss, misuse, alteration, unauthorised access and disclosure. These measures include access controls, protected enquiry and booking records, input validation, secure connections, signed payment notifications and restricting personal information to people who need it for their work.
No website, email system or internet transmission is completely secure. Please contact us promptly if you believe personal information connected with OrganiCleaning has been lost, misused or disclosed without authorisation.
15. Your data-protection rights
Depending on the circumstances and lawful basis, you may have the right to:
- Request confirmation that we process your personal information and receive a copy of it;
- Ask us to correct inaccurate or incomplete information;
- Ask us to erase information where there is no lawful reason to continue keeping it;
- Ask us to restrict how information is used in certain circumstances;
- Receive information you provided in a structured, commonly used and machine-readable format, where the right to data portability applies;
- Withdraw consent at any time where we rely on consent, without affecting processing carried out before withdrawal; and
- Complain to the Information Commissioner’s Office.
Your right to object
You have the right to object to processing based on our legitimate interests. We will stop that processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for legal claims.
You may object to direct marketing at any time. If you do, we will stop using your personal information for that purpose.
These rights are not absolute and exemptions may apply. We normally respond within one month. We do not usually charge a fee, but we may ask for information reasonably necessary to confirm your identity and protect personal information from unauthorised disclosure.
16. Automated decision-making
OrganiCleaning does not normally make decisions that produce legal or similarly significant effects about customers or applicants solely through automated processing. A member of our team personally checks quotations, booking availability and recruitment applications.
Our systems and Stripe may use automated security, authentication and fraud-prevention checks. You may contact us if you believe an automated check has incorrectly prevented an enquiry, form submission, booking request or payment.
17. Children
Our websites and online booking service are intended for adults aged 18 or over. We do not knowingly invite children to submit personal information through our forms or booking system.
18. Links to other websites
Our websites may link to third-party websites and services. Their privacy practices are controlled by those third parties, and we encourage you to read their privacy information before providing personal information.
19. Changes to this policy
We may update this policy when our websites, services, providers or legal obligations change. The latest version will be published on both websites with a revised “Last updated” date.
If a change materially affects how we use information already collected, we will take reasonable steps to notify affected people where required.
20. Contact us about privacy
To exercise a data-protection right, ask a question or raise a concern, contact:
Privacy Contact
Organicleanings Ltd
15 Archer Square
London SE14 6EX
United Kingdom
Email: info@organicleaning.co.uk
Telephone: 0203 947 9739
21. Complaints to the Information Commissioner
We would appreciate the opportunity to resolve your concern first. You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office
Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Making a complaint to us or the Information Commissioner does not affect any other legal rights you may have.