Privacy Policy

1 Who We Are

1.1 Danco Services Limited ("Danco", "we", "us", "our") is the data controller responsible for your personal data. We provide domestic and commercial cleaning services across Greater Manchester.

1.2 Our details:

• Registered company: Danco Services Limited, company number 17189970
• Registered address: 66 Paul Street, London, England, EC2A 4NA
• Email: hello@dancoservices.co.uk
• Phone: 0161 399 5076
• ICO registration: [Pending — to be added once registered]

1.3 We have not appointed a Data Protection Officer (DPO), as we are not required to under Article 37 of the UK GDPR. All data-protection enquiries should be directed to hello@dancoservices.co.uk.

Plain English: Danco is the company that decides how your personal data is used. We're based in London, operate across Greater Manchester, and you can reach us about anything data-related at hello@dancoservices.co.uk.

2 The Information We Collect

2.1 Information you give us when you enquire, book, or use our services:

• Your name
• Your address (the property to be cleaned and/or billing address)
• Your phone number
• Your email address
• Booking details and service history (service type, dates, notes about your property, special requirements)
• Marketing preferences (whether you have opted in to receive marketing — stored as a marketing_opt_in flag in our system)

2.2 Payment information. When you pay your deposit or balance, your card details are collected and processed directly by Stripe, our payment processor. Danco does not see or store your full card number. We retain a record that payment was made, the amount, and the date.

2.3 Information collected automatically when you visit our website:

• Technical data such as IP address, browser type, and device information
• Usage data via our website infrastructure and security provider (Cloudflare)

Plain English: We collect what we need to clean your property and bill you — your name, address, contact details, and booking history. Your card details go straight to Stripe; we never store them.

3 How and Why We Use Your Information (Lawful Bases)

We only use your personal data where the law allows us to. Under Article 6 of the UK GDPR, our lawful bases are:

Plain English: Most of what we do with your data is to deliver the clean you booked. We only market to you if you've said yes, and you can change your mind anytime. Some data we keep because the law (tax rules) requires it.

4 Cookies and Website Technologies

4.1 Our website uses essential and security cookies provided through Cloudflare to keep the site running, secure, and protected against malicious traffic. These are necessary for the website to function and do not require consent under PECR Regulation 6(4).

4.2 If we introduce analytics or marketing cookies in future, we will display a cookie consent banner and obtain your consent before setting any non-essential cookies, in line with PECR and ICO guidance.

Plain English: Right now our site only uses the basic cookies needed to keep it working and secure. If that ever changes, we'll ask your permission first.

5 Who We Share Your Information With (Our Processors)

We use a number of trusted third-party service providers ("processors") to run our business. Each processes your data only on our instructions and under a data processing agreement. We do not sell your personal data to anyone.

5.1 We may also disclose your information:

• where required by law, a court order, or a regulatory authority; and
• in connection with a sale, merger, or transfer of our business, in which case your data would be passed to the new owner under the same protections.

Plain English: We use specialist services to store data, take payments, send messages, and run our website. They each handle your data under contract and only as we tell them. Some (like Stripe and Twilio) are US-based, so we rely on approved legal safeguards for sending data abroad. We never sell your data.

6 International Data Transfers

6.1 Some of our processors are based outside the UK (notably Stripe and Twilio in the United States, and Cloudflare's global edge network). Where your personal data is transferred outside the UK, we ensure it is protected by one of the following safeguards:

• a UK adequacy decision (where the destination country is recognised as providing adequate protection);
• the UK International Data Transfer Agreement (IDTA); or
• the UK Addendum to the EU Standard Contractual Clauses (SCCs).

6.2 Our other processors (Supabase, n8n, and Brevo) are hosted within the EU and do not involve international transfers outside the UK/EU.

Plain English: When your data leaves the UK (mainly for payments and messaging), we make sure it's covered by legally approved protections. Most of our data stays in the UK or EU.

7 How Long We Keep Your Information (Retention)

Plain English: We keep your booking and payment records for 6 years, mostly because tax rules and the law require it. Marketing data is dropped as soon as you opt out.

8 Your Rights Under UK GDPR

You have the following rights over your personal data. To exercise any of them, email us at hello@dancoservices.co.uk — we will respond within one month.

• Right of access — get a copy of the personal data we hold about you (a "Subject Access Request").
• Right to rectification — have inaccurate or incomplete data corrected.
• Right to erasure ("right to be forgotten") — ask us to delete your data, where there is no overriding reason to keep it.
• Right to restrict processing — ask us to limit how we use your data.
• Right to data portability — receive your data in a portable, machine-readable format.
• Right to object — object to processing based on our legitimate interests, or to direct marketing at any time.
• Right to withdraw consent — withdraw your marketing consent at any time, without affecting prior processing.
• Right to complain — lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We'd ask you to contact us first so we can try to resolve it.

Plain English: You're in control of your data — you can see it, correct it, delete it, move it, or tell us to stop using it. You can complain to the ICO if you think we've got it wrong, but we'd appreciate the chance to fix it first.

9 Marketing Communications

9.1 We will only send you marketing about our cleaning services where:

• you have opted in at the time of enquiry or booking; or
• you are an existing customer who has used a similar service from us, and we are contacting you about similar services — the "soft opt-in" permitted under Regulation 22 of PECR 2003.

9.2 In every marketing message we send, we provide a simple way to opt out (for example, an unsubscribe link or a "STOP" reply). Once you opt out, we will stop sending marketing without delay.

9.3 We will not pass your contact details to third parties for their own marketing purposes.

Plain English: We only market to you if you've opted in, or if you're already a customer and we're telling you about similar cleaning services. Every message lets you opt out in one step.

10 Data Security

10.1 We use appropriate technical and organisational measures to protect your data, including:

• encryption in transit (HTTPS/TLS);
• access controls limiting who can see your data;
• storing data with reputable, secure providers (Supabase, EU/London region);
• holding sensitive documents (such as contractor identity and vetting records) in restricted, private storage.

10.2 Payment data is handled by Stripe under PCI-DSS standards — we never store your full card number.

Plain English: We protect your data with encryption, restricted access, and secure providers. Card payments meet bank-grade security standards.

11 Children's Privacy

Our services and website are not directed at children. We do not knowingly collect personal data from anyone under 13. If you believe we hold data about a child, please contact us and we will delete it.

12 Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on our website and change the "Last Updated" date. Where changes are significant, we will take reasonable steps to notify you directly.

Statutory Reference Table