Privacy policy
Last updated 15 October 2026
This policy explains how we collect and use personal data when you request a quotation, book a cleaning service or otherwise contact us, and sets out your rights under data protection law. We do not use your personal data for any purpose other than those described here.
Who we are
Capital Cleaners is a cleaning company based in Harrow, providing cleaning services to homes and offices across London. We are the controller of the personal data described in this policy, which means that we decide how and why it is used. You may contact us by email at info@
What we collect, and why
Quotation requests
The quotation form asks for your name, telephone number, postcode or area, the service you require and the way in which you would like us to contact you. You may also provide an email address, a preferred date and a message. We use this information to prepare a quotation and to respond to you. Our lawful basis is that you have asked us to take steps before entering into a contract (UK GDPR Article 6(1)(b)).
Bookings
The booking form asks for the same information, together with the address to be cleaned, your preferred date and time, details of the property or premises, and any notes on parking or access. We use this information to arrange and carry out the cleaning service. Our lawful basis is the contract between you and us (Article 6(1)(b)).
Telephone, text, email and WhatsApp
If you contact us by telephone, text message, email or WhatsApp, we receive your number or email address and the content of your message. We keep these in order to respond to you and to carry out any service you have requested. Messages sent through WhatsApp are also handled by the provider of that service. Our lawful basis is the same: you have asked us for something, or we are carrying out a service you have booked (Article 6(1)(b)).
Business and legal records
After a service has been completed, we keep the records that we are required to hold for accounting and tax purposes (Article 6(1)(c)). We also keep the information necessary to deal with any complaint or dispute relating to a service, in pursuit of our legitimate interest in defending our position and resolving such matters (Article 6(1)(f)).
Security of the website
The website forms include measures to prevent spam and automated misuse. One of these, provided by our website host, analyses signals from your browser to distinguish a person from an automated program, and your IP address is passed to it for that purpose. We do not use your IP address for any other purpose. Our website host also processes your IP address and basic details of your visit in order to deliver and protect the pages, as any web host does. Our lawful basis is our legitimate interest in keeping the website secure and free from abuse (Article 6(1)(f)).
What we do not do
We do not send marketing communications, sell personal data or use personal data for automated decision-making. The website does not use advertising or analytics tracking. Should this change, we will ask for your consent where the law requires it and will update this policy.
Cookies and similar technologies
The website itself does not set cookies. Your browser holds a single temporary item for as long as the tab remains open. It records how many times the contact button has been animated, so that the animation is not repeated unnecessarily. It contains no personal data and is deleted when the tab is closed. The security check on the forms, which is provided by our website host, may use your browser's storage briefly in order to work, and uses it only to distinguish people from automated programs. We ourselves do not use cookies or similar technology for advertising or analytics.
A map showing our location appears in the footer of every page and on the contact page. It is loaded from Google, a technology company based in the United States. When the map loads, Google receives your IP address and details of your browser and device. If you interact with the map, for example by moving, zooming or clicking it, Google may also set its own cookies in your browser. We do not control these cookies and receive no information from them. If you prefer to avoid this, do not use the map: our address is written beside it on the contact page and in the footer.
Who receives your personal data
We share personal data only with those who need it in order for us to provide our services, and they may use it only for that purpose. The recipients, described by the type of organisation and where it is based, are:
- the staff who carry out the cleaning service, in the United Kingdom, who receive the address and access information needed to attend the property;
- a website hosting and security provider, a technology company based in the United States, which hosts this website, delivers the contents of the forms to our email and runs the check that distinguishes people from automated programs;
- an email provider, a technology company based in the United States, which holds our email inbox, to which every quotation request and booking is delivered;
- a messaging service, operated through companies based in the British Virgin Islands and the United Arab Emirates, through which each new quotation request or booking is also sent to a private chat that only we can access, so that we can respond promptly;
- our accountant or other professional advisers in the United Kingdom, where we require their assistance; and
- the police, HM Revenue and Customs or another public authority, where we are legally required to disclose information to them.
We do not sell personal data or pass it to anyone for their own marketing purposes. You may ask us for the names of these organisations, using the contact details above.
Transfers outside the United Kingdom
Some of the recipients listed above are outside the United Kingdom, so your personal data is transferred to them.
- The website hosting and security provider and the email provider are based in the United States. We rely on the UK-US data bridge (the UK Extension to the EU-US Data Privacy Framework), which permits transfers to United States organisations that have certified under it. Where an organisation is not certified, they rely on standard contractual clauses.
- The company that provides the map, described above, is based in the United States. It receives the technical details described in the cookies section directly from your browser, not from us. The safeguards that apply to it are its own, and we do not control them.
- The messaging service is operated through companies in the British Virgin Islands and the United Arab Emirates, which are not covered by a United Kingdom adequacy decision. The provider states that it protects transfers between its group companies with standard contractual clauses.
You may ask us for a copy of, or further information about, the safeguards that apply, using the contact details above. If you would prefer that your details are not sent to the messaging service, please telephone us instead of using the website forms.
How long we keep personal data
- Enquiries that do not lead to a booking: 12 months, after which they are deleted from our email and from the messaging service.
- Completed services: 6 years from the date of the service, for accounting and tax purposes, after which the records are deleted or anonymised.
- Failed transmissions: if a form cannot be delivered to us by email, the information is held in the website's error log, which our website host clears after a few days.
Where a complaint or legal claim is outstanding, we keep the relevant information until it has been resolved. You may ask us to delete your personal data sooner, as described below, and we will do so unless the law requires us to retain it.
Whether you must provide your personal data
You are not obliged to use the website forms. In order to provide a quotation or to carry out a booking, we need your name, a means of contacting you and, for a booking, the address of the property, because we cannot provide the service without them. All other information is optional.
Your rights
You have the right to ask us to:
- confirm whether we hold personal data about you and provide you with a copy;
- correct any personal data that is inaccurate or incomplete;
- delete your personal data;
- restrict our use of your personal data, for example while its accuracy is being checked;
- stop using your personal data where we rely on our legitimate interests (the right to object, explained below); and
- provide the personal data that you supplied for a booking in a structured, commonly used format (the right to data portability).
Your right to object
Where we use your personal data because of our legitimate interests, which is the case for the security of the website and for dealing with complaints and disputes, you have the right to object to that use at any time. We will then stop, unless we can demonstrate compelling legitimate grounds that override your interests, or we need the personal data to establish, exercise or defend a legal claim.
Consent and how to exercise your rights
Where we rely on your consent for any purpose, you may withdraw it at any time, as easily as it was given. To exercise any of these rights, please email info@
Complaints
If you are dissatisfied with the way in which we have handled your personal data, please contact us first at info@
You also have the right to complain to the Information Commissioner's Office, the United Kingdom's data protection regulator, at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113. You are not required to complain to us first.
Changes to this policy
We may update this policy from time to time. Any change will be published on this page and the date at the top will be revised. This version was last updated on 15 October 2026.