Privacy policy

This explains what CleanRun does with personal data — both yours, and the data about your customers that you keep in it. It is written to be read, not to be survived.

Who we are

CleanRun is operated by a sole trader based in the United Kingdom, trading as CleanRun. For anything in this policy, email hello@cleanrun.uk and we will reply.

We have two different roles

This matters, because different rules apply to each.

• For your own account — your name, email, business details and billing — we are the data controller. We decide what we collect and why.
• For your customers’ data — the people you clean for — we are a data processor. That data is yours. We only hold and handle it so the software works, and we act on your instructions. You are its controller.

What we collect about you

• Your name, email address and a password, held by our authentication provider.
• Your business name, address, phone number and logo, if you add them.
• Your plan and billing history. We never see or store your card details — those go directly to Stripe.
• Basic technical records needed to run the service securely, including rate-limiting counters that stop abuse of sign-in and public booking forms.

What you store in CleanRun about other people

You decide what goes in. In practice it is usually:

• Your customers’ names, addresses, phone numbers and email addresses.
• Access notes you write on a customer or site — which can include key safe codes, alarm information and parking instructions. Treat these as the most sensitive thing in your account and only share them with staff who need them.
• Job history, quotes, invoices and any before-and-after photos your team uploads.
• Details submitted through your public booking page by members of the public: name, email, phone, address, preferred times and any notes they write.

We do not use any of it for our own purposes. We do not mine it, profile it, or build anything from it.

Who else processes it

We use a small number of sub-processors, each one because the software needs it. By category:

• Hosting and infrastructure providers — the database, the login system, file storage for logos and job photos, and running the application itself. All of this is in Ireland: the database is hosted in the EU West (Ireland) region, and the application runs in Dublin.
• Our payment processor — subscription payments and card handling. Card details go straight to them and never reach us.
• Our email provider — sending invoices to your customers and account notices to you.
• Address lookup services — turning a postcode into a list of street names when you or one of your customers uses address lookup.

Our email and payment providers may handle a limited amount of data — an email address, or billing details — outside the UK and the European Economic Area. Where that happens it is covered by the standard contractual protections those transfers require.

On that last one, to be precise: only the postcode is sent. No name, no full address, nothing identifying the person it belongs to.

We will name the specific companies to any customer who asks — email hello@cleanrun.uk. Business customers can also see the current list under our terms, since you need it to agree to it.

Two other times data might be shared

• If the law requires it. We may have to disclose data to a court, regulator or law enforcement where we are legally obliged to, or to establish or defend a legal claim. We will tell you if that happens unless we are forbidden from doing so.
• If the business changes hands. If CleanRun is sold or merged, your data would transfer to the buyer, who would be bound by this policy. We would tell you beforehand, and you would be free to delete your account first.

What we do not do

• We do not sell personal data, and never will.
• We do not run Google Analytics or any other analytics or tracking product. There is no tracking pixel, no advertising network and no third-party script watching you use the site.
• We do not share your customer data with anyone except the sub-processors above.

Cookies

One cookie, and it is strictly necessary: the one that keeps you signed in. There are no analytics or advertising cookies, which is why this site does not greet you with a consent banner.

How long we keep things

• While your account is open, we keep your data so the software works.
• If you ask us to delete your account, it is scheduled for permanent deletion 14 days later. You get an email confirming this, and you can cancel it from Settings at any point in those 14 days. After that it is gone and cannot be recovered.
• Records we have to keep by law, such as our own invoicing and tax records, are kept for 6 years. This only covers our records of what you paid us — not the customer data inside your account, which goes when you delete it.

Your rights

Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to our handling of it. You can also ask for it in a portable format.

Email hello@cleanrun.uk and we will respond within one month.

If your data is in CleanRun because a cleaning business you deal with uses it, your request belongs with that business, not with us — they control it. Contact them, and tell us if you cannot reach them.

Complaints

If you think we have handled your data badly, please tell us first so we can fix it. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Changes

If we change this policy we will update the date at the top, and tell you by email if the change is significant.

See also our terms of service, which cover how we handle your customers’ data on your behalf.