The short version
We only collect what we need to give you a quote and clean your property. This website sets no cookies and we don't track you. We never sell your data or pass it to marketing companies. You can ask us to delete everything we hold about you at any time, and we'll do it.
1. Who we are
Omni Shine Cleaning ("we", "us", "our") is a family-run cleaning service based in Oldham, Greater Manchester. We are the data controller for the personal data described in this policy, which means we decide how and why it is used.
- Email: info@omnishine.co.uk
- Website: omnishine.co.uk
This policy is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).
2. The information we collect
When you request a quote
Our quote form asks for your name, email address, postcode, the service you need, and any message you choose to add. The consent tick-box is recorded along with your enquiry.
When we quote for or carry out a clean
To deliver the service we may also hold your address and contact number, access arrangements (for example whether a key or key-safe code is involved), your booking history, any specific requirements you tell us about, and records of payments. If we take photographs to confirm a property has been cleaned, we do so only with your agreement, and we do not publish them without your separate written permission.
When you email us
We keep the content of correspondence so we have a record of what was agreed.
Automatically, when you browse the site
Our hosting and anti-spam providers process your IP address and basic technical information (such as browser type) to serve pages and to block automated abuse. We use Cloudflare Web Analytics to understand, in aggregate, how many people visit and which pages they read; it is cookieless, stores nothing on your device, and cannot identify individual visitors. We also record, for the length of your visit only, which page you arrived on and which website or campaign link referred you — so we can tell which of our pages actually generate enquiries. This is stored in your browser's session storage, contains no name or identifier, is only sent to us if you choose to submit the form, and is erased when you close the tab. See our cookie policy for detail.
We do not use advertising cookies, tracking pixels, social media trackers, or cross-site profiling of any kind.
If you are a business we approach
We sometimes contact local businesses by email to introduce our commercial cleaning services, using contact details published for that purpose (for example on a company website). We use business contact details only, always identify ourselves, and every message includes a way to opt out. Tell us to stop and we will not contact you again.
3. Why we use it, and our lawful basis
UK GDPR requires us to have a lawful basis for each thing we do with your data:
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry and prepare a quote | Steps taken at your request before entering a contract — Art. 6(1)(b) |
| Book, carry out and invoice your clean | Performance of our contract with you — Art. 6(1)(b) |
| Keep accounting and tax records | Legal obligation — Art. 6(1)(c) |
| Protect the website from spam and abuse | Legitimate interests — Art. 6(1)(f) |
| Understand which pages and channels bring us enquiries | Legitimate interests — Art. 6(1)(f) |
| Introduce our services to other businesses by email | Legitimate interests — Art. 6(1)(f), and PECR reg. 22 for corporate subscribers |
| Send you marketing if you have asked us to | Your consent — Art. 6(1)(a), withdrawable at any time |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and we limit what we collect accordingly. You can object to this processing — see section 7.
4. Who we share it with
We share personal data only with the service providers that make our business work. Each acts as our processor, under contract, and may only use the data to provide their service to us:
- Cloudflare, Inc. — hosts this website, runs the quote-form handler, and provides Turnstile anti-spam protection and cookieless Web Analytics.
- Resend (Plus Five Five, Inc.) — delivers the quote-form emails to our inbox and your confirmation email to you.
- Krystal Hosting Ltd — UK provider that hosts our email mailbox.
We may also disclose information where we are legally required to — for example to HMRC, or in response to a valid court order.
We do not sell your personal data, and we do not share it with advertisers, data brokers or marketing partners. Ever.
If you choose to leave us a review on Google, that is published by you on Google's platform under Google's own privacy policy — we don't control it, and we never post reviews on your behalf.
5. Where your data is held
Our email is hosted in the United Kingdom. Cloudflare and Resend are US-headquartered and may process data outside the UK. Where personal data is transferred internationally, it is protected by appropriate safeguards as required by Article 46 of UK GDPR — the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, and, where the provider is certified, the UK Extension to the EU–US Data Privacy Framework.
6. How long we keep it
| Type of record | Kept for |
|---|---|
| Enquiries that don't become bookings | 12 months, then deleted |
| Client records and correspondence | Duration of the relationship, then 12 months |
| Invoices and accounting records | 6 years, as required by HMRC |
| Access details and key-safe codes | Deleted as soon as the arrangement ends |
| Opt-out records | Kept indefinitely, so we don't contact you again by mistake |
| Browsing session data | Erased when you close the tab |
7. Your rights
Under UK GDPR you have the right to:
- Be informed — which is what this policy is for.
- Access a copy of the personal data we hold about you.
- Rectification — have anything inaccurate corrected.
- Erasure — ask us to delete your data ("the right to be forgotten").
- Restrict processing — ask us to pause using it while something is resolved.
- Data portability — receive your data in a portable format.
- Object to processing based on legitimate interests.
- Object to direct marketing at any time. This is an absolute right — we must stop immediately.
- Withdraw consent at any time, where we relied on it.
To exercise any of these, email info@omnishine.co.uk. We will respond within one month, and it is free of charge. We may ask you to confirm your identity so we don't disclose your data to someone else.
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
8. How we keep it safe
- The whole site is served over HTTPS, with HSTS and a strict Content Security Policy.
- The quote form is protected by Cloudflare Turnstile and a hidden honeypot field, and rejects submissions from other websites.
- Mailboxes are protected by strong, unique passwords and two-factor authentication.
- We collect the minimum we need, and only the people who need access have it.
No system is perfectly secure, but if a breach ever put your rights at risk we would notify the ICO within 72 hours and tell you without undue delay, as the law requires.
9. Children
Our services are sold to adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.
10. Cookies
This website sets no cookies at all. Full details of the limited browser storage we do use are in our cookie policy.
11. Changes to this policy
If we change how we handle personal data we will update this page and change the "last updated" date at the top. Material changes affecting existing clients will be communicated directly.
12. Complaints
If you are unhappy with how we have handled your personal data, please tell us first at info@omnishine.co.uk — we would genuinely rather put it right.
You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office, at any time:
- Online: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF