Privacy policy

1. Data controller

Clenovo is the data controller for the data collected through this website. Our contact details are at the bottom of every page.

2. What we process

• Customers: name, email address, phone number, address and postcode, chosen date and time, details about the property and any notes you add to the booking.
• Cleaners: name, email address, phone number, postcode, chosen service areas, availability, preferred hourly rate, and the status of your profile and verification.
• Consent records: whether you accepted the accuracy declaration and the platform terms, when, and for which version of the text.
• Payments: status, amount and payment method. Full card or bank details never reach us — Stripe processes those.
• Marketing: your email address and consent if you request a welcome discount.

3. Why, and on what legal basis

• Performance of the contract: booking, scheduling, payment, and matching a cleaner to your job.
• Legal obligation: accounting and statutory retention periods.
• Consent: marketing email and the welcome discount. You can withdraw consent at any time.
• Legitimate interest: preventing misuse of discount codes and keeping the platform secure.

4. Who receives your data

We do not sell your data. We share it only with parties needed to deliver the service:

• The cleaner who accepts your job — only the address, phone number and first name, and only after acceptance. We never share your email address.
• Stripe — for payment processing.
• Supabase — for secure database storage.

5. How long we keep it

• Booking and payment records: seven years, because of statutory retention rules.
• Cleaner profiles: for as long as your account exists. After deletion we keep only what the law requires.
• Rejected profiles: twelve months, then deleted.
• Marketing consent: until you unsubscribe.
• Incident reports: five years after resolution, so that we can show what happened if a claim or legal proceeding follows later.
• Verification codes for incident reports: at most 24 hours after the code expires.
• Cleaner profile status changes: we keep the history without personal data. If you delete your account, the link to you is removed.

6. Incident reports

If you report damage, a missing item, a lost key or conduct, we record that report: the reference number, the booking, the category, your description, the status and the history of how it was handled. We need this to investigate and resolve the report.

For photos we keep only the details about them — file name, date and a unique code (hash). We do not store the photo itself; we request it by email when needed.

To confirm you are the customer on that booking, we send a one-time code to the email address on the booking. We do not store that code in readable form and it expires after ten minutes.

Legal basis: performance of the contract, and our legitimate interest in handling reports carefully and demonstrably.

7. Sharing with insurers

Where there is damage, it may be necessary to share details with the cleaner’s liability insurer or with your own insurer. We then share only what is needed to handle that claim: the description of what happened, the date, the location at address level and the report reference.

We share no more than necessary and we do not sell this data.

8. Police and other authorities

On a lawful request from the police or another competent authority we provide the information requested. That may include the report, the booking details and the identity of the cleaner involved.

We do not determine guilt ourselves and we do not file a police report on your behalf. Where the law allows, we inform the person concerned that data has been provided.

Legal basis: legal obligation, or our legitimate interest in the safety of the platform.

9. Your rights

You have the right to access, correct, delete, restrict and port your data, and to object to processing. Send your request to the email address at the bottom of this page; we respond within one month.

If you disagree with how we handle your data, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Security

Data is encrypted in transit and at rest. Access to customer data is limited to what a person needs for their role, and this is enforced in the database itself — not only in the website.

11. Cookies

We use only functional cookies needed to keep you signed in and to complete your booking. We do not set tracking or advertising cookies.

12. Changes

We may update this policy. The date at the top of this page shows when that last happened.