UK GDPR and Data Protection Privacy Notice β Efficient Work Group Ltd trading as Indeed-Clean
Last updated: 30 August 2026
1. Who is responsible for your personal information?
Efficient Work Group Ltd (company number 09277435), trading as Indeed-Clean, is the controller for the personal information described in this Policy where we decide why and how it is used. Registered office: 168A London Road, Northampton, England, NN4 8AS. Privacy contact: info@indeed-clean.co.uk. WhatsApp: +44 7516 838759.
Independent Cleaners may also act as separate controllers for limited personal information they lawfully receive and independently need to perform a booking, meet legal obligations or manage an insurance claim. We contractually restrict the use of booking data to legitimate purposes connected with the service and related legal obligations.
We have not appointed a statutory Data Protection Officer, as we are not required to do so under UK GDPR Article 37. Day-to-day privacy queries and rights requests are handled by our privacy contact using the details above, with escalation to senior management for complex matters.
2. Scope of this Policy
This Policy applies to customers, prospective customers, website visitors, business contacts, Cleaners and people whose information is supplied as part of a booking (for example a neighbour providing a key). It applies to information collected through our website, booking forms, telephone, email, WhatsApp, payment flows and customer-support channels.
3. Information we collect
We collect the following categories of personal information, depending on how you interact with us:
Tokenised card reference, transaction amount and date, billing address. We do not store full card numbers; these are held only by our payment processor
Provided by you / generated by our payment processor
Communications
Emails, WhatsApp messages, call notes, complaint and support records
Generated when you contact us or we contact you
Technical and usage data
IP address, device/browser type, pages viewed, cookie identifiers
Generated automatically β see our Cookie Policy
Cleaner onboarding data (Cleaners only)
Identity and right-to-work documents, background-check results where used, insurance certificates, bank details for payment, performance and rating data
Provided by the Cleaner / generated during onboarding and service delivery
Cleaner tax-reporting data (Cleaners only, where applicable β see section 13C)
Full name, address, date of birth, National Insurance number or Tax Identification Number, and total amounts paid to the Cleaner through the platform
Provided by the Cleaner during onboarding / generated by our systems, where we are required to report this to HMRC
Marketing preferences
Consent, opt-in and opt-out records
Provided by you or generated by our systems
4. Information about other people
If you give us information about another person, such as a neighbour who will provide a key, you must have a lawful basis and, where appropriate, their permission to do so. Please tell them that their information will be used for the booking and direct them to this Privacy Policy. Do not provide more information than is necessary.
5. Why we use information and our lawful bases
Under UK GDPR Article 6, we rely on the following lawful bases for the purposes shown. Where we rely on legitimate interests, we have considered that this is balanced and does not override your interests and rights, and you can ask us for details of that assessment.
Purpose
Categories of data used
Lawful basis
Creating and managing your account and processing a Booking
Identity/contact, booking/property, payment
Performance of a contract (Art. 6(1)(b))
Assigning a Cleaner and sharing booking/access details reasonably needed to perform the visit
Identity/contact, booking/property, access/key
Performance of a contract; legitimate interests in operating the platform (Art. 6(1)(f))
Taking payment and preventing fraud
Payment, identity/contact
Performance of a contract; legal obligation (Art. 6(1)(c)); legitimate interests in fraud prevention
Cleaner onboarding, verification and insurance checks
Cleaner onboarding data
Legitimate interests in service quality and safety; legal obligation where checks are required by law
Handling complaints, damage reports and insurer liaison
Communications, booking/property, relevant onboarding data
Legitimate interests; performance of a contract; legal obligation where applicable
Sending booking and service communications
Identity/contact, communications
Performance of a contract; legitimate interests
Sending marketing communications
Identity/contact, marketing preferences
Consent, or the PECR "soft opt-in" for existing customers regarding similar services, with a right to object at any time
Website analytics and service improvement
Technical and usage data
Consent for non-essential technologies, or legitimate interests/PECR exception for strictly limited statistical use β see our Cookie Policy
Complying with tax, accounting, company and other legal obligations, including HMRC digital-platform reporting where applicable (see section 13C)
Identity/contact, payment, Cleaner onboarding data, Cleaner tax-reporting data
Legal obligation (Art. 6(1)(c))
Establishing, exercising or defending legal claims, and enforcing our Terms (including the non-circumvention provisions)
Relevant categories depending on the claim
Legitimate interests; legal obligation where applicable
5A. How we assess "legitimate interests"
Before relying on legitimate interests as a lawful basis, we ask three questions required by ICO guidance: (1) purpose β is there a genuine business reason for the processing; (2) necessity β is the processing a reasonably targeted way of achieving that purpose, with no less intrusive alternative; and (3) balancing β do your interests, rights and freedoms override our interest, taking into account whether you would reasonably expect the processing and any potential impact on you. We keep a record of this assessment for each purpose listed in section 5, and you can ask us for a copy using the contact details in section 19.
5B. Automated decision-making and profiling
We do not currently use fully automated decision-making (that is, a decision made without any human involvement) that produces a legal or similarly significant effect on you, such as automatically refusing a Booking or a Cleaner application without human review. Limited automated processing may be used to support fraud checks or to suggest an available Cleaner or time slot, but a person reviews any outcome that meaningfully affects your access to the service. If this changes, we will update this Policy and provide the information required by UK GDPR Article 22, including your right to request human review.
6. Special-category information
We do not normally need information about health, ethnicity, religion, sexual orientation or other special-category data to provide cleaning services. Please avoid placing such information in free-text notes unless it is genuinely necessary. If you voluntarily provide health or accessibility information that is necessary for safe service delivery (for example, a note that a resident has limited mobility so the Cleaner can plan safe access), our primary basis for using it is your explicit consent (UK GDPR Article 9(2)(a)), which you give by choosing to provide that information to us for that purpose. We will only rely on a different Article 9(2) condition and the matching Schedule 1 Data Protection Act 2018 condition β maintaining the Appropriate Policy Document that condition requires β where we have specifically identified that a more suitable condition applies to the circumstances. In every case, we minimise who can access this information and keep it only as long as necessary for the purpose it was given.
7. Who we share information with
The assigned self-employed Cleaner, but only information reasonably needed to perform and support the Booking.
Payment processors, banks and fraud-prevention providers.
Hosting, website, cloud, CRM, email, SMS, telephone and WhatsApp/business-messaging providers.
Professional advisers, accountants, insurers and claims handlers where necessary.
Verification, screening or insurance-validation providers used for Cleaner onboarding where applicable.
Police, courts, regulators, HMRC or other authorities where disclosure is required or permitted by law, including annual digital-platform reporting to HMRC where section 13C applies.
A purchaser, investor or successor in a corporate transaction, subject to appropriate confidentiality and data-protection safeguards.
We do not sell personal information to advertisers or data brokers. Where a third party processes personal information on our behalf, we have a written contract with them that meets UK GDPR Article 28 requirements.
8. Contact details, Cleaners and anti-circumvention
We aim to keep communication inside approved Indeed-Clean channels where practical. A Cleaner may receive your telephone number or another direct contact method when it is reasonably necessary for arrival, access, safety or service delivery. Any direct contact information exchanged for operational reasons must not be used to arrange off-platform work in breach of the Terms and Conditions, clause 16 (No circumvention, direct engagement or unauthorised exchange of contact details).
9. Key, lockbox and neighbour information
Access information can create a heightened security risk. We therefore limit access to personnel and the assigned Cleaner who need it, use it only for the Booking and related support, and apply shorter retention where reasonably possible (see section 11). Do not send access codes in marketing forms or public channels.
10. International transfers
Some technology providers may process information outside the United Kingdom. Where UK data-protection law requires a transfer safeguard, we use an applicable adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism, together with supplementary measures where appropriate.
11. How long we keep information
We keep personal information only for as long as necessary for the purposes it was collected. Typical retention periods are:
Category
Typical retention period
Why
Customer account and booking records
Duration of your relationship with us, then 6 years from your last Booking
Contract claims (Limitation Act 1980) and accounting records
Payment/transaction records (not full card data)
6 years from the transaction
Statutory accounting and tax record-keeping (Companies Act 2006, HMRC requirements)
Access codes, lockbox codes and neighbour contact details
Deleted or reset promptly after the relevant Booking or arrangement ends, and in any event no longer than 30 days after last use unless a recurring Booking continues
Minimising a security-sensitive category of data
Damage reports and insurance-claim correspondence
6 years from resolution of the claim
Limitation period for contract/tort claims
Complaint records
6 years from resolution
Evidencing compliance and handling any follow-up claim
Marketing consent and opt-out records
While relevant, plus up to 3 years after an opt-out
Evidencing compliance with PECR/UK GDPR consent requirements
Cleaner onboarding and compliance records (insurance certificates, checks)
Duration of engagement, then 6 years from the Cleaner's last Booking
Contract and insurance-related claims
Website analytics/cookie data
As set out in the live cookie register in our Cookie Policy (typically up to 26 months for standard analytics configurations)
Proportionate to analytics purpose
These are general periods, not promises that every record is kept for the maximum period shown. We periodically review retention and securely delete or anonymise information that is no longer required.
12. Security
We use appropriate technical and organisational measures proportionate to risk, including access controls, account/security logging, restricted access to booking and key information, supplier controls, secure payment providers and procedures for responding to suspected personal-data breaches. No internet service can guarantee absolute security, so customers should use secure channels and avoid sending unnecessary sensitive information.
13. Your UK data-protection rights
Right to be informed about how we use your personal information.
Right of access to obtain a copy of your personal information and supplementary information.
Right to rectification of inaccurate or incomplete information.
Right to erasure in circumstances where the law gives that right.
Right to restrict processing in applicable circumstances.
Right to data portability for qualifying automated processing based on consent or contract.
Right to object, including an absolute right to object to direct marketing.
Right to withdraw consent at any time where processing relies on consent, without affecting earlier lawful processing.
Rights relating to certain significant automated decisions, where applicable.
To exercise a right, contact info@indeed-clean.co.uk. We aim to respond within one month, as required by UK GDPR (extendable by a further two months for complex requests, in which case we will tell you). We may need to verify your identity. Rights are subject to legal conditions and exemptions, and some rights depend on the lawful basis used.
13A. What this means for you in practice
If you want toβ¦
What to do
See what data we hold about you
Email info@indeed-clean.co.uk with "Subject Access Request" and enough detail for us to find your records
Correct an out-of-date phone number or address
Update it in your account, or email us and we will correct it within a reasonable time
Stop receiving marketing emails or WhatsApp offers
Use the unsubscribe/opt-out link in the message, or tell us directly β this does not affect booking-related messages
Ask us to delete your account and booking history
Email info@indeed-clean.co.uk; we will explain what we can delete immediately and what we must keep for the periods in section 11 (for example, tax records)
Object to a particular use of your data
Email info@indeed-clean.co.uk explaining what you object to; we will respond and, where required, stop that specific use
13B. Cleaner-specific processing
If you are a Cleaner or Cleaner applicant, we process the onboarding and compliance data described in section 3 to assess suitability, verify identity and insurance, administer payments due to you under the Cleaner Agreement, and maintain records required for insurance, tax and safeguarding purposes. Where we carry out a background or identity check through a third-party verification provider, that provider acts as our processor for that specific check, and we only use the result for the onboarding and ongoing-compliance purposes described in section 5. Cleaners have the same rights described in section 13, exercised in the same way.
13C. HMRC digital-platform reporting (Cleaners)
Digital platforms that connect self-employed individuals with customers for services such as cleaning, and that know or can reasonably determine what is paid to those individuals, may be a "Reporting Platform Operator" under the Platform Operators (Due Diligence and Reporting Requirements) Regulations 2023. [Business to confirm with its accountant or tax adviser whether Indeed-Clean falls within this regime.] If it does, we are legally required to collect and verify additional information about Cleaners (including full name, address, date of birth, and National Insurance number or Tax Identification Number), and to report Cleaners' identity and the amounts paid to them to HMRC annually. Where this applies, that processing is carried out under the legal obligation basis in section 5, using the Cleaner tax-reporting data described in section 3, and Cleaners will be notified in accordance with the Regulations before the first report is made.
14. Marketing communications
We send electronic marketing only where permitted by UK GDPR and the Privacy and Electronic Communications Regulations (PECR), including any applicable consent or "soft opt-in" requirements. Every marketing message will provide a clear way to opt out where required. Service messages about an active booking are not marketing and may still be sent when necessary to perform the booking.
15. Cookies and similar technologies
Our website uses cookies and other storage/access technologies. Some are necessary for security, booking and preference functions. Others may be used for statistics, analytics or marketing depending on configuration. Where consent is legally required, non-exempt technologies are kept off until valid consent is obtained. See our Cookie Policy and Cookie Settings for details.
16. Children
Indeed-Clean is a service for adults arranging cleaning and is not directed at children. A person making a Booking must be at least 18. If we learn that we have collected a child's information unnecessarily, we will take reasonable steps to delete it.
16A. Data Protection Complaints Procedure
Since 19 June 2026, the Data (Use and Access) Act 2025 requires us to operate our own procedure for handling data-protection complaints, rather than simply pointing you to the ICO. If you are unhappy with how we have used your personal information, you can raise it with us in writing at info@indeed-clean.co.uk, by post to our registered office, or using an electronic complaint form on our website, and should tell us as much as you can about the concern, including any relevant Booking reference.
We will facilitate your complaint β for example, by providing a simple electronic complaint form and helping you set out the issue if you contact us by another route.
We will acknowledge your complaint within 30 days of receiving it.
We will respond to your complaint without undue delay, and will keep you informed of progress if it takes longer to resolve.
We will consider your complaint fairly, tell you the outcome and the reasons for it, and explain what you can do next if you remain unhappy, including your right to complain to the ICO under section 17 below.
17. Complaints to the ICO
You can also complain to us informally at info@indeed-clean.co.uk in addition to using the procedure in section 16A. Separately from, and in addition to, that procedure, you have the right to complain to the UK Information Commissioner's Office (ICO) at any time. The ICO's current contact and complaint information is available at ico.org.uk.
18. Changes to this Privacy Policy
We may update this Policy to reflect changes to our services, technology, suppliers or law. The latest version will be posted on the website with a new "last updated" date. If a change materially affects how we use existing personal information, we will take any additional notification or consent steps required by law.
19. Contact us
Efficient Work Group Ltd trading as Indeed-Clean
Company number: 09277435
Registered office / Head Office: 168A London Road, Northampton, England, NN4 8AS
Website: https://indeed-clean.co.uk
Privacy contact email: info@indeed-clean.co.uk
WhatsApp: +44 7516 838759
Supervisory authority: Information Commissioner's Office, ico.org.uk