Privacy Policy

Purity Surface Care is an independent, owner-operated window and exterior surface cleaning business working across North East England. For the purposes of UK data protection law we are the data controller for the information described here: we decide what is collected and what it is used for, and we are responsible for looking after it.

We handle your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains in plain English what we collect, why, who helps us look after it and what you can ask us to do about it.

We ask for what we need to quote for your property, turn up at the right door and keep your account straight — no more than that. Almost all of it comes directly from you, through the online quote form, messages and calls, email, a doorstep conversation, or simply from cleaning your property each cycle.

• •Your contact details — title, name, phone number and email address, so we know whose account it is and can send quotes, confirmations and visit messages.
• •Your property address — address lines, town, county and postcode. The postcode is also how we check the property falls inside the areas our round covers.
• •Property and service details — property type, bedrooms, rear access, your chosen frequency and any add-ons. These are what your price is calculated from.
• •Service history and job notes — dates cleaned, what was cleaned, the price charged, and any access or instruction notes you give us (“the side gate is bolted”, “dog in the back garden”). Notes are working instructions, not opinions about you.
• •Photographs you send us — for example an area you would like looked at again. Used only to get the work right, never for marketing unless you tell us we may.
• •Payment records — your Direct Debit mandate reference, the amounts requested and whether each one cleared. We never see or store your bank details; those stay with our payment provider (see section 4).
• •How you found us — one optional question on the quote form. It changes nothing about your price, and skipping it is a perfectly good answer.
• •Basic technical data — our hosting and anti-spam tools process standard data such as your IP address to keep the site available and block automated submissions.

Two things worth being clear about. When you use the postcode lookup on the quote form, only the postcode is sent to the lookup provider — never your name, phone number or email — and you can always type your address in by hand instead. And our leaflets carry no tracking code and no unique landing page; if you respond to one, we simply recognise the postcode as one we leafleted.

We do not collect special category data such as health, religion or ethnicity, and we do not ask for it. If you choose to tell us something sensitive in a note — a resident who needs a knock before we start, for instance — we use it only to deliver the service safely and considerately.

UK GDPR requires a valid reason — a “lawful basis” — for every use we make of your information. Ours are:

Where we rely on legitimate interests we have considered whether our interest is fair to you, and we use the minimum information needed to achieve it.

No automated decisions about you. Our quote calculator does arithmetic on the answers you gave it — that is not profiling. No automated decision is made that has a legal or similarly significant effect on you, and every job is booked in by a person.

We never sell, rent, trade or distribute your personal information to third parties for marketing purposes. Your details are not a product, and no data broker, lead-generation network or advertiser has ever received them from us.

What we do use is a small number of essential operational platforms and regulated payment providers. Each acts as our data processor: they may only handle your information on our written instructions, under a contract meeting Article 28 of UK GDPR, and never for their own purposes.

Beyond those processors we disclose your information only where the law requires it — to HMRC, a regulator, our insurer in the event of a claim, or a valid court order — or, if we needed advice on a dispute, the minimum necessary to a professional adviser. When payment is collected, and the fact that we take no cash, are matters for our Terms & Conditions.

Transfers outside the UK. Some providers store data abroad. Where they do, we use only providers that protect your information to the standard UK law requires — through a UK adequacy decision, the UK International Data Transfer Agreement, or the UK Extension to the EU–US Data Privacy Framework. Ask us and we will tell you which safeguard applies.

This website sets no cookies of its own. We run no analytics, no advertising or remarketing tags and no visitor tracking of any kind — no Google Analytics, no Meta Pixel, nothing that builds a profile of you or follows you around other websites. Nothing about your visit is stored in your browser between visits.

One thing does reach your browser from another company, and only one:

The typefaces this site is set in used to be fetched from Google Fonts, which meant your IP address reached Google simply for reading a page. They are now served from this website itself, so nothing about a visit to any page here is sent anywhere at all unless you reach that last step of the quote form.

This is why you do not see a cookie banner. UK cookie rules — regulation 6 of the Privacy and Electronic Communications Regulations 2003 — require your consent before anything is stored on your device unless it is strictly necessary. The reCAPTCHA cookie exists solely to protect the quote form from fraudulent and automated submissions, which is a strictly necessary security purpose, and it is only ever set for somebody who has chosen to fill the form in. There is genuinely nothing optional here to accept or refuse, so rather than interrupt you with a banner whose only honest answer is “OK”, we tell you about it here.

You can block or delete cookies at any time in your browser settings, and browsing this site is entirely unaffected by doing so. The one thing that does depend on them is the final step of the quote form: the spam check has to load for a request to be submitted at all, so with cookies from google.com blocked the form cannot be sent. Allowing them for that step — or unblocking them briefly while you submit — is all that is needed.

If we ever wanted to add analytics or any other non-essential cookie, we would ask for your consent first, with a real choice to say no, and this section would say so before anything was set.

We are a small business and our security arrangements are correspondingly simple and strict. The site is served over encrypted HTTPS, so what you type into the quote form is encrypted in transit. Customer records live in reputable, access-controlled software rather than loose spreadsheets, behind strong unique passwords and two-factor authentication wherever it is offered. Business devices are locked, encrypted and kept up to date. Access is limited to the owner and, where strictly necessary, a nominated operative, on a need-to-know basis. We store no card or bank account details at all. Paper round sheets, where used, carry only the address and notes needed for the day and are destroyed securely once entered.

No system can be guaranteed completely secure, but if a breach ever occurred that was likely to risk your rights and freedoms, we would report it to the Information Commissioner's Office within 72 hours of becoming aware of it, and tell you directly and without delay where the risk to you was high.

Retention. We keep information only while there is a good reason to, then delete or anonymise it securely:

The six-year figures are not us hanging on to your details for the sake of it — they are the periods required for tax records and for the time limit on contract claims.

Under UK GDPR you have the rights below. They are free to use, and using one will never affect the service you receive from us.

• •To be informed and to see — to know what we do with your information, and to ask for a copy of what we hold (a “subject access request”).
• •To correct and to complete — a wrong house number or an old mobile number; tell us and we will fix it.
• •To erase or restrict — to have information deleted where there is no longer a good reason to keep it, or its use paused while a query is sorted out.
• •To take it with you — to receive what you gave us in a common machine-readable format, or have it sent to another provider.
• •To object, and to withdraw consent — to object to anything we do on the basis of legitimate interests, to stop direct marketing outright, and to withdraw any consent you gave without affecting what was done beforehand.

How to make a request. Email info@puritysurfacecare.com and tell us what you would like. We may need to confirm details we already hold, so that your information is not handed to somebody else, and we will respond within one calendar month — or tell you why if an unusually complex request needs longer. If you ask us to delete everything while you are still a customer we will have to close your account, and we must keep invoice and payment records for the six years HMRC requires; we will delete the rest and tell you exactly what was kept and why.

If you are unhappy with how we have handled your information, please tell us first — we would much rather put it right. You can also complain to the Information Commissioner's Office at any time, at no cost, without our permission and without coming to us first.

We update this policy whenever our services, our software or the law changes. The current version always lives at this address and the last updated date tells you when it last moved; minor wording changes take effect as soon as they are published. If we make a change that significantly affects how we use your information — a new purpose, a new lawful basis, or a materially different set of recipients — we will contact existing customers directly by email or WhatsApp to explain it, rather than leaving you to notice it for yourself.