Privacy Policy
This policy explains how we collect, use, store, and protect your personal data when you use this website or engage our services. It applies under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
The data controller is The Window Cleaning Company, part of the C & S Group, operated by Tony Wright.
Address: 67 Osmund Drive, Goldings, Northampton, NN3 8XB
Email: [email protected]
Phone: 0800 999 8594
2. What Personal Data We Collect
We collect personal data that you provide directly when you fill in our contact form, quote calculator, or email us. This includes your name, email address, phone number, street address, and details about the work you need (such as the number of windows or access instructions).
We also collect data automatically when you browse this website, through cookies and similar technologies. This includes your IP address, browser type, pages visited, and time spent on the site. See section 7 for full details on cookies.
3. Lawful Basis for Processing
Under Article 6 of the UK GDPR, we process your data on the following lawful bases:
Consent (Article 6(1)(a)): When you tick the consent checkbox on our forms, you give us permission to contact you about your enquiry and to send occasional service updates. You can withdraw this consent at any time by emailing us.
Contract (Article 6(1)(b)): When you book a service, we need your name, address, and contact details to carry out the work you've requested.
Legitimate interests (Article 6(1)(f)): We use analytics data to improve our website and understand how visitors find us. We have assessed that this does not override your rights or freedoms.
4. How We Use Your Data
We use your personal data to respond to quote requests, schedule and carry out cleaning work, send you payment links and invoices, follow up after completed jobs, improve our website based on usage patterns, and comply with legal obligations (such as tax records).
We do not sell, rent, or share your personal data with third parties for their marketing purposes.
5. Who We Share Data With
We share your data only with processors who help us run our business:
Brevo (formerly Sendinblue) processes form submissions and email communications on our behalf. Their servers are in the EU and they comply with GDPR. See Brevo's privacy policy.
Google processes analytics data through Google Analytics and Google Tag Manager. We use anonymised IP settings. See Google's privacy policy.
Cloudflare provides security and performance services for this website. They process connection data (IP addresses, request headers) as part of their CDN service. See Cloudflare's privacy policy.
We do not transfer your data outside the UK or EEA except through these processors, all of whom have appropriate safeguards in place (adequacy decisions or standard contractual clauses).
6. How Long We Keep Your Data
Quote enquiries that don't lead to a booking: deleted after 12 months.
Customer records (name, address, service history): kept for the duration of the customer relationship plus 6 years to comply with HMRC record-keeping requirements.
Analytics data: retained in Google Analytics for 14 months, then automatically deleted.
Email marketing data: kept until you unsubscribe, at which point your data is removed from our mailing list within 30 days.
7. Cookies
Cookies are small text files stored on your device when you visit a website. We use the following types:
Strictly necessary cookies: These are required for the website to function (for example, remembering your cookie preferences). They do not require consent under UK GDPR.
Analytics cookies (Google Analytics): These help us understand how visitors use the site, which pages are visited most, and where traffic comes from. They collect anonymised data. We only set these cookies after you give consent through our cookie popup.
Advertising cookies (Google Ads): These track conversions from our Google Ads campaigns to measure whether our advertising is working. We only set these cookies after you give consent.
You can change your cookie preferences at any time by clearing your browser cookies and refreshing the page, which will show the consent popup again. You can also disable cookies entirely in your browser settings.
8. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
Right of access (Article 15): You can request a copy of all personal data we hold about you.
Right to rectification (Article 16): You can ask us to correct inaccurate data.
Right to erasure (Article 17): You can ask us to delete your data, unless we have a legal obligation to retain it.
Right to restrict processing (Article 18): You can ask us to limit how we use your data while a concern is being resolved.
Right to data portability (Article 20): You can request your data in a structured, machine-readable format.
Right to object (Article 21): You can object to processing based on legitimate interests, and we will stop unless we have compelling grounds to continue.
Right to withdraw consent: Where we rely on consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
9. Complaints
If you believe we have handled your data incorrectly, you can complain to us first at [email protected]. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113
10. Children
Our services are not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Security
We protect your data using HTTPS encryption on all pages, Cloudflare's security layer (DDoS protection, web application firewall), restricted access to personal data (only Tony Wright and authorised staff), and secure third-party processors with their own security certifications.
12. Changes to This Policy
We may update this policy when our practices change or when the law requires it. The current version will always be on this page. We will not reduce your rights under this policy without your explicit consent.
Last updated: June 2026