Privacy policy

Who we are

Comfort & Co Cleaning provides local cleaning services and operates the Comfort & Co website and private operations system. For privacy questions or requests, contact comfortandco.cleaning@gmail.com.

Information we collect

The information we process depends on how you interact with us. We collect information you provide directly, information created while delivering and administering services, and limited information received from connected business systems where those connections are enabled.

You are not generally under a legal obligation to give us enquiry or service information, but if you do not provide the contact, property or service details reasonably needed for a request, we may not be able to respond, quote, arrange or deliver the requested service.

• Contact and identity details such as name, email address and telephone number.
• Property, service, scheduling, access and enquiry information that you provide to arrange or discuss cleaning work.
• Communications, notes and operational records needed to manage enquiries, quotes, bookings, jobs, assignments and completion.
• QuickBooks Customer and Supplier/Vendor accounting identities and related Estimate, Invoice, Payment and Bill/Expense transaction references where the QuickBooks connection is enabled.
• Private-operations authentication and account information needed to restrict access to authorised users.
• Website technical and analytics information where optional analytics has been enabled and accepted through our cookie preferences control.

Where information comes from

Most customer and enquiry information comes directly from the person who contacts us or from an authorised person acting for a customer or property. Operational information can also be created by authorised Comfort & Co operators while administering services. Where a QuickBooks company is connected, accounting identity and transaction information comes from that authorised QuickBooks company through Intuit's API. Authentication, scheduling and file metadata may come from the connected Google services used for those functions.

How we use information and our lawful bases

Depending on the activity, we process personal information because it is necessary to take steps at your request or perform a contract, because we have a legitimate business interest in running, administering and protecting our services, because we have a legal obligation, or because you have given consent where consent is required. Where we rely on legitimate interests, those interests include responding to customers, organising and improving business operations, preventing misuse and protecting our systems and records, balanced against the rights and interests of the people concerned.

• To respond to enquiries and communicate about requested services.
• To plan, schedule, deliver and administer cleaning work and related customer service.
• To create, reconcile and administer quotes, invoices, supplier costs, payments and other accounting records through connected accounting services.
• To manage authorised subcontractors, assignments and operational scheduling.
• To secure, operate, diagnose and improve our website and private operations system.
• To meet legal, accounting, tax, security and record-keeping obligations that apply to the business.

Connected services and sharing

We use service providers to run the business and the systems that support it. We only share information that is reasonably required for the relevant service or business purpose.

Some providers operate internationally. Where personal information is processed outside the UK, the relevant provider and Comfort & Co use the transfer mechanisms and safeguards applicable to that service and the relevant data-protection law. You can contact us at comfortandco.cleaning@gmail.com for more information about the safeguards relevant to your information.

• Vercel for hosting and delivery of the website and private operations application.
• PostgreSQL/Supabase for private operational data storage.
• Google services where enabled for authentication, calendar scheduling, files or website analytics.
• Intuit QuickBooks for connected accounting records and accounting workflows.
• FormSubmit as a business-continuity route for website enquiries when the primary enquiry service is unavailable.
• Professional advisers, regulators or authorities where disclosure is required or reasonably necessary for legal, accounting, security or dispute purposes.

QuickBooks-connected data

When a QuickBooks company is connected, access is authorised through Intuit. We use the connection for Comfort & Co business administration and accounting workflows. QuickBooks accounting identities remain associated with the QuickBooks company in which they were created; we do not treat historical transactions from one company as if they were issued by another.

You can disconnect a QuickBooks connection through the authorised application controls once that production connection is enabled. Disconnecting stops future API access for that connection but does not automatically erase accounting records that must remain in QuickBooks or business records that Comfort & Co is required or entitled to retain.

Cookies and analytics

The public website may use optional Google Analytics or Google Tag Manager configuration to understand how the site is used. Optional analytics is activated only after you positively accept analytics through our cookie preferences control. The choice, consent-version and time of that choice are stored in your browser so the site can remember it.

You can withdraw or change that analytics choice at any time using Cookie settings in the website footer. Essential technologies needed to provide requested site or authenticated private-application functionality are not controlled by the optional analytics preference where they are necessary for that functionality.

How long we keep information

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, to provide and administer services, to maintain necessary business and accounting records, to resolve disputes, to protect our systems, or to meet legal obligations. The period therefore varies by record type and context. When information is no longer needed, it is deleted, anonymised or retained only where there is a continuing lawful reason to keep it.

Security

We use technical and organisational controls intended to protect information against unauthorised access, loss, misuse or alteration. Private operational systems are restricted to authorised users, provider credentials are kept server-side, and sensitive operational data is not intentionally published on the public website.

No internet or storage system can be guaranteed completely secure. If we identify a security incident affecting personal information, we will assess and respond to it in line with the circumstances and applicable obligations.

Automated decision-making

The current Comfort & Co operational system is not designed to make decisions about people based solely on automated processing where those decisions have legal or similarly significant effects. If that changes, this privacy policy and the relevant business process must be updated before such processing is relied on.

Your privacy rights

Depending on the circumstances and the lawful basis for processing, UK data-protection law may give you rights to ask for access to your personal information, correction, erasure, restriction or data portability, and to withdraw consent where processing is based on consent.

Where we rely on legitimate interests, you may also have a right to object to the processing. If you object, we will consider the particular processing, your circumstances and any reasons we have to continue it under applicable law.

To make a privacy request, email comfortandco.cleaning@gmail.com. We may need to verify your identity before acting on a request. You can also raise a concern with the UK Information Commissioner's Office if you are unhappy with how personal information has been handled.

Changes to this policy

We will update this policy when our processing, connected services or legal obligations materially change. The current version and its last-updated date are published on this page.