Last updated: 10 November 2026.
Who we are
XtraFreshhh Cleaning Services Ltd (“XtraFreshhh”, “we”) is responsible for your personal information. We are registered in England and Wales, company number 13610511. Our registered office is shown in the company details at the bottom of this page. Contact [email protected] or 07742 434718.
What we collect and why
When you ask for a price or a call back, we collect your name, contact details, postcode, property details, the clean you want and any notes you send. We use them to respond, prepare a price and, if you go ahead, arrange and manage cleaning. For an individual customer, our basis is taking steps you request before a contract and performing that contract. For an enquiry made for a company or another person, our basis is our legitimate interest in responding and arranging the service.
When you book, we collect the cleaning address, agreed access arrangements, relevant pet or product preferences, visit details, prices and payments. We use these to provide and manage the service and keep required financial records. Our bases are contract for individual customers, legitimate interests for business contacts and managing legal claims, and legal obligation for required tax and accounting records. Arrange keys and access codes directly with our team, not through the website chat.
For card payments, we keep the amount, payment status and transaction reference so we can manage payments, refunds and our financial records. We do not receive or store your full card number or security code. Our bases are performing the contract for an individual customer, our legitimate interests in administering business bookings and resolving payment disputes, and legal obligation for required financial records.
If you agree, we may email you after a clean to ask for an honest Google review, at most once every 6 months. We apply the same rules whatever your experience. Leaving a review is your choice. We use your consent to send these emails. To stop them, reply to an email or contact us. This does not affect your bookings or service emails. The review link takes you directly to Google, which handles your visit and any review under its own privacy policy. We do not track email opens or which customers click the review link.
When you apply for work, we use your name, contact details, postcode, work interests, availability and application message to assess your application and contact you. Our basis is taking steps at your request before a work contract. We also carry out appropriate eligibility and recruitment checks. Before checks, we explain which checks are needed, what information we use, the legal basis and how long we keep it. Please do not send health information or criminal-record details through this form.
Ask XtraFreshhh uses AI. We collect the messages you send, the assistant’s replies and your name and email if you ask the team to reply. We use these to answer your questions, pass on an enquiry at your request, keep the service secure and review how well it works. Messages and recent chat history are sent to Cloudflare Workers AI to generate replies. Our basis is our legitimate interest in helping visitors and operating a reliable service, or steps you request before your own booking contract where necessary. We do not use chats for marketing. Do not send key-safe codes, payment details or sensitive personal information.
When you report a broken link, we use the page address and any note you send to investigate and maintain the website. Query strings are removed from the page address. Please do not include personal information in your note. Our basis is our legitimate interest in keeping the website working.
To protect the website, we use Cloudflare Turnstile and other security checks. These process technical information such as your IP address and browser details to help prevent spam and abuse. Our own rate-limit records use a keyed hash derived from the IP address rather than storing the raw address in that record, and are deleted after 2 days. Our basis is our legitimate interest in keeping the website and forms secure.
We use Cloudflare Web Analytics to understand visits and website performance so we can improve the site. It does not use analytics cookies. We do not use it for advertising or to identify individual visitors. You can switch visitor statistics off using the link at the bottom of every page. Where personal information is processed, our basis is our legitimate interest in improving the website.
Who we share it with
We share relevant information with people and providers who need it to deliver and manage the service: our cleaners and office team, who see what they need to do the job; AP Studio, who builds and maintains the website and may see website records when fixing problems; Cloudflare for the website, security, statistics and AI assistant; Resend and Google Workspace for email; and Jobber and QuickBooks for bookings and financial records while we use them. If you contact us on WhatsApp, Meta/WhatsApp also handles information under its own terms. Some providers act for us and others have their own legal responsibilities. We may also share necessary information with professional advisers, insurers or public authorities where justified or required by law. We do not sell your personal information.
Stripe for card payments. We send Stripe your name, email address, payment amount and booking reference, and receive the payment status and transaction reference. You enter your card details directly on Stripe Checkout. Stripe also handles payment and technical information for purposes such as payment security, fraud prevention and legal compliance, as explained in its privacy notice: Stripe privacy notice (stripe.com/gb/privacy).
Where it is stored
The website’s main database is hosted in the EU. Providers may also process information in other countries, including the USA. We check that international transfers have an appropriate legal basis. This may be UK adequacy regulations covering the recipient, or approved contractual safeguards with the required protection assessment. Contact [email protected] for information about the safeguards used and how to obtain a copy.
How long we keep it
We keep information only as long as needed for its purpose. Enquiries that do not become bookings: up to 12 months after the enquiry closes. Unsuccessful applications: up to 6 months after the application or role closes; we ask separately before keeping an application for future opportunities. Chats: 180 days after the last message. Broken-link reports: 90 days after submission. Our rate-limit records: 2 days. We keep the date of a review request for 6 months after sending it so we do not ask again too soon. If you ask us to stop, we keep the minimum information needed to respect your choice. Required tax and accounting records: normally 6 years from the end of the financial year the records relate to, or longer where the law requires. We review other service and claims records separately, and remove access codes and unnecessary preferences when they are no longer needed.
Your rights
You can ask to access or correct your information, or ask for deletion, restriction or transfer where the law gives you those rights. You can object to processing based on legitimate interests. You can object to direct marketing at any time, and we will stop using your information for it. Contact [email protected]. We normally respond without undue delay and within one month; where the law allows extra time or clarification, we explain this. If we rely on your consent, you can withdraw it at any time without affecting earlier lawful use. To raise a data protection complaint, contact us by email, phone or post. We acknowledge it within 30 days, investigate without undue delay, keep you informed and explain the outcome. You can also complain to the ICO at ico.org.uk or 0303 123 1113.
Automated answers
The AI assistant gives general information and can make mistakes. It does not decide whether to accept your booking or application and cannot confirm a booking. You can ask to speak to our team.
Changes
We’ll update this notice when how we use information changes, and show the date at the top.
