- Data Controller: Carly Litwin trading as The Cleaning Shortlist, 124 City Road, London, EC1V 2NX, United Kingdom.
- Privacy & Data Protection Contact: privacy@thecleaningshortlist.co.uk (general enquiries: hello@thecleaningshortlist.co.uk · support: support@thecleaningshortlist.co.uk).
- ICO Data Protection Registration: Tier 1 Data Protection Fee paid (24 October 2026) under sole trader Carly Litwin, 124 City Road, London, EC1V 2NX, United Kingdom — ICO Application Reference: C2068406.
- What we collect: Your name, work email address, company/trading name, UK service regions and postcodes, contract size and cleaning service preferences, subscription and billing status (processed by Stripe; we never see or store full payment card numbers), email delivery and engagement metadata, and support messages.
- Why & lawful basis (UK GDPR): (a) delivering your weekly shortlist, renewal radar alerts and account administration (performance of a contract, Art. 6(1)(b)); (b) sending requested free shortlists, bid checklists and B2B service updates (consent / legitimate interests, Art. 6(1)(a)/(f) and PECR); (c) maintaining accounting and tax records (legal obligation, Art. 6(1)(c)); and (d) improving tender classification and regional matching (legitimate interests, Art. 6(1)(f)).
- AI processing: Tender summaries, verdicts and support draft replies are generated with AI language models. We pass publicly available tender data and your non-identifying firm filter preferences (regions, contract size band, services, accreditations); we do not use your personal data to train third-party models or to make automated decisions with legal or similarly significant effects about you.
- Processors: Stripe (payments), Resend / Brevo (transactional and digest email delivery), Cloudflare (website hosting, DNS and security), Supabase / GitHub (database and scheduled pipeline automation), and AI API providers (for tender summarisation). Where processors handle data outside the UK, transfers rely on UK adequacy regulations or the UK International Data Transfer Agreement (IDTA) / UK Addendum.
- Retention: Account and profile data is retained while your subscription or free shortlist is active plus 12 months; invoices and payment records are retained for 6 years for HMRC compliance; unsubscribed leads who never become customers are deleted within 12 months.
- Your rights: Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, to request data portability, and to withdraw consent at any time. Contact privacy@thecleaningshortlist.co.uk to exercise any right. You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Operated by Carly Litwin trading as The Cleaning Shortlist, 124 City Road, London, EC1V 2NX, United Kingdom · ICO Ref: C2068406 · Contact: hello@thecleaningshortlist.co.uk / privacy@thecleaningshortlist.co.uk · Last updated: 24 October 2026.