Legal

Privacy Policy

Last updated: 7 October 2026

Jump to a section

This policy explains how Staff2Clean (“S2C”, “we”) collects and uses personal data, in line with UK GDPR and the Data Protection Act 2018.

Who is responsible for your data

The data controller is MYBELLON GROUP LTD, a company registered in England and Wales under company number 17432115, which trades as Staff2Clean. In plain terms: Staff2Clean is a trading name of MYBELLON GROUP LTD, a company registered in England and Wales under company number 17432115. Registered office address to be confirmed. If you have a question about your data, or want to exercise any of the rights below, the contact details are at the end of this page.

What we collect

Account details: name, email, phone number, password (hashed, never stored in plain text).
Property details: address, postcode, access notes, property size.
Access details you choose to give us so a cleaner can get in — for example a key-safe location and its code. These are held for the bookings they apply to. Our team can see them, and your cleaner is told what they need to get in.
If you choose to add them: up to four photographs of your door, entrance or key spot, each with a label and an optional short caption — see “Photos of your door or key spot” below.
Booking and payment history (payment card details are handled entirely by Stripe — we never see or store full card numbers).
Messages sent to our team via account messaging or the contact form.
Photographs taken inside your home by the cleaner as a record of the work — see “Photographs of your clean” below.
Conversations with our website assistant (the “Chat to us” window), including anything you type or say into it, and a recording of what it quoted you.
For cleaner applicants: application details, references, right-to-work documents, and interview/vetting notes.
Basic analytics data (pages visited, general location, device type) via our analytics tools.

Why we collect it

To provide the booking service you request and manage your account.
To help the cleaner find your door and get in, if you add photos of it (see “Photos of your door or key spot” below).
To process payments securely via Stripe.
To communicate booking confirmations, reminders, and updates.
To assess cleaner applications and carry out legally required right-to-work checks.
To improve the site and measure how our booking funnel performs.

Photos of your door or key spot

You can add up to four photos for each home, to show where the door or the key spot is, and give each a short label. You can do this while you book, even if you have no account yet, or later from your account. It is optional. If you are not signed in when you add one, we hold it until your booking is made and then attach it to the account your booking creates; you see it after you sign in with the email you booked with. When you leave the key somewhere new, add a new photo and remove the old one. Please keep people and vehicle number plates out of the picture, and do not photograph a code, an alarm panel or a keypad. A photo of the outside of a home can still show a neighbour or a street, which is why we ask.

What we do to the file. Your browser saves the picture again as a plain JPEG, which removes the location and camera details from it, and we check the file again before we keep it. We do not claim more than that.
Where it is kept. In private storage with no public link. When you or our team open it, we create a short-lived link that stops working after a few minutes.
Who can see it. You, and our team when we are handling that booking or a complaint. Each time our team opens it, we record that. Your cleaner: we may give your cleaner a private link for a visit that shows how to get in (your access notes and these photos). The link is switched on shortly before the visit and stops working shortly after it ends; our team can switch it off, or re-open it for a limited time if a visit overruns. Each time it is opened, we count it and our team can see that. We ask your cleaner not to save or share it. We cannot stop someone photographing a screen, so we do not promise that. If your cleaner is self-employed and deals with you directly, the link may also show your address, your first name and your phone number, so you can be reached.
Our legal basis. Performance of a contract (UK GDPR Art. 6(1)(b)): it helps your cleaner reach you for the booking you made. We use it for nothing else.
How long we keep it. While your account is open, and for up to 12 months after your last clean at that address (6 months after you add it, if we have never cleaned there). A photo that was added during a booking and never attached is deleted within a day. We delete a photo straight away when you remove it, remove the home it belongs to, or close your account. You can remove a photo yourself at any time from your account. The records of each private link for your cleaner are kept for 30 days after the link ends, then deleted.

Photographs of your clean

Where a visit includes proof of work, the cleaner takes photographs of the areas they cleaned — typically before and after, and a photograph of anything they could not do or found damaged. These are pictures of the inside of your home, so we treat them as the most sensitive thing we hold about you.

Where they are kept. In private storage that is not reachable from the open internet. There is no public link. When you open a visit in your account we create a one-off link that works for five minutes and then stops working, so a URL copied out of a browser history or pasted into a chat is already dead.
Who can see them. You, the cleaner who took them, and our team when we are answering a query or a complaint about that visit. Nobody else, and they are never used for marketing, a website, or a social post.
Our legal basis. Performance of a contract (UK GDPR Art. 6(1)(b)) — it is the record that the work you paid for was done — and our legitimate interest in being able to resolve a dispute about a visit.
If you would rather we did not. Tell us and we will turn photographs off for your property, or delete the ones already taken where no complaint or claim is open.

Our website assistant (AI chat and voice)

The “Chat to us” window on our site is an automated assistant, not a member of staff. We tell you this in the chat window itself, and you can ask to be put through to a person at any point.

What it processes. The messages you send, the assistant's replies, and the details you give it about your property (bedrooms, bathrooms, postcode, what you need cleaned) so it can work out a price. If you choose to give a name, phone number or email so we can call you back or send you a booking link, we process those too.
Who processes it. Conversations are sent to OpenAI, which runs the language model on our behalf as a data processor under a data processing agreement. OpenAI does not use data sent through its API to train its models. Processing may take place outside the UK/EEA under Standard Contractual Clauses.
Voice. If you use the microphone button, your recording is sent to OpenAI to be converted into text, and then discarded. We never store the audio — only the text it produced, which is then treated like any other chat message. The microphone is only ever active while you are holding a recording open, and your browser shows you when it is. Spoken replies are produced by your own device's built-in speech function; no audio of our replies leaves your device.
Our legal basis. Consent (UK GDPR Art. 6(1)(a)) for holding the conversation, which you give by starting a chat and can withdraw by asking us to delete it; and performance of a contract (Art. 6(1)(b)) where the conversation leads to a booking.
How long we keep it. Chat transcripts are kept for 12 months and then automatically deleted. We keep them this long so we can answer follow-up questions, resolve any dispute about what you were quoted, and improve the answers the assistant gives. Where a conversation is passed to a human or becomes a booking, the resulting enquiry or booking record is kept under the retention rules described below.
No automated decisions about you. The assistant does not make any decision that has a legal or similarly significant effect on you. Prices it quotes are calculated by our standard pricing rules — the same ones used on our pricing page — not generated by the model, and payment is always taken through our normal checkout.
Please don't send sensitive information. Never type card numbers, bank details or passwords into the chat. We automatically strip anything that looks like a payment card before a conversation is stored, but the assistant will never ask you for these and you should never provide them.

Phone calls (Angela, our AI phone assistant)

When you call 07723 453 777, or we call you, the call is answered by Angela, an automated assistant, not a member of staff. She says so as soon as she answers, and tells you the call is recorded before you have said anything. You can ask for a person at any point.

What we collect. Your phone number, a recording of the call, a written transcript of it, the language it was in, and anything you tell Angela: for example your postcode, what you need cleaned, your name and email so we can send you a booking link, or, if you are asking about work, your area, experience and the days you could work.
Who processes it. Twilio carries the call and stores the recording. Twilio uses Deepgram to turn what you say into text and ElevenLabs to speak Angela's replies. OpenAI writes her replies from the transcript. Each acts on our behalf as a data processor, and the same ones are used whichever language the call is in. Processing may take place outside the UK/EEA under Standard Contractual Clauses.
Other languages. If you speak to Angela in Ukrainian or Russian, she may answer in that language. We note which language the call was in so the right person can follow it up. Texts and emails we send afterwards are in English.
Why, and our legal basis. Our legitimate interest (UK GDPR Art. 6(1)(f)) in answering calls, keeping an accurate record of what was said, settling any disagreement about it, and improving how Angela and our team answer; and steps before a contract (Art. 6(1)(b)) when you ask for a booking or ask about working with us.
How long we keep it. Call recordings and transcripts are deleted automatically after 30 days. If the call becomes a booking or an application, that record is kept under the rules below.
No card details by phone. Angela will never ask for a card number, and we never take payment on a call. If you want to book, we text you a secure payment link.

We share data with service providers who help us run S2C: Stripe (payments), OpenAI (the website assistant and the phone assistant — see the sections above), Twilio, Deepgram and ElevenLabs (phone calls), Supabase (database and authentication hosting), and email/notification providers. We share the minimum information needed with the cleaner assigned to your booking (name, address, access notes, special instructions). We do not sell your personal data.

Where your data is stored

Data is stored with providers operating in the UK/EU where possible. Some service providers may process data outside the UK/EEA under appropriate safeguards (such as Standard Contractual Clauses).

How long we keep it

While your account is open we keep what the service needs to work. When you close it, or ask us to erase your details, this is what stays and for how long — the same list you are shown in your account at the moment you ask, because the two must not disagree:

Invoices, payments and refunds — 6 years after the end of the tax year they fall in.
Completed visits, and which cleaner did them — 6 years.
Your name, address and phone number — Erased on request, except where a kept invoice or visit still needs them.
Messages you sent us, and photos in them — Erased on request, unless a complaint or a claim is open.
Marketing consent, and any opt-out — Kept indefinitely, as a suppression record.

Right-to-work records for cleaner applicants and employees are retained for the duration of employment plus two years, as required by law. Chat transcripts are kept for 12 months and then automatically deleted; audio from the website microphone is never stored. Phone call recordings and transcripts are deleted automatically after 30 days.

Your rights

You can request access to, correction of, or deletion of your personal data, and can object to or restrict certain processing. Contact us using the details below to exercise any of these rights. We answer within one month.

Closing your account

If you have an account, sign in and open Your details → Closing your account. You can ask us to close it and, if you want, to erase your personal details at the same time. The screen shows you exactly what we are able to erase and what we have to keep, using the list above. If you booked as a guest and never created an account, email us and we will do the same thing by hand.

Cookies

See our Cookie Policy for details on the cookies and similar technologies we use.

Contact

For any privacy questions or requests, email hello@staff2clean.co.uk or call 07723 453 777. Write to us at MYBELLON GROUP LTD (company number 17432115), and please put “Data request” in the subject line so it reaches the right person.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) — ico.org.uk, or 0303 123 1113. We would rather you came to us first, but you do not have to.