Privacy Policy

Who we are

This site is operated by ProClean Manchester ("we", "us"). We are the controller of personal data collected through this website. For any privacy question, contact us using the details in the footer.

What we collect and why

• Enquiry details (name, email, phone, postcode, service required and any message) — submitted through our quote form so we can respond to you.
• Data-request details (name, email, request type and details) — when you use our data request form.
• Technical anti-abuse signals (a hashed form of your IP address, a proof-of-work token) — used to block spam and abusive submissions. We do not use these for marketing.
• Analytics data (pages viewed, approximate location, device and browser type, referring site) — collected via Google Analytics 4 only if you consent to analytics cookies. IP anonymisation is enabled and Google advertising features are switched off.
• First-party visit counts (page path, referring site, country/region reported by our hosting network, device, browser and operating system) — recorded on our own server without cookies. Visits are counted using a daily-rotating, salted one-way code derived from your IP address and browser, which cannot be used to identify you or follow you across days or websites. Our visit statistics never use your raw IP address.
• IP address (security log only) — your IP address is stored alongside the visit record for a maximum of 7 days, purely to detect and block malicious traffic, spam and abuse of our forms. It is then erased automatically by a nightly job. We do not use raw IP addresses for analytics, statistics, profiling, advertising or marketing, we do not sell or share them, and access is limited to our site administrators. Our lawful basis is legitimate interests (protecting our website and our customers); you can object using the contact details below.
• Manual traffic block records — if an IP address, country, bot or user-agent pattern is manually blocked, the raw value is stored in a block list so the block can take effect. These records are kept for a maximum of 90 days, then automatically deleted. You can request deletion earlier using the contact details below.

Lawful bases (UK GDPR Art. 6)

• Consent — where you tick the box on the quote form, and for analytics cookies.
• Legitimate interests — for anti-abuse and security logging (including the short-lived IP security log described above), and for responding to enquiries you have initiated.
• Legal obligation — for record-keeping we are legally required to maintain.

How long we keep it

• Quote enquiries and call requests: up to 24 months from your last contact with us. After that, an automated nightly job permanently redacts your name, email, phone, address, postcode and message, leaving only anonymous statistics.
• Incomplete quote forms: automatically deleted after 24 months.
• IP addresses in our security log: 7 days, then automatically erased.
• Cookieless visit records (excluding IP): retained as aggregated statistics; the one-way visitor code rotates daily and cannot be linked back to you.
• Anti-abuse / traffic block records (including raw IP addresses added to manual block rules): up to 90 days, then automatically deleted. You can also delete them manually at any time from the admin dashboard.
• Analytics data: retained by Google for up to 14 months.
• Records of data requests: kept as required for our legal compliance.

Who processes your data

We use trusted processors to run this site: our hosting and database provider (Lovable Cloud / Supabase, EU region), our transactional email provider, and — where you have consented to analytics cookies — Google Ireland Limited for Google Analytics. Processors act only on our instructions and under contractual data-protection terms. Google may transfer analytics data outside the UK/EEA under the UK Addendum and EU Standard Contractual Clauses.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct data that is inaccurate.
• Ask us to erase your data ("right to be forgotten").
• Object to, or restrict, certain processing.
• Ask for a portable copy of the data you have provided.
• Complain to the UK Information Commissioner's Office at ico.org.uk.

How to exercise your rights

Use our data request form. We will respond within one calendar month. We may ask for information to verify your identity before actioning erasure requests. Your access and erasure rights also cover our security and visit logs, including any IP address still held within the 7-day window.

Cookies

See our Cookie Policy for details of the cookies and local storage we use.

Changes

We may update this policy occasionally. Material changes will be notified on this page.