1. Who is responsible for your data

The legal operator and data controller is CONFIGURATION REQUIRED: LEGAL_OPERATOR_NAME — founder confirmation required before deployment, trading as The Mopsters.

This notice does not represent The Mopsters as a registered limited company and does not identify any other business as the operator unless that status has been confirmed in the legal configuration.

Privacy enquiries: luke@themopsters.co.uk.

Telephone: +44 7842 508362.

Postal contact: CONFIGURATION REQUIRED: LEGAL_POSTAL_ADDRESS — legal pages only.

2. Information we collect

When you send an enquiry, we collect your name, email address, an optional telephone number, the service category you chose, location and timing information, the answers used to build THE JOB, and any notes you add.

For security, spam control and duplicate prevention, the submission service also records a one-way salted hash derived from the requesting IP address, a unique submission key, timestamps, delivery status and an enquiry reference. The raw IP address is not written into the enquiry record by this application, although the hosting provider may process network logs.

Before submission, ACTIVE SITE keeps the working job and contact details in your browser's session storage so the journey can continue between pages. That browser copy is not sent to us until you choose to submit, and can be removed by clearing site data or closing the browser session.

Cleaner applications are collected through an embedded Google Form. Google receives the information an applicant enters into that form and may also process device, browser and network information needed to provide and secure it. The recruitment form is separate from the customer enquiry system.

CONFIGURATION REQUIRED: Founder confirmation required: verify the final Google Form questions, any file uploads, and who can access its responses.

3. Why we use it

To receive, assess and respond to cleaning enquiries.
To check likely service coverage, scope, timing and availability.
To keep an operational record of the enquiry and subsequent handling.
To prevent abuse, spam and accidental duplicate submissions.
To review cleaner and cleaning-team applications, carry out proportionate screening, and contact applicants.
To comply with legal obligations and establish or defend legal claims where necessary.

For customer enquiries, we generally rely on taking steps at your request before entering a contract and on our legitimate interests in operating, securing and improving the enquiry process. If a booking is later agreed, some information may also be needed to perform the contract and meet legal obligations. For recruitment, we generally rely on legitimate interests in assessing applications and, where applicable, taking steps before entering a working relationship. Sending an enquiry does not itself create a booking or contract, and applying does not guarantee acceptance or work.

4. Processors and disclosures

Supabase stores customer enquiry records. Resend sends the internal business notification containing the submitted job brief and uses the customer's email address as Reply-To. Google provides the applicant-loaded recruitment form and stores its responses for the business. CONFIGURATION REQUIRED: HOSTING_PROVIDER_NAME These providers process data under their own service terms and privacy arrangements.

We do not sell enquiry data. Data may be disclosed to people handling the relevant enquiry or application, professional advisers, competent authorities, or service providers where reasonably necessary and legally permitted.

Some providers or their subprocessors may process data outside the UK. Before deployment, the operator must verify the relevant processing locations and ensure that any restricted transfer is covered by UK adequacy regulations or another permitted safeguard.

CONFIGURATION REQUIRED: Founder review required: provider agreements, processing locations and applicable international-transfer safeguards.

5. Retention and security

Access to the enquiry table is restricted from public browser roles and the service credentials remain server-side. Data is sent over HTTPS in production.

The proposed retention schedule is:

Unconverted enquiries: review and delete or anonymise 12 months after the last meaningful contact, unless there is a justified reason to keep them longer.
Completed-job and transactional records: generally six years, subject to the particular legal, tax, accounting, contractual or dispute requirements that apply.
Unsuccessful cleaner applications: six months after the decision, unless a longer period is justified and communicated.
Approved cleaner records: during the working relationship, followed by record-specific retention based on legal, tax, safeguarding, contractual or dispute requirements.
Security logs: 90 days where the relevant system makes that period configurable, unless an incident or legal requirement justifies longer retention.

These periods are proposed review points and do not claim that deletion is automatic. The website and current enquiry database migration do not implement scheduled deletion. Until an approved operational process exists, retention reviews and deletion must be carried out manually or through separately configured provider controls.

CONFIGURATION REQUIRED: Founder approval and an operational retention, review and deletion process are required before treating this schedule as implemented.

6. Cookies and browser storage

The launch site does not deploy first-party analytics, advertising trackers or non-essential cookies. It uses browser session storage to record selections, preserve the working ACTIVE SITE brief and remember interface state during the session. This storage supports the requested enquiry experience and is not used for advertising or cross-site tracking.

The recruitment page does not load Google Forms until an applicant actively chooses to load it. Google may then use cookies or similar storage to deliver, secure and prevent abuse of the form. Applicants can instead open the form directly on Google.

No site-wide consent banner is currently shown because no non-exempt analytics, advertising or tracking technology is configured. This position must be reviewed before adding analytics, advertising, embedded third-party content that loads automatically, or any other non-essential storage or access technology.

7. Your rights

Depending on the circumstances and applicable UK data protection law, you may ask for access, correction, deletion, restriction or portability of your personal data, or object to certain processing. These rights are not absolute in every case. You may also raise a concern with us and complain to the UK Information Commissioner's Office. Contact us using the privacy email or telephone number above and include your enquiry reference where possible.