Last updated: 16 March 2026
Website: cleaningbusinesstoolkit.com
This privacy policy explains how Cleaning Business Toolkit ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit our website, purchase our products, or interact with us. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Cleaning Business Toolkit is operated by Atlon Professional Services Ltd, a company registered in England and Wales.
Registered address: Bartle House, 9 Oxford Court, Manchester, M2 3WQ
Company number: 16441639
Email: [email protected]
For the purposes of data protection law, we are the "data controller" of the personal data you provide to us.
We collect the following categories of personal data:
When you make a purchase, we collect your full name and billing address to process your order, identify your account, and comply with tax obligations. We collect your email address at checkout, when you sign up for our newsletter, or when you send us an enquiry, so we can deliver your purchase, send receipts, and communicate with you. We also collect payment information at checkout to process your transaction; this is handled by Stripe and we do not store your card details. If you contact us with a question or support request, we collect the content of your messages or enquiries so we can respond to you.
When you visit our website, we automatically collect certain technical data. This includes your IP address, which we use for security, fraud prevention, and analytics. We collect your browser type and version and device type to display our site correctly and optimise your experience. We record the pages you visit and time spent on our site to understand how visitors use it and to make improvements. We also note the referring website that directed you to us, so we can understand how visitors find us. Our site also uses cookies and similar technologies, which are explained in Section 8 below.
We use your personal data for specific purposes, each supported by a lawful basis under UK GDPR.
We process your order and deliver your digital product, and send your purchase receipt and order confirmation, on the basis of performance of a contract with you (Article 6(1)(b)).
We respond to your enquiries or support requests on the basis of our legitimate interests in providing good customer service (Article 6(1)(f)).
We send marketing emails only with your consent (Article 6(1)(a)). You can withdraw this consent at any time.
We prevent fraud and secure our website, and analyse website usage to improve our service, on the basis of our legitimate interests in maintaining a safe and effective platform (Article 6(1)(f)).
We comply with legal obligations such as tax record-keeping on the basis of legal obligation (Article 6(1)(c)).
We will never sell, rent, or trade your personal data to third parties for their marketing purposes.
We share your personal data only with the following categories of third parties, and only to the extent necessary.
Stripe (payment processor) receives your name, email, billing address, and payment details to process your payment securely. Stripe is PCI DSS Level 1 certified. Privacy policy: stripe.com/privacy
GoHighLevel (website hosting and email service provider) processes your name, email address, IP address, and browsing data to host our website and send transactional and marketing emails on our behalf. Privacy policy: gohighlevel.com/privacy-policy
Google Analytics (analytics provider) receives anonymised browsing data to help us understand how visitors use our site. Privacy policy: policies.google.com/privacy
All third-party processors are contractually required to handle your data in accordance with UK GDPR. Where data is transferred outside the UK or EEA, adequate safeguards are in place (such as Standard Contractual Clauses or UK adequacy decisions).
We retain your personal data only for as long as necessary for the purposes set out in this policy.
Purchase records, including your name, email, and transaction details, are kept for 6 years from the purchase date to comply with HMRC tax record-keeping requirements.
Marketing email subscriber data is kept until you unsubscribe. Once you opt out, your data is removed promptly.
Support enquiries are retained for 2 years from your last contact, so we can maintain context for any follow-up queries.
Website analytics data is retained for 26 months, which is the standard analytics retention period.
Cookies have varying retention periods depending on their type; see Section 8 for details.
After these periods, we securely delete or anonymise your data.
Under UK GDPR, you have the following rights:
Right of access — Request a copy of the personal data we hold about you.
Right to rectification — Ask us to correct inaccurate or incomplete data.
Right to erasure — Ask us to delete your personal data (subject to legal retention requirements).
Right to restrict processing — Ask us to limit how we use your data.
Right to data portability — Request your data in a structured, machine-readable format.
Right to object — Object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent — Where processing is based on consent, withdraw it at any time.
To exercise any of these rights, email us at [email protected]. We will respond within one month.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113
We take reasonable technical and organisational measures to protect your personal data, including:
SSL/TLS encryption on all pages of our website.
Secure payment processing through Stripe, a PCI DSS Level 1 certified provider. We never see or store your full card details.
Access controls limiting who within our organisation can access personal data.
Regular reviews of our data handling practices.
No method of transmission over the internet is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security.
Our website uses cookies and similar technologies. A cookie is a small text file placed on your device when you visit our site.
Strictly necessary cookies are required for the website to function properly, including features such as your shopping cart and checkout process. These are session or short-term cookies and cannot be disabled.
Analytics cookies help us understand how visitors use our site. We use Google Analytics to track page views and visitor behaviour. These cookies may last up to 26 months.
Marketing cookies, if applicable, track the effectiveness of our advertising. Their duration varies depending on the advertising platform.
You can control cookies through your browser settings. Most browsers allow you to:
View what cookies are stored and delete them individually.
Block third-party cookies.
Block cookies from specific sites.
Block all cookies.
Delete all cookies when you close your browser.
Note that blocking certain cookies may affect your experience on our site (e.g., you may not be able to complete a purchase).
When you first visit our site, we will ask for your consent before setting non-essential cookies via our cookie consent banner.
We will only send you marketing emails if you have given us your explicit consent (e.g., by ticking an opt-in box or signing up for our newsletter).
Every marketing email includes an unsubscribe link. You can opt out at any time. We will process your unsubscribe request promptly.
Opting out of marketing does not affect transactional communications (e.g., purchase receipts, product updates related to your order).
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of any website you visit.
Our products and services are designed for adults operating or planning to operate a commercial cleaning business. We do not knowingly collect data from anyone under the age of 18. If we become aware that we have collected data from a person under 18, we will delete it promptly.
We may update this privacy policy from time to time. When we make significant changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by email.
We encourage you to review this policy periodically.
If you have any questions about this privacy policy or how we handle your data, contact us:
Email: [email protected]
Address: Bartle House, 9 Oxford Court, Manchester, M2 3WQ
Website: cleaningbusinesstoolkit.com