Privacy Policy
Last updated: 28 May 2026
Squeegify (“we”) is a sole-trader business operated by Robin Oruman from the United Kingdom, and is the data controller for information collected through the marketing site, the widget, and the operator dashboard. This policy explains what we collect, why, who we share it with, and the rights you have under UK GDPR.
Data we collect
- Quote data. The address a customer enters into the widget, the answers they give, and the £ quote we generate. Retained for audit.
- Contact details. Name, email, phone number, and preferred booking date when a customer completes a quote.
- Operator account data. Email, name, company name, billing details, pricing rules, and widget configuration for the cleaning business operating the widget.
- Technical data. Hashed IP, user agent, and timestamp for rate limiting and abuse prevention. We do not store raw IP addresses.
- Terms acceptance. The UTC timestamp at which an operator ticked the “I agree to the Terms and Privacy notice” box on the signup form. Retained for the life of the account plus 6 years (limitation period) so we can evidence consent in any future dispute.
Cookies and data we do not collect
- Card numbers · payments are handled by Stripe, never touch our servers.
- Cookies beyond what is strictly necessary for login sessions (the
sb-*Supabase auth cookies and thegq_onboarded/gq_first_lead_celebratedonboarding-state cookies). - Behavioural advertising identifiers, retargeting pixels, or third-party trackers.
- Analytics that follow you across sites. We collect aggregate page-view counts in our own database, scoped to the squeegify.co.uk domain.
Sub-processors
We use the following third parties to operate the service. Each one processes a specific subset of data on our behalf under a Data Processing Agreement.
| Processor | Purpose | Data location |
|---|---|---|
| Supabase Inc. | Database, authentication, file storage | EU (Frankfurt) |
| Vercel Inc. | Application hosting, edge network, logs | EU (Frankfurt) + global edge |
| Stripe Payments UK Ltd | Card payments, billing, invoicing | UK / EU |
| Resend Inc. | Transactional email delivery | EU |
| Anthropic PBC | AI vision processing of property imagery | US (data not used to train models) |
| Google Ireland Ltd | Address autocomplete, Street View, satellite imagery | EU / global edge |
We do not transfer personal data to any other party. We do not sell or rent personal data to anyone.
Retention
- Quote and lead data: 2 years after the last interaction with the customer.
- Financial records: 7 years (HMRC requirement).
- Widget event logs: 90 days.
- Hashed IP rate-limit data: 24 hours.
Your rights
UK and EU residents may request access, correction, deletion, or export of personal data we hold about them. We respond within 30 days. Contact privacy@squeegify.co.uk.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have mishandled your data.
International transfers
The Anthropic AI processing happens in the United States. The transfer is governed by the UK's International Data Transfer Agreement and the EU Standard Contractual Clauses, with technical safeguards in place. Anthropic does not retain or train on the data we send for analysis.
Changes to this policy
We will email account holders any material change to this policy at least 14 days before it takes effect.
Contact
Squeegify is operated by Robin Oruman, United Kingdom. robin@squeegify.co.uk for privacy enquiries and vulnerability disclosures (also see /.well-known/security.txt).