Privacy Policy

Last updated: September 2026

1. Who we are & Data Controller

This Privacy Policy explains how Cristina Amaral, trading as Bright and Shine ("we", "our", "us"), a sole trader based in the United Kingdom, collects, uses and protects your personal data when you use our online booking system. For the purposes of the UK GDPR and the Data Protection Act 2018, Cristina Amaral is the Data Controller responsible for your personal data.

Business address: Bright and Shine, Office 3207VQ, 182-184 High Street North, Area 1/1, East Ham, London, E6 2JA.
Contact: info@brightandshine.co.uk

2. What information we collect

When you request a booking, we collect:

Location data — your postcode and address, used to check whether you're within our service area and to calculate travel distance/time.
Property details — number of bedrooms and bathrooms, and any extras selected, used to work out the price and time needed.
Contact details — your name and phone number (required), and your email address if you choose to provide it, used to confirm and manage your booking.

3. Legal basis for processing your data

We process your personal data under the following legal bases:

Contractual necessity — we need your data to check availability, calculate an accurate price, and provide the cleaning service you've requested.
Legal obligation — if you become a paying customer, UK tax law requires us to retain certain records for accounting purposes.

We don't ask for consent to send you marketing, because we don't currently send any.

4. How we use Google Maps

We use the Google Maps Routes API to calculate driving distance and time between your postcode and our other confirmed bookings, so we can offer you the most efficient available day. Your postcode/coordinates are sent to Google for this calculation. Checking availability this way doesn't save anything to our database — that location data is only stored if you go on to complete and confirm a booking, for scheduling future visits as described below.

5. Where your data is stored & international transfers

Our booking system and database are hosted on the Railway platform, in a data centre located in Amsterdam, the Netherlands (European Union). The UK government recognises the EU as providing an adequate level of data protection, so your data can be transferred and stored there without additional safeguards.

If you go on to make a payment, your name and address may also be shared with our accounting software, FreeAgent, a UK-based company, solely to issue an invoice/receipt.

6. Data security

We take reasonable steps to protect your personal data, including secure cloud hosting, encrypted (HTTPS) communication, and restricted, login-protected access to our booking system.

7. Data retention

If your booking request isn't confirmed, we don't keep your details beyond what's needed to process that request. If you become a customer, we keep your contact and booking details for as long as you continue to use our service, and for at least 6 years afterwards, in line with our UK tax and accounting record-keeping obligations (HMRC).

8. Cookies

Our booking system uses only cookies that are strictly necessary to make the booking process work (for example, remembering your progress through the booking steps). We don't currently use any analytics, advertising or tracking cookies, so no cookie consent banner is shown.

9. Your rights

Under the UK GDPR, you have the right to:

ask for a copy of the personal data we hold about you;
ask us to correct inaccurate information;
ask us to delete your data, where we're not required to keep it for legal reasons (such as accounting records);
object to or restrict how we use your data.

To exercise any of these rights, contact us at info@brightandshine.co.uk. You can also complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.

10. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page.