Legal

Privacy Policy

Last updated: 22 August 2026 · MAMS SHINE LIMITED

This policy explains what personal data we collect when you use our website or book a cleaning service, why we collect it, how we store it, and your rights under the General Data Protection Regulation (GDPR).

1. What data we collect

When you submit a booking request through our website we collect:

• Your name
• Email address
• Phone number
• Property address (the address to be cleaned)
• Your preferred date, time and cleaning service
• Any notes you choose to add (e.g. access instructions, pets)

We do not collect payment card details through this website. We do not collect any special category data (health, ethnicity, religion, etc.).

2. Why we collect it and our legal basis

We collect and use your data to:

• Provide the service you requested — to confirm your booking, arrange the clean, and contact you about it. Legal basis: performance of a contract (Article 6(1)(b) GDPR).
• Keep records of completed work — for invoicing and our own business records. Legal basis: legitimate interests (Article 6(1)(f) GDPR).
• Comply with legal obligations — such as tax and accounting requirements. Legal basis: legal obligation (Article 6(1)(c) GDPR).

We do not use your data for marketing, profiling, or automated decision-making. We will never sell your data.

3. Photos of your property

If you request our past works or photo documentation service, our staff may take before and after photos of the cleaned areas. These photos:

• Are stored securely in our internal system
• Are accessible only to MAMS SHINE staff
• Are automatically and permanently deleted after 90 days
• Are never shared publicly or used for marketing without your explicit written consent

4. Who we share your data with

We use the following third-party services to operate our website and booking system. Each acts as a data processor on our behalf:

• Supabase Inc. — our database provider, where booking data is stored. Data is hosted in the EU/EEA. Supabase operates under a GDPR Data Processing Agreement.
• Cloudflare Inc. — our website host and security provider. Cloudflare processes requests to our website and provides bot protection (Turnstile). Cloudflare operates under standard contractual clauses for GDPR compliance.
• Railway Corp. — our application server provider. Railway processes requests from our internal booking application.

We do not share your data with any other third parties. We do not transfer your data outside the EU/EEA except where the above processors use standard contractual clauses approved by the European Commission.

5. How long we keep your data

• Booking records — retained for 7 years from the date of the booking to comply with Irish tax and accounting obligations, then deleted.
• Property photos — automatically deleted after 90 days.
• Enquiries that did not result in a booking — deleted after 12 months.

6. How we protect your data

All data is encrypted at rest (AES-256) and in transit (TLS). Access to booking data is restricted to authorised MAMS SHINE staff only, using role-based access controls and multi-factor authentication. Our website uses Cloudflare's Turnstile to prevent automated form submissions.

7. Your rights under GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (subject to our legal retention obligations)
• Restriction — ask us to restrict how we use your data
• Objection — object to processing based on legitimate interests
• Portability — receive your data in a portable format

To exercise any of these rights, email us at arnoldmpofu63@gmail.com. We will respond within one month.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Irish Data Protection Commission: dataprotection.ie.

8. Cookies

Our website uses only a small number of technically necessary cookies. We do not use advertising, tracking, or analytics cookies. See our Cookie Policy for details.

9. Changes to this policy

If we make material changes to this policy we will update the "Last updated" date at the top of this page. We encourage you to review it periodically.