Contents
Controller & Processor
🏢 Data Controller
Prime Clean Ops acts as Data Controller for subscriber account information — managing how your business data is collected and used on our platform.
⚙️ Data Processor
When you use Prime Clean Ops to manage your own clients and staff, you act as Data Controller and Prime Clean Ops acts as your Data Processor. A Data Processing Agreement (DPA) is available on request.
🇩🇪 EU Data Residency
All customer data — for UK, French and Polish subscribers alike — is stored on Supabase infrastructure in Frankfurt, Germany, within the EU. No primary data storage outside the EEA unless covered by Standard Contractual Clauses.
🔐 Security Measures
Row Level Security (RLS) at database level, TLS 1.2+ encryption in transit, encryption at rest, hashed passwords, access controls, and audit logging for sensitive operations.
Your rights under GDPR / RGPD / RODO
The following rights apply to residents of the United Kingdom, France and Poland under UK GDPR, the French RGPD (Loi Informatique et Libertés) and Polish RODO (the Personal Data Protection Act of 10 May 2018) — all implementing EU Regulation 2016/679.
| Right | What it means | How to exercise it |
|---|---|---|
| Right of access (Art. 15) | Request a copy of all personal data we hold about you | Email privacy@primecleanops.com |
| Right to rectification (Art. 16) | Correct inaccurate or incomplete data | Update in account settings or contact us |
| Right to erasure (Art. 17) | Request deletion of your personal data ("right to be forgotten") | Settings → GDPR → Erase my data, or email us |
| Right to restrict processing (Art. 18) | Ask us to limit how we use your data in certain circumstances | Email privacy@primecleanops.com |
| Right to object (Art. 21) | Object to processing based on legitimate interests or for marketing | Email privacy@primecleanops.com |
| Right to portability (Art. 20) | Receive your data in a machine-readable format | Settings → Export my data (CSV / JSON) |
| Right to lodge a complaint | Complain to a supervisory authority if you believe your rights have been violated | ICO (UK): ico.org.uk · CNIL (FR): cnil.fr · UODO (PL): uodo.gov.pl |
Data Retention
- Active subscription data: retained for duration of subscription
- Financial records: 7 years (UK HMRC / French tax law) · Poland: 5 years from the end of the calendar year in which the tax payment deadline fell (Ordynacja podatkowa, Art. 86 §1)
- Deleted accounts: anonymised within 30 days of request
- GPS location data: 90 days (configurable by subscriber)
- Anonymous AI Assistance sessions (no account linked): automatically deleted 30 days after creation
Anonymous session erasure: if you used the AI Assistance widget without an account and want your conversation deleted before the 30-day expiry, email privacy@primecleanops.com with the session ID shown in the widget footer. That ID is the only identifier we can use to locate an anonymous conversation.
Supervisory Authorities
UK: Information Commissioner's Office (ICO) — ico.org.uk · Tel: 0303 123 1113
France: Commission Nationale de l'Informatique et des Libertés (CNIL) — cnil.fr
Poland: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw — uodo.gov.pl · Tel: +48 22 531 03 00