Contents
1. Who we are
Prime Clean Ops ("we", "us", "our") operates the Prime Clean Ops platform at primecleanops.com. We act as the Data Controller for personal data of our subscribers and website visitors. Our subscribers act as Data Controllers for the personal data of their own clients and employees processed within our platform — in that context, Prime Clean Ops acts as a Data Processor.
Contact: privacy@primecleanops.com
2. What personal data we collect
Account data
- Name and business name
- Email address
- Phone number
- Country and language preference
- Password (hashed, never stored in plain text)
Billing data
- Billing address
- Payment method (processed by Stripe — we do not store card numbers)
- Transaction history
Usage data
- Pages visited and features used
- Session duration and frequency
- Device type and browser
- IP address
Operational data (entered by subscribers)
- Client names and contact details
- Staff names, roles, and contact details
- GPS clock-in/clock-out locations and timestamps
- Job photos and completion records
- Invoice and contract data
3. Lawful basis for processing
- Contract performance: Processing necessary to provide the platform services you have subscribed to
- Legitimate interests: Analytics, fraud prevention, and platform improvement
- Legal obligation: Compliance with financial, tax, and data protection regulations
- Consent: Marketing communications and non-essential cookies (where collected)
4. How we use your information
- Provide and maintain platform access
- Process subscriptions and billing
- Provide customer support
- Send service notifications and updates
- Improve platform features and performance
- Comply with legal and regulatory obligations
- Prevent fraud and ensure platform security
5. Data storage and security
All data is stored on Supabase infrastructure hosted in Frankfurt, Germany (EU) — ensuring EU/UK GDPR data residency compliance. We implement industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest, Row Level Security (RLS) at the database layer, and access controls limiting data access to authorised personnel only.
6. Third-party services and sub-processors
| Provider | Purpose | Data transferred | Location |
|---|---|---|---|
| Supabase | Database and authentication | Account and operational data | Germany (EU) |
| Stripe | Payment processing | Billing information | EU/US (SCCs) |
| Resend | Transactional email | Email addresses | EU |
| Anthropic (Claude) | AI features | UUID-only job data | US (SCCs) |
| Vercel | Application hosting | Usage/request data | EU |
| HubSpot, Inc. | CRM & sales workflow (ROI calculator leads) | Name, email, country, language, marketing consent, ROI qualification signals (staff count, weekly admin hours, hourly rate, recommended plan, estimated year-1 saving, submission timestamp, share link) | EU (Frankfurt, Germany) — SCCs + UK Extension to the EU-U.S. DPF for any onward transfers |
We ensure all sub-processors maintain appropriate data protection standards and Standard Contractual Clauses (SCCs) are in place for transfers outside the EEA.
7. International data transfers
Where data is transferred outside the European Economic Area or the United Kingdom, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner's Office (ICO).
8. Data retention
- Active account data: Retained for the duration of your subscription
- Invoice and financial records: 7 years (UK HMRC / French tax law requirement)
- Deleted account data: Anonymised within 30 days of deletion request, except where legal obligations require longer retention
- Usage analytics: 26 months (Google Analytics default)
- Support communications: 3 years
9. Your rights under UK GDPR and RGPD
You have the right to: access your data, correct inaccuracies, request erasure, restrict processing, object to processing, and request portability. Submit requests to privacy@primecleanops.com. We respond within 30 days. You also have the right to lodge a complaint with the ICO (UK: ico.org.uk) or CNIL (France: cnil.fr).
10. Cookies
See our Cookie Policy tab for full cookie information.
11. Changes to this policy
We may update this policy and will notify subscribers of material changes by email.
12. Contact us
Privacy enquiries: privacy@primecleanops.com