1. Introduction

Spruce ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our cleaning services platform.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller for the personal data we process about you.

2. Information We Collect

2.1 Personal Information

• Name, email address, and phone number
• Home address and postcode
• Payment information (processed securely by our payment processors)
• Profile photographs (optional)

2.2 Service Information

• Cleaning service preferences and requirements
• Booking history and service feedback
• Communication records with cleaners and customer support

2.3 Technical Information

• Device information and browser type
• IP address and location data (with consent)
• Usage data and website analytics

3. How We Use Your Information

We process your personal data for the following purposes:

• Service Provision: To connect you with cleaning professionals and facilitate bookings
• Payment Processing: To handle transactions and billing (legitimate interest)
• Communication: To send service updates, confirmations, and customer support
• Safety & Security: To verify identities and ensure platform safety
• Service Improvement: To analyse usage and improve our platform (legitimate interest)
• Legal Compliance: To meet regulatory and legal obligations

4. Legal Basis for Processing

We process your personal data based on:

• Contract: To provide our cleaning marketplace services
• Consent: For marketing communications and location services
• Legitimate Interest: For service improvement, fraud prevention, and business operations
• Legal Obligation: For tax records, regulatory compliance, and safety requirements

5. Information Sharing

We may share your information with:

• Cleaning Professionals: To facilitate service bookings and communication
• Payment Processors: Stripe and other secure payment providers
• Service Providers: Analytics, hosting, and customer support tools
• Legal Authorities: When required by law or to protect safety

We do not sell your personal data to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure data centres and backup systems

7. Your Rights

Under UK GDPR, you have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interest
• Restrict: Limit how we process your data
• Withdraw Consent: Remove consent for specific processing

To exercise these rights, please contact us at privacy@spruce.co.uk

8. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations:

• Account data: Until account deletion plus 7 years for tax records
• Booking history: 7 years for legal and insurance purposes
• Communication records: 3 years for customer service improvement
• Marketing data: Until consent is withdrawn

9. Cookies and Tracking

We use cookies and similar technologies to improve your experience. Our cookie categories include:

• Essential: Required for platform functionality
• Analytics: To understand platform usage (with consent)
• Marketing: For targeted advertising (with consent)

You can manage cookie preferences in your browser settings.

10. Contact Information

For privacy-related questions or to exercise your rights, contact:

Data Protection Officer
Email: privacy@spruce.co.uk
Post: Spruce Ltd, Data Protection, [Address], United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or prominent website notice.