Privacy Policy

Who processes your data

Data submitted through cleanok.club is processed by the CleanOk cleaning service, referred to below as "we". We decide why and how that data is used, and we are responsible for keeping it safe. We operate under Ukrainian Law No. 2297-VI of 1 June 2010 on the protection of personal data. If you are located in the European Economic Area, the United Kingdom or Switzerland, the GDPR applies to your data as well.

What we collect

Only what it takes to show up and clean. There are no hidden fields beyond the ones you see in the form: the site never asks for identity documents, does not take payments and stores no card details.

• From the request form — your name and phone number. The address and a comment, if you filled them in.
• From the calculator — city, property type, cleaning format, floor area, add-on work, preferred date and arrival window.
• Automatically — IP address, browser and device type, interface language, date and time of the request.
• Advertising parameters — utm_source, utm_medium, utm_campaign and the click identifiers gclid, gbraid, wbraid and fbclid, which show us which ad brought the order.

Why we need it

The legal basis is performance of the contract created by your request, plus our legitimate interest in knowing which advertising works. You give consent when you submit the form, and you can withdraw it on any day.

• To call you back, confirm the details and agree the final price — a request without a phone number is useless.
• To carry out the cleaning: the crew needs the address and the property details to arrive prepared.
• To keep records of orders and to sort things out if something goes wrong.
• To measure which ads bring real orders and which ones burn budget.

Cookies and local storage

Cookies serve two purposes here: remembering your language and identifying which ad a visitor came from. There is no third purpose. You can block them in your browser or with an extension — the calculator and the form will keep working.

• cleanok_lang — your interface language, so you do not have to switch it on every visit.
• Advertising click identifiers — kept in your browser's local storage for no longer than 90 days and sent along with your request.
• _ga, _gcl_au and other Google cookies — visit statistics and conversion tracking. Set only when analytics is switched on.

Google analytics and advertising

The site uses Google Analytics and Google Ads with Consent Mode v2. For visitors from the EEA, the United Kingdom and Switzerland, advertising and analytics are off by default and switch on only after explicit consent. For other countries, Ukraine included, consent is treated as given by default, as local law permits.

• Our reports show an aggregate picture: pages, referral sources, number of requests.
• With enhanced conversions enabled, Google receives your phone number in an irreversibly transformed form — a hash. The number itself is never sent in the clear; the hash only lets a request be credited to the ad you arrived from.
• Data about your behaviour on the site is never sold and is used for nothing other than measuring advertising.

Who we share it with

We do not sell your data, rent it out or feed it into advertising databases. The list of parties with access is closed and limited to running the service.

• CleanOk managers and crews — only as much as a given order requires.
• Telegram FZ-LLC — a notification about a new request reaches the manager in the messenger.
• Google Ireland Limited — visit statistics and conversion tracking.
• Hetzner Online GmbH — hosting for the server running the site and the database, in a German data centre.
• State authorities — only on a reasoned written request within the limits of the law.

How long we keep it

A request stays in our database for as long as it is needed to serve the client and settle disputes, and never longer than three years from your last contact. After that the record is deleted or anonymised. Server logs are kept for no more than 30 days. If you ask us to delete your data sooner, we will delete it sooner.

How we protect it

Nobody can promise total invulnerability, but our measures are specific and verifiable.

• The site is served over HTTPS only, with certificates renewed automatically.
• The database is not exposed to the internet: only the application on the same server connects to it.
• Access to the back office is password-protected, with a separate account per staff member.
• Service keys and tokens are stored encrypted and are never displayed in full.

Your rights

Under Law No. 2297-VI, and under the GDPR if you are in the EEA, you control your own data. We handle requests within 30 calendar days. To let us find your record, quote the phone number you used when submitting the form.

• Find out what data we hold about you and receive a copy of it.
• Correct data that is inaccurate or out of date.
• Have your data deleted, provided it does not block an order already accepted.
• Restrict processing or object to it.
• Withdraw consent, after which we stop calling and messaging you.
• Lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights.

Children

The service is intended for adults. We do not knowingly collect data from children under 16. If such data has reached us by mistake, tell us and we will delete it without further questions.

Changes to this policy

We update this page whenever something material changes — a new analytics service, for example. The date of the latest revision is shown at the top. Changes are not retroactive: data collected earlier is handled under the rules that applied when it was collected.