Privacy policy

Only what an enquiry needs: a name if you give one, an email address, your business name and website if you have them, the kinds of cleaning you sell, the area you work in, the budget range you have in mind for Google and anything else you choose to write.

The email address is the only one I cannot work without, and only because it is the sole way of answering you. Everything else can be left blank; a blank answer means a slower conversation, not a refused one. There is no requirement in law or in contract for you to give me any of it, and nothing is collected for any purpose beyond answering you and doing the work.

Please do not send me your Google Ads password or any other login. Access is given inside Google's own account sharing, where you grant it and remove it yourself, and a password sent by email is a password in an inbox forever.

Nothing. There are no cookies on this site, no analytics, no tracking pixels, no advertising tags and no fonts fetched from anywhere else as the page loads. The enquiry form keeps what you type in the page's own memory while you are filling it in, and that disappears when the tab closes: it is not written to storage and it is not sent anywhere you have not sent it.

That is also why there is no cookie banner. There is nothing to ask you to agree to, and a box asking permission for nothing would be theatre. Regulation 6 of the Privacy and Electronic Communications Regulations is about storing or reading information on your device; this site does neither.

Under the UK GDPR you can ask me to:

• tell you what I hold about you and give you a copy of it;
• correct anything that is wrong or incomplete;
• erase it, where there is no longer a reason to keep it;
• stop using it for a while, while an accuracy or objection question is settled;
• stop using it altogether, where the ground for using it is legitimate interests;
• hand over what you gave me in a portable format, or send it to somebody else;
• stop relying on any consent you have given, which does not undo what was done before you withdrew it.

Some of these have limits written into the law itself. Where one applies to your request, you are told which and why, rather than simply refused.

Write to ask@cleanyourads.org and say what you want. You do not have to use any particular form of words and there is no charge.

An answer comes within one month. If a request is genuinely complicated, that can be extended by up to two further months, and you are told inside the first month that it has been extended and why. I may ask for something that confirms you are who you say you are, but only where there is real doubt.

There is no automated decision-making here and no profiling. Nothing about you is scored, ranked or sorted by a machine, and no decision that affects you is taken without a person taking it.

Tell me first, at ask@cleanyourads.org. It is usually the quickest way to fix something, and I would rather know.

You do not have to come to me first, though. You can complain to the Information Commissioner's Office at any time, whatever I say about it:

• Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• ico.org.uk

Complaining to the Commissioner does not stop you taking the matter to court as well, and nothing on this page limits either route.

Iryna Paziuk trading as CleanYourAds, at 34 Kincaidston Dr, Ayr KA7 3XL, is the controller of the information described on this page. Contact: ask@cleanyourads.org.

There is no company, so there is no company number and no registered office to give. A sole trader who processes personal data electronically normally has to pay the data protection fee to the Information Commissioner; this page does not claim that the fee has been paid, because a claim like that is either true on a particular date or misleading.

Three things, and nothing else:

• What you write to me. The contents of your email or of the brief you send, which is an email as well: the form hands the finished text to your own email program and it reaches me the way any other message does.
• What the hosting company's server records. The ordinary log a web server keeps when a page is requested: an IP address, a time, the page asked for and the browser that asked. It is written automatically and I do not read it unless something has gone wrong.
• What a customer's advertising account contains. Where you are a customer and have given me access, I see what is in your Google Ads account. That account is yours; see below.

Nothing is bought from a data broker, scraped or taken from a list. If I write to you first, it is because you wrote to me.

• Answering your enquiry and quoting for the work. Article 6(1)(b) of the UK GDPR: steps taken at your request before entering a contract.
• Doing the work and keeping in touch about it. Article 6(1)(b): performing the contract you have entered into.
• Keeping the website up and dealing with abuse of it. Article 6(1)(f), legitimate interests. The interest is keeping a working site online and being able to look into a fault or an attack on it. It is a slight intrusion on anybody visiting, and a site with no logs at all cannot be defended or repaired.
• Keeping business and tax records. Article 6(1)(c): a legal obligation, being the duty to keep records for HMRC.

Nothing is used for marketing. There is no mailing list, no newsletter and no arrangement under which your details go to anybody who would sell you something.

These are the kinds of company involved. Which firm is in each role at any time is given to you in writing on request:

• the company hosting this website, which keeps the server logs;
• the company carrying the email, which is where messages sit;
• a payment provider, where an invoice is settled by card rather than by transfer. Card details go to that provider, not to me: I never see a card number and none is typed into this website;
• an accountant or bookkeeper, where one is engaged, for the business records;
• Google, for any customer's advertising account, under the customer's own agreement with Google rather than mine.

Nobody else. Your details are not sold, rented, swapped or handed over for anybody else's marketing. Information is given up to a public authority only where the law actually requires it, and where I am allowed to tell you that it happened, I will.

Some of the companies above may hold data outside the United Kingdom, because that is how hosting and email commonly work. Where that happens it is done on a basis the law allows: either the country has been found by the United Kingdom to offer adequate protection, or the contract with that company includes the International Data Transfer Agreement or the addendum to the European standard clauses.

Which firm, which country and which of those safeguards applies is given to you in writing on request. That is a promise answerable on the day you ask it, not a form of words.

• An enquiry that did not become work: 12 months, then deleted.
• Messages and files belonging to work that was done: 24 months after the work ends, then deleted.
• Server logs: 30 days, by the hosting company, then overwritten.
• Invoices and accounting records: at least five years after the 31 January submission deadline for the tax year they belong to. That period is not a choice: HMRC sets it.

Where a period ends while something is still genuinely needed - an unsettled complaint, a live dispute - what is needed for it is kept until that finishes, and no more than that.

A Google Ads account belongs to the customer who owns it. When you give me access I am working inside your account, under your agreement with Google, and what is in it stays in it. I do not export your account data, do not copy it into anything of my own beyond what the monthly report needs, and do not use one customer's account to inform work for a competing cleaning business in the same area.

When work ends I remove myself from the account. Nothing of yours stays with me except the reports and correspondence covered by the retention periods above, and Google's own record of who had access, which is in your account for you to read.

Messages and files are held in accounts protected by a long unique password and a second factor. Devices are locked and encrypted. Access is given at the lowest level that will do the job and removed when the work ends.

No arrangement is perfect. If something happens that puts your information at real risk, the Information Commissioner is told within 72 hours where the law requires it, and you are told directly where the risk to you is high.

This page was last reviewed on 17 September 2026, and that date is printed at the top of it. Any revision is published here and the date changes with it, so the date is the way to tell whether what you read before is still what applies.

Where a change makes a real difference to somebody I am already working with, I write to them about it rather than leaving it to be noticed.