Privacy Policy

1. Who We Are

Verde & Shine (“we”, “us”, “our”) is the data controller responsible for your personal data. Our registered address is 128 City Road, London, EC1V 2NX. For data protection enquiries, contact us at verdeandshinelondon@gmail.com.

2. What Data We Collect

We may collect and process the following personal data:

• Identity data: Full name.
• Contact data: Email address, phone number, property address, and postcode.
• Booking data: Service selected, date, time, duration, property details, special instructions, and payment method.
• Payment data: Card details are processed securely by Stripe and are never stored on our servers.
• Communication data: Messages sent via our contact form or email.
• Technical data: IP address, browser type, and usage data collected via cookies.
• Marketing data: Referral source (how you heard about us) and waitlist email if provided.

3. How We Use Your Data

We use your personal data for the following purposes:

• To process and manage your bookings (contractual necessity).
• To send booking confirmations, reminders, and service-related communications.
• To respond to your enquiries and provide customer support.
• To process payments securely via Stripe.
• To improve our services and website experience (legitimate interest).
• To send follow-up communications about our services (legitimate interest, with opt-out available).
• To comply with legal and regulatory obligations.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we process your data on the following legal bases:

• Contractual necessity: Processing required to fulfil your booking.
• Legitimate interest: Service improvement, business analytics, and follow-up communications.
• Consent: Where you have opted in to marketing communications or provided waitlist information.
• Legal obligation: Where required by law (e.g., tax records, fraud prevention).

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Stripe: For secure payment processing.
• Resend: For transactional email delivery.
• Vercel: For website hosting.
• Our Associates: Relevant booking details (address, time, instructions) necessary to deliver the service.

All third-party processors are bound by data processing agreements and comply with UK GDPR requirements.

6. Data Retention

• Booking data: 6 years from the date of service (for tax and legal purposes).
• Contact form data: 2 years from submission.
• Waitlist data: Until you request removal or we expand to your area.
• Account data: Until you request deletion.

7. Your Rights

Under UK GDPR, you have the right to:

• Access a copy of your personal data.
• Rectify inaccurate data.
• Request erasure (“right to be forgotten”).
• Restrict processing.
• Data portability.
• Object to processing based on legitimate interest.
• Withdraw consent at any time.

Contact us at verdeandshinelondon@gmail.com. We will respond within 30 days.

8. Cookies

Our website uses essential cookies required for the site to function. We do not use advertising or tracking cookies.

9. Security

We implement appropriate technical and organisational measures to protect your personal data. All data is transmitted over encrypted connections (HTTPS). Payment data is handled exclusively by Stripe, a PCI DSS Level 1 certified payment processor.

10. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk.

11. Changes to This Policy

We may update this privacy policy from time to time. The latest version will always be available on this page.