PRIVACY POLICY

Last updated: [DD/MM/YYYY] Website: [www.onlycleans.es] Commercial name: Only Cleans

1. General information

This Privacy Policy regulates the processing of personal data of users, clients, potential clients and individuals who contact Only Cleans through the website, WhatsApp, phone, email, social media or other enabled channels.

Only Cleans processes personal data responsibly, transparently and only to the extent necessary to manage requests, prepare quotations, provide services, maintain communication with the client, comply with legal obligations, handle complaints and improve the internal quality of the service.

Use of the website, contact through WhatsApp or other channels, sending photographs, requesting a quotation or booking a service means that the user has been informed about the processing of personal data in accordance with this Privacy Policy.

2. Data controller

The data controller responsible for the processing of personal data is:

Commercial name: Only Cleans Legal owner: [FULL LEGAL NAME / COMPANY NAME] NIF / CIF: [NIF / CIF] Professional / tax address: [FULL ADDRESS] Privacy contact email: onlycleanscostadelsol@gmail.com Phone / WhatsApp: [PHONE / WHATSAPP]

Hereinafter, the controller shall be referred to as “Only Cleans”, “we”, “the controller” or “the service provider”.

3. Data Protection Officer

Data Protection Officer: [NOT APPLICABLE / DPO DETAILS, IF APPLICABLE]

If there is no legal obligation to appoint a Data Protection Officer, users may send any privacy-related query to the email address indicated in this Privacy Policy.

4. Channels through which we may collect data

Only Cleans may collect personal data through the following channels:

• Website.
• WhatsApp buttons or links.
• WhatsApp conversations.
• Phone calls.
• Email.
• Contact forms, if available.
• Social media.
• Third-party platforms.
• Post-service communications.
• Photographs sent by the client.
• Photographs taken during the provision of the service.
• Data provided for invoicing.
• Data generated during operational management of the service.

5. Personal data we may process

Only Cleans may process the following categories of personal data, depending on the type of relationship with the user or client.

5.1 Identification data

• First name.
• Surname, if provided.
• Company name, if applicable.
• Contact person.
• Professional role or position, if applicable.

5.2 Contact data

• Phone number.
• WhatsApp number.
• Email.
• Preferred communication channel.
• Preferred language.

5.3 Service location data

• Address where the service will be carried out.
• Area or town.
• Type of property.
• Access information.
• Parking, entrance, floor, lift or other logistical notes.
• Necessary references to reach the service location.

5.4 Data about the requested service

• Type of service requested.
• Type of item or surface.
• Number of items.
• Approximate size.
• Material or fabric, if known.
• Condition of the item.
• Level of soiling.
• Presence of stains.
• Presence of odours.
• Presence of pets, holiday rental use, children or other factors related to the use of the item.
• Information about previous treatments.
• Need for invoice.
• Preferred date and time.

5.5 Messages and communications

• Messages sent through WhatsApp.
• Messages sent by email.
• Responses to quotations.
• Booking confirmations.
• Appointment changes.
• Post-service comments.
• Complaints.
• Reviews or feedback provided by the client.

5.6 Photographs sent by the client

The client may send photographs so that Only Cleans can understand the condition of the item, prepare a quotation, assess risks, identify stains, estimate time and recommend the type of service.

These photographs may include:

• Sofas.
• Mattresses.
• Rugs and carpets.
• Chairs.
• Terrace furniture.
• Vehicle interiors.
• Yacht interiors.
• Stains.
• Damage.
• Material labels.
• General view of the room or work area.
• Visible elements of the home or property.

The client should avoid sending photographs that include people, minors, personal documents, sensitive data, private objects unrelated to the service or any information that is not necessary to prepare the quotation.

5.7 Photographs taken during the service

During the provision of the service, Only Cleans may take photographs for operational, technical, quality control and proof-of-condition purposes.

These photographs may include:

• Before-service photographs.
• After-service photographs.
• Photographs of stains.
• Photographs of existing damage.
• Photographs of material labels.
• Photographs of technical limitations.
• Photographs of treated areas.
• Photographs required for complaints.
• Photographs required for internal job documentation.

5.8 Billing and payment data

Where necessary, Only Cleans may process:

• Name or company name.
• NIF / CIF / NIE, if applicable.
• Tax address.
• Email for sending invoices.
• Service amount.
• Payment method.
• Payment status.
• Proof of payment, if applicable.
• Data necessary to comply with tax and accounting obligations.

Only Cleans should not request or store full bank card details unless an authorized payment provider is used and processes those data directly under its own terms and security measures.

5.9 Technical website data

When the user accesses the website, certain technical data may be processed, such as:

• IP address.
• Device type.
• Browser.
• Operating system.
• Date and time of access.
• Pages visited.
• Traffic source.
• Cookie preferences.
• Analytics data, if the user has consented to analytics cookies.
• Advertising or remarketing data, if the user has consented to marketing cookies.

5.10 Data from social media or external platforms

If the user interacts with Only Cleans through social media, business profiles, messaging platforms or external directories, Only Cleans may process data that the user makes visible or voluntarily communicates through those platforms.

Processing carried out by each external platform is governed by its own privacy policy.

5.11 Special category data

Only Cleans does not intentionally request special category data such as health data, ideology, religion, sexual orientation, biometric data, ethnic origin or similar information.

The user must not send sensitive data through the website, WhatsApp, email or photographs.

If the user voluntarily sends unsolicited sensitive information, Only Cleans may delete it when it is not necessary for managing the service.

6. Purposes of processing

Only Cleans may process personal data for the following purposes.

6.1 Managing information requests

We process the data necessary to respond to questions, doubts, queries, availability requests or messages sent by the user.

6.2 Preparing quotations

We process the data and photographs provided by the user to assess the type of service, estimate the work, identify possible risks, calculate indicative prices and prepare a quotation.

6.3 Communication via WhatsApp

We process the data necessary to maintain conversations with the user or client through WhatsApp, send responses, request additional information, ask for photographs, send quotations, coordinate appointments and manage the service.

6.4 Organizing appointments and bookings

We process data to coordinate date, time, address, access, availability, route, assigned team and operational conditions of the service.

6.5 Providing the contracted service

We process the data necessary to carry out the requested service, identify the work to be performed, prepare the equipment, record incidents, document the result and manage the relationship with the client.

6.6 Internal operational management

We process data to organize jobs, assign technicians, create internal records, monitor service status, record payments, generate internal reports and maintain an orderly operation.

6.7 Quality control

We process data and photographs to verify the condition of the job, compare before and after, review incidents, assess the result, improve internal processes and maintain quality standards.

6.8 Proof of prior condition and dispute management

We process photographs, messages, service notes and operational documentation to evidence the prior condition of the item, technical limitations, existing damage, result obtained or relevant communications in case of complaint, dispute, non-payment or disagreement.

6.9 Payment management

We process data necessary to record amounts, confirm payments, manage pending payments, issue receipts, monitor payment status and resolve payment-related incidents.

6.10 Invoicing and legal obligations

We process tax and accounting data when the client requests an invoice or when there is a legal obligation to retain certain information.

6.11 Post-service support

We process data to follow up after the service, confirm satisfaction, resolve questions, handle incidents, manage possible reworks and provide information related to the maintenance of the treated item.

6.12 Review requests

We may contact clients after the service to request a review or rating about their experience, always in relation to the service provided.

6.13 Maintenance reminders

We may send reminders related to maintenance of the treated item, periodic cleaning, textile protection or similar services when there is a previous relationship with the client, always offering the possibility not to receive further communications of this type.

6.14 Commercial communications

We may send commercial communications about services, promotions, offers, campaigns or news from Only Cleans when there is a valid legal basis for doing so, especially user consent or a previous contractual relationship involving similar services, always with the possibility to unsubscribe or object.

6.15 Use of photographs for content or marketing

Only Cleans will use photographs of jobs, items, properties or results for promotional, advertising, social media, website, portfolio or marketing purposes only when there is authorization or another valid legal basis.

Where photographs may identify a person, property, client or private element, authorization will be requested where appropriate.

6.16 Complaint management

We process personal data to receive, analyze, respond to and document complaints, claims, warranty requests, incidents, alleged damage or disputes.

6.17 Website security

We process technical data to protect the website, prevent unauthorized access, detect abusive use, prevent fraud, ensure security and maintain technical functionality.

6.18 Analytics and website improvement

If the user accepts analytics cookies, we may process browsing data to measure visits, understand website use, improve content, optimize the experience and evaluate campaign performance.

6.19 Advertising and remarketing

If the user accepts marketing cookies, we may process data to measure campaigns, show personalized advertising or carry out remarketing on external platforms.

7. Legal basis for processing

Only Cleans processes personal data under the following legal bases.

7.1 Consent

We rely on consent when the user:

• Accepts non-essential cookies.
• Subscribes to or agrees to receive commercial communications.
• Authorizes the use of photographs for promotional or marketing purposes.
• Voluntarily provides data for purposes that are not strictly necessary for the execution of the service.

The user may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

7.2 Pre-contractual measures

We process data on the basis of pre-contractual measures when the user requests information, sends photographs, asks for a quotation, checks availability or requests a service proposal.

7.3 Performance of a contract

We process data on the basis of contract performance when the client confirms a booking or hires a service.

This basis allows us to manage the appointment, provide the service, communicate with the client, record the work, manage payments and carry out actions necessary to fulfill the contracted service.

7.4 Legal obligation

We process data on the basis of legal obligation when we must comply with tax, accounting, consumer protection, complaint handling, invoicing, document retention or cooperation obligations with competent authorities.

7.5 Legitimate interest

We process data on the basis of legitimate interest to:

• Maintain website security.
• Prevent fraud or abusive use.
• Manage complaints and disputes.
• Retain reasonable evidence of the service provided.
• Carry out internal quality control.
• Contact clients about similar services, where permitted by law.
• Defend the legitimate rights and interests of Only Cleans.

In any case, the user may object to processing based on legitimate interest where applicable.

8. Data retention

Only Cleans will retain personal data for the time necessary to fulfill the purposes for which they were collected and to address possible legal, tax, contractual or consumer-related liabilities.

Specific periods may vary depending on the type of data and relationship with the user.

8.1 Information requests not resulting in a booking

Data related to requests that do not result in a booking may be retained for [X MONTHS / X YEARS] from the last communication, unless the user requests deletion earlier and there is no legal basis to retain them.

8.2 Quotations not accepted

Data and photographs used to prepare quotations that are not accepted may be retained for [X MONTHS / X YEARS] for commercial follow-up, internal control, resolving questions or defending against possible claims, unless deletion is requested where applicable.

8.3 Clients and contracted services

Data related to contracted services may be retained during the contractual relationship and afterwards for the periods necessary to handle warranties, complaints, legal liabilities, tax obligations and internal documentation of the service.

8.4 Invoices and tax data

Tax, accounting and invoicing data will be retained for the periods required by applicable regulations.

8.5 Operational photographs

Photographs taken or received for operational, technical, quality control, proof of prior condition or complaint management purposes may be retained for [X MONTHS / X YEARS] or for the time necessary to address liabilities arising from the service.

8.6 Photographs authorized for marketing

Photographs authorized for promotional or marketing purposes may be retained while the authorization remains valid, until the data subject withdraws consent, requests deletion or there is a legitimate reason to stop using them.

8.7 Complaints and disputes

Data related to complaints, claims, disputes, alleged damage, non-payments or incidents may be retained for the time necessary to manage them and to defend the rights and legitimate interests of Only Cleans.

8.8 Cookies

Data related to cookies will be retained as indicated in the Cookie Policy and according to the duration of each cookie or similar technology.

9. Data recipients and processors

Only Cleans does not sell personal data to third parties.

However, in order to provide its services and operate properly, Only Cleans may share data or allow access to data to certain providers, collaborators or recipients where necessary.

9.1 Hosting and website maintenance provider

Technical website data may be processed by hosting, infrastructure, security, maintenance or web development providers.

Provider: [HOSTING PROVIDER / VERCEL / OTHER] Purpose: website hosting, operation and security.

9.2 WhatsApp / Meta

When the user contacts us through WhatsApp, communication takes place through a third-party platform owned by Meta.

Use of WhatsApp means that the platform may process data in accordance with its own terms and policies.

Provider: WhatsApp / Meta Purpose: communication with the user, request management and service coordination.

9.3 CRM and internal management tools

Only Cleans may use internal tools, CRM systems, operational databases, work sheets or management systems to organize clients, requests, jobs, quotations, payments, follow-ups and complaints.

Provider / tool: [CRM / AIRTABLE / POSTGRES / OTHER] Purpose: operational and administrative management of the service.

9.4 Automation tools

Only Cleans may use automation tools to connect forms, messages, records, notifications, reminders, internal tasks and operational processes.

Provider / tool: [N8N / MAKE / ZAPIER / OTHER] Purpose: operational automation, follow-up and service improvement.

9.5 Cloud storage

Only Cleans may store documentation, photographs, reports, internal records or service-related files in cloud storage systems.

Provider / tool: [GOOGLE DRIVE / CLOUD STORAGE / OTHER] Purpose: secure storage, internal organization, quality control and documentary proof.

9.6 Analytics tools

If the user accepts analytics cookies, browsing data may be processed by analytics tools.

Provider / tool: [GOOGLE ANALYTICS / VERCEL ANALYTICS / OTHER] Purpose: traffic measurement, performance and website improvement.

9.7 Advertising tools

If the user accepts marketing cookies, data may be processed by advertising or remarketing platforms.

Provider / tool: [META PIXEL / GOOGLE ADS / OTHER] Purpose: campaign measurement, advertising and remarketing.

9.8 Email or communication tools

Only Cleans may use email, messaging or communication tools to respond to inquiries, send quotations, confirmations, reminders or authorized communications.

Provider / tool: [EMAIL PROVIDER / NEWSLETTER TOOL / OTHER] Purpose: communication with users and clients.

9.9 Payment providers

If online or card payments are enabled, payment data may be processed directly by specialized providers.

Provider / tool: [STRIPE / SUMUP / PAYPAL / BANK / OTHER] Purpose: secure payment processing.

Only Cleans should not store full bank card details when payment is managed by an external provider.

9.10 Tax, accounting or legal advisors

Only Cleans may communicate data to tax, accounting, employment or legal advisors when necessary to comply with legal obligations, invoicing, accounting, complaint management or legal defense.

9.11 Technicians, operational staff or collaborators

Data necessary to provide the service may be accessible to staff, technicians, collaborators or operational providers involved in the execution of the service.

Only the data necessary to carry out the work will be provided, such as name, address, phone number, service information, operational photographs and relevant notes.

9.12 Public authorities

Only Cleans may communicate data to public authorities, consumer bodies, tax authorities, courts, tribunals, law enforcement agencies or other competent entities where there is a legal obligation or valid request.

10. International data transfers

Some technology providers used by Only Cleans may be located outside the European Economic Area or may process data from countries that do not provide the same level of protection as the European Union.

Where international data transfers occur, Only Cleans will seek to ensure that they are carried out with appropriate safeguards provided by applicable regulations, such as adequacy decisions, standard contractual clauses or other legally valid mechanisms.

The user may request further information about applicable safeguards by contacting Only Cleans at the email address indicated in this Privacy Policy.

11. Photographs sent by clients

Sending photographs by the client is voluntary, but it may be necessary to prepare a reasonable quotation, assess risks or recommend an appropriate treatment.

The client should send only photographs related to the requested service.

Only Cleans may use photographs sent by the client to:

• Analyze the type of item.
• Assess the level of soiling.
• Identify visible stains.
• Evaluate possible technical risks.
• Prepare a preliminary quotation.
• Request additional information.
• Organize the service.
• Document the request.
• Manage complaints or disputes, if necessary.

The client should avoid including people, minors, documents, license plates, private objects, visible personal data or elements not necessary to evaluate the service in the photographs.

12. Before/after photographs and service documentation

Only Cleans may take photographs before, during or after the service to document the work.

These photographs may be used for:

• Quality control.
• Internal service record.
• Proof of prior condition.
• Proof of existing damage.
• Proof of stains or technical limitations.
• Before/after comparison.
• Internal job report.
• Complaint management.
• Dispute prevention.
• Internal training.
• Process improvement.

These photographs will not be used for marketing, social media, advertising or public portfolio purposes without authorization when they may identify the client, property, item or private information.

13. Use of photographs for marketing and content

Only Cleans may request authorization to use photographs of completed work for marketing, social media, website, portfolio, advertisements, case studies, educational content or result demonstrations.

The use of photographs for promotional purposes will only take place when there is a valid legal basis and, where appropriate, the client’s consent or authorization.

The client may withdraw authorization for future uses by contacting Only Cleans. Withdrawal will not affect uses lawfully made before withdrawal, but Only Cleans will seek to stop using the content in future publications where reasonably possible.

Only Cleans may use anonymized or cropped images that do not allow identification of the client, property or private data, always respecting applicable regulations.

14. WhatsApp communications

WhatsApp is one of the main communication channels used by Only Cleans.

Through WhatsApp, Only Cleans may:

• Respond to inquiries.
• Request photographs.
• Prepare quotations.
• Send price ranges.
• Coordinate appointments.
• Confirm bookings.
• Send service reminders.
• Manage date changes.
• Handle incidents.
• Request feedback.
• Send reminders related to maintenance or similar services, where applicable.

The user understands that WhatsApp is an external platform and that its use is also governed by the terms and policies of WhatsApp / Meta.

The user may request the use of another communication channel where reasonably possible.

15. Commercial communications and opt-out

Only Cleans may send commercial communications only when there is a valid legal basis.

These communications may include:

• Promotions.
• Offers.
• Discounts.
• Seasonal campaigns.
• Maintenance reminders.
• Information about similar services.
• Information about textile protection.
• Care recommendations.

The user may object to or unsubscribe from commercial communications at any time by sending a clear message through WhatsApp, email or another enabled channel.

Examples of opt-out messages:

• “I do not want to receive more promotions”.
• “Stop”.
• “Remove me”.
• “Unsubscribe”.
• “Do not send more commercial messages”.

Unsubscribing from commercial communications will not prevent Only Cleans from sending messages necessary to manage an active request, booking, contracted service, payment, complaint or legal obligation.

16. Reviews and testimonials

Only Cleans may contact clients after the service to request a review, rating or testimonial about their experience.

The client is not obliged to leave a review.

If the client voluntarily provides a testimonial, review or comment, Only Cleans may use it for internal or public purposes depending on the channel in which it was issued and the applicable authorization.

When the testimonial has not been voluntarily published by the client on a public platform, Only Cleans will request authorization before using it for identifiable promotional purposes.

17. Automated decisions and artificial intelligence

Only Cleans may use technological tools, automation or support systems to organize requests, classify services, prepare response drafts, order information, generate reminders or improve internal processes.

These tools may support operational management, but they do not necessarily replace human review in relevant situations, especially where there is technical risk, a complaint, alleged damage, complex treatment, final price or a decision that may significantly affect the client.

Only Cleans does not make automated decisions with significant legal effects on the user without appropriate human intervention.

If automated decision-making systems with relevant impact are implemented in the future, the user will be informed in accordance with applicable regulations.

18. Minors’ data

The website and Only Cleans services are not directed at minors.

Only Cleans does not intentionally request personal data from minors.

If a minor contacts Only Cleans or provides personal data, confirmation or authorization from parents, guardians or legal representatives may be requested where necessary.

If Only Cleans detects that it has received data from a minor without a valid legal basis, it may delete such data.

19. Obligation to provide data

The user is not obliged to provide personal data simply by browsing the website, except for technical data strictly necessary for the functioning of the website.

However, in order to request a quotation, contact us via WhatsApp, book a service, receive an invoice or submit a complaint, it may be necessary to provide certain data.

If the user does not provide the necessary information, Only Cleans may not be able to respond properly, prepare a quotation, coordinate an appointment, provide the service or issue an invoice.

20. Accuracy of data

The user guarantees that the data provided are true, accurate, complete and up to date.

The user is responsible for communicating any changes to their data when relevant to the management of the request or provision of the service.

Only Cleans is not responsible for errors, delays, inability to contact, access problems, incorrect quotations or incidents arising from false, incomplete, incorrect or outdated data provided by the user.

21. User rights

The user may exercise the rights recognized by data protection regulations.

21.1 Right of access

The user may request confirmation as to whether Only Cleans processes personal data and may access the corresponding information.

21.2 Right to rectification

The user may request correction of inaccurate or incomplete data.

21.3 Right to erasure

The user may request deletion of data where legally applicable.

21.4 Right to object

The user may object to the processing of data in certain circumstances, especially when processing is based on legitimate interest or used for commercial communications.

21.5 Right to restriction of processing

The user may request restriction of data processing in the cases provided for by law.

21.6 Right to data portability

The user may request to receive data in a structured, commonly used and machine-readable format where applicable.

21.7 Right to withdraw consent

Where processing is based on consent, the user may withdraw it at any time.

21.8 Right not to be subject to automated decisions

The user has the right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect them, except in cases permitted by law.

22. How to exercise rights

To exercise their rights, the user may send a request to:

Email: onlycleanscostadelsol@gmail.com Recommended subject: Data protection / Exercise of rights Necessary information: name, contact details, right the user wishes to exercise and a clear description of the request.

Only Cleans may request additional information to verify the identity of the applicant where necessary.

Only Cleans will respond to rights requests within the periods established by applicable regulations.

23. Complaint to the supervisory authority

If the user considers that the processing of personal data does not comply with applicable regulations, they may lodge a complaint with the Spanish Data Protection Agency.

Supervisory authority: Agencia Española de Protección de Datos Website: www.aepd.es

The user is encouraged to contact Only Cleans first in order to try to resolve any issue related to the processing of personal data.

24. Data security

Only Cleans applies reasonable technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration or destruction.

These measures may include:

• Limited access to data.
• Use of professional tools.
• Organized storage.
• Account access control.
• Passwords and authentication measures.
• Reasonable separation of operational information.
• Deletion or archiving of data when no longer necessary.
• Internal review of processes.
• Use of appropriate technology providers.

However, no technological system, internet communication, cloud storage or messaging platform can guarantee absolute security.

The user should avoid sending unnecessary, sensitive or excessive information through insecure channels.

25. Confidentiality

Only Cleans undertakes to process personal data confidentially and to limit access to the individuals or providers who need to know such data in order to fulfill the purposes described in this Privacy Policy.

Staff, technicians, collaborators or providers who may access personal data must do so only for purposes related to the management or provision of the service.

26. Cookies and similar technologies

The website may use cookies and similar technologies.

Some cookies are necessary for the technical functioning of the website. Other cookies, such as analytics or marketing cookies, will only be used when the user has given consent, if such consent is required.

The user can consult detailed information about the use of cookies in the Cookie Policy.

27. Third-party links

The website may contain links to platforms, applications, social media, websites or third-party services.

Only Cleans does not control the privacy policies, terms, practices or security measures of such third parties.

The user should review the privacy policies of each third party before providing personal data or using their services.

28. Changes to this Privacy Policy

Only Cleans may modify this Privacy Policy to adapt it to legal, technical, operational, commercial or business structure changes.

The current version will be the version published on the website at any given time.

Where changes are relevant, Only Cleans may inform the user by reasonable means, especially if they affect existing processing activities.

29. Relationship with other legal documents

This Privacy Policy is complemented by:

• Legal Notice.
• Cookie Policy.
• Terms & Conditions of Service.
• Complaint Forms page, if applicable.

In the event of contradiction between documents, the specific document applicable to the relevant matter shall prevail, without prejudice to the rights recognized by applicable regulations.

30. Privacy contact

For any query related to this Privacy Policy or the processing of personal data, the user may contact Only Cleans through:

Email: onlycleanscostadelsol@gmail.com Phone / WhatsApp: [PHONE / WHATSAPP] Address: [ADDRESS, IF APPLICABLE]