Terms & Conditions and Privacy Policies

Last updated: January 2026

This document sets out the core legal and compliance policies of Excelsa Cleaning Limited (“we”, “us”, “our”).

Home   >   Privacy Policies

Quick Navigation

1. Company Information

a)       Company Name: Excelsa Cleaning Limited

b)       Registered Jurisdiction: England and Wales

c)       Business Activity: Commercial and domestic cleaning services

d)       Contact Email: info@excelsacleaning.co.uk

e)       Registered Office: 48 Oak Street, Burnley, BB12 6QZ

2. Privacy Policy (UK GDPR & Data Protection Act 2018)

2.1 Our Commitment to Privacy

 

Excelsa Cleaning Limited is committed to protecting the privacy and personal data of our clients, employees, contractors, suppliers, and website users. We process personal data in accordance with:
a)       UK General Data Protection Regulation (UK GDPR)
b)       Data Protection Act 2018
c)       Privacy and Electronic Communications Regulations (PECR)

 

2.2 Personal Data We Collect

 

We may collect and process the following categories of personal data:
a)       Identity data (name, job title, company name)
b)       Contact data (email address, telephone number, postal address)
c)       Contractual and billing data (invoices, payment records)
d)       Website usage data (IP address, browser type, pages visited)
e)       Recruitment data (CVs, references, right-to-work documentation)
f)         Operational data relating to cleaning services delivered
We do not knowingly collect data from children.

 

2.3 Lawful Bases for Processing

 

We process personal data under one or more of the following lawful bases:
a)       Performance of a contract
b)       Legal obligation
c)       Legitimate interests (e.g. service improvement, business administration)
d)       Consent (where required)

3. GDPR Compliance Statement

Excelsa Cleaning Limited acts as a Data Controller for personal data collected through its website and business operations.
We ensure GDPR compliance through:
a)       Data minimisation principles
b)       Staff training and confidentiality obligations
c)       Secure data storage and access controls
d)       Written contracts with data processors
e)       Breach detection and reporting procedures
Any personal data breach will be assessed and reported to the ICO within 72 hours where required by law.