Privacy Policy

James Perry and Kathryn Caterer trading in partnership as The Trusted Cleaners Guild (TCG), 7 Moor Valley Close, Sheffield, S20 5DZ, UK, are the intended data controllers for TCG operations. Contact channel: `[OWNER TO CONFIRM]`.

TCG processes account, application, membership, billing preference, payment-status, business-profile, verification, enquiry, review, complaint, CRM prospect and Website Services data to operate the Guild, perform contracts, pursue legitimate interests in operating a trustworthy directory, meet legal obligations and, where required, act on consent. Special-category or criminal-offence information is not sought routinely. DBS evidence is checked only where legitimately offered and should be minimised: record the check type/date/outcome, then delete certificate imagery as soon as practicable and ordinarily within 30 days after the check. Public profiles never show private documents, policy numbers, DBS numbers, complaint files or operator notes.

Reviews publish under the Review Policy; reviewer email is retained as a one-way privacy-protecting hash. Businesses may respond publicly. Reports and complaints are private. Customer enquiries are shared only with the selected business and authorised operators. Imported prospect data remains private CRM data and is never membership or directory data; it is used only for proportionate B2B prospecting subject to suppression and objection rights.

Website Projects may contain branding, imagery, domain and access metadata. Customers retain domain ownership and must not submit registrar master passwords through TCG. Future payment processing will be handled by the selected payment provider; TCG should not store full card details. `[LEGAL REVIEW: insert final Stripe role and privacy link only when connected.]`

Access is restricted by role. TCG uses appropriate hosting, backup, logging, authentication and audit controls, but no system can be guaranteed risk-free. Processors may include hosting, email, payments and operational tools actually selected at launch. `[OWNER: insert definitive provider list and international-transfer safeguards.]`

Draft retention: membership/payment records six years; evidence while needed and normally 12 months after membership ends; superseded evidence 12 months; complaints six years; general enquiries 24 months; email delivery logs 14 days; prospect CRM reviewed annually. Legal holds, disputes and statutory requirements may justify longer retention. Data subjects may request access, correction, erasure, restriction, objection or portability where applicable and may complain to the ICO. Identity verification may be required before fulfilling a request.

Policy version 2026-08-28-v1 · Owner-approved TCG policy. This document has not been described as independently solicitor-advised.