Privacy policy

Last updated: 26 August 2026

1. Introduction

This privacy policy explains how CleaningQA collects, uses and protects personal data when you use our website and services. If you have any questions, contact us at hello@cleaningqa.com.

2. Data controller

CleaningQA is a trading name of Sequence SEO Ltd. The data controller is Sequence SEO Ltd (company number 14676725), registered at 66 Rhodfa Lewis, Old St Melons, Cardiff.

3. Information we process

  • Account information — your name, email address, organisation name and region, and your role within that organisation.
  • Operational records — the inspections, corrective actions, verification history, photographs and reports your team creates while using CleaningQA. These are business records of the service and are kept while your account is active.
  • Billing information — your subscription status, currency and the references Paddle gives us. Paddle handles the payment itself.
  • Optional acquisition analytics — only if you allow analytics.

4. How we use this information

  • To provide and maintain the service
  • To communicate with you about your account and support requests
  • To process billing and tax obligations through Paddle
  • To keep the service secure and to meet legal obligations
  • To understand, with your permission, how people find CleaningQA and how new customers get started

5. Analytics and your choice

We use our own first-party analytics. We do not use third-party advertising trackers and we do not sell your data.

If you choose “Allow analytics”, we create a random identifier in your browser and record the page you were on when tracking started, the referring website domain and any campaign tags in the link you followed. We use this to see which pages bring people to CleaningQA and how many of those visitors go on to sign up and use the product. Nothing is created before you choose, so if you allow analytics later, the record starts from that point rather than from your original arrival.

You can withdraw permission at any time through , which takes the same single click as giving it. When you withdraw, we stop collecting optional analytics, remove the analytics values from your browser and delete the acquisition records held against that identifier. Records we need to run the service — your account, organisation, inspections, corrective actions, reports, billing and security records — are kept, because they are not optional analytics.

See our UK storage policy or US storage policy for the full list of what is stored in your browser.

6. Service providers

We do not sell personal data. We share data with the providers who help us run the platform:

  • Lovable — application hosting and infrastructure.
  • Supabase — database, authentication and file storage for your operational data and evidence.
  • Paddle — Merchant of Record for subscriptions: checkout, payments, invoices and tax.
  • Email delivery provider — sending account, invitation and workflow notification emails.
  • Where required by law or to protect our rights.

The same list appears on our Security & data page. Analytics is run by us, not by an external analytics company.

7. Billing data

When you subscribe, Paddle collects and processes your payment method, billing address and transaction history. We store a reference to your Paddle customer and subscription IDs, your selected currency and your subscription status. We do not store complete payment card numbers.

8. Your rights

Depending on your location, you may have the right to access, correct, delete or restrict the use of your personal data, and to object to certain processing. Contact us to exercise these rights. You can change your analytics choice yourself at any time through Cookie settings.

9. Retention

We keep your account and operational records for as long as your account is active, and for a reasonable period afterwards to comply with legal, tax and accounting obligations. Billing records are retained for at least six years as required by UK law. Analytics records are kept only while you allow analytics, and are deleted when you withdraw that permission.