This Privacy Policy explains how 3CYCLE LTD ("we", "us", "our") collects, uses, and protects your personal data when you visit 3cycle.co.uk or book our window cleaning services. We process your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

1.1. 3CYCLE LTD is the data controller responsible for your personal data.

1.2. Contact: info@3cycle.co.uk · 07846 967122

2. Data We Collect

2.1. Information you provide

Booking details: name, email, phone number, postcode and service address, property type, number of bedrooms, floor level, and any service notes you share.
Payment information: processed entirely by Stripe — we never see or store your full card number.
Communications: any message you send us via email, phone, or contact form.

2.2. Information collected automatically

Technical data: IP address, browser type, device type, and operating system.
Usage data: pages visited, time on site, and how you reached our site — only if you have accepted analytics cookies.
Cookies: see our cookie banner. You can review your choices at any time via the "Cookie preferences" link in the footer.

3. How We Use Your Data

3.1. We use your personal data for the following purposes and under the following legal bases:

To deliver our services (contract): scheduling visits, processing payments, contacting you about your booking.
To run our business (legitimate interest): customer support, fraud prevention, service improvement.
To comply with the law (legal obligation): tax, accounting, and other statutory record-keeping.
Analytics and marketing (consent): only if you accept analytics cookies via our cookie banner. You can withdraw consent at any time.

4. Sharing Your Data

4.1. We never sell your data. We share it only with the following trusted processors who help us operate the service:

Stripe — payment processing. Stripe Privacy Policy.
Calendly — scheduling. Calendly Privacy Policy.
Google Analytics — anonymised site usage statistics, only with your consent. Google Privacy Policy.
Railway — infrastructure and hosting. Railway Privacy Policy.
Microsoft 365 — email communications. Microsoft Privacy Statement.

4.2. We may disclose your data if required by law, court order, or to protect our legal rights.

5. International Transfers

5.1. Some of our processors (e.g. Stripe, Google) may transfer data outside the UK. Where this happens, transfers are protected by Standard Contractual Clauses, UK Addendum, or adequacy decisions, as required by UK GDPR.

6. How Long We Keep Your Data

Booking and customer records: 6 years after your last booking, to meet UK tax and accounting obligations.
Payment records: retained by Stripe under their own retention policy; we only keep the transaction reference.
Marketing data and cookies: until you withdraw consent or 12 months, whichever is sooner.
Email correspondence: up to 3 years from the last interaction.

7. Your Rights

7.1. Under UK GDPR you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data (subject to legal retention requirements).
Restrict or object to certain processing.
Request a portable copy of your data.
Withdraw consent at any time where processing is based on consent.

7.2. To exercise any of these rights, email info@3cycle.co.uk. We respond within one calendar month.

8. Cookies

8.1. We use a small number of essential cookies to run the site (e.g. session cookies for the booking flow). These cannot be disabled.

8.2. We use Google Analytics only when you opt in via our cookie banner. No tracking cookies are loaded until you accept them.

8.3. You can review or change your cookie preferences at any time by clicking "Cookie preferences" in the footer.

9. Security

9.1. We use HTTPS for every page, store passwords with industry-standard hashing (scrypt with per-user salts), and route all payments through PCI-compliant Stripe Checkout. We never store full card numbers on our servers.

9.2. No system is fully immune to breach. If a personal data breach occurs that affects your rights, we will notify you and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it.

10. Children

10.1. Our services are intended for adults aged 18 or over. We do not knowingly collect data from children under 13. If you believe we have done so, please contact us and we will delete it.

11. Changes to This Policy

11.1. We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated to active customers by email.

12. Complaints

12.1. If you are unhappy with how we handle your personal data, please contact us first at info@3cycle.co.uk.

12.2. You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 · ico.org.uk

For any questions regarding this Privacy Policy, please contact us at info@3cycle.co.uk or 07846 967122.