Home | BrightTouch Cleaners
BrightTouch Cleaners
BrightTouch Cleaners  24/7
Book / Get Quote
  Privacy & Data

Privacy Policy

We are committed to protecting your personal information. This policy explains what data we collect, why we collect it, how we use it, and the rights you have over it.

Last updated: Nairobi, Kenya Kenyan Law
01

Who We Are

BrightTouch Cleaners is a professional cleaning and facilities services company operating in Nairobi, Kenya. We provide home cleaning, commercial cleaning, housekeeping, gardening, floor restoration, pest control, vehicle cleaning and related services.

For the purposes of this Privacy Policy, BrightTouch Cleaners is the data controller — meaning we are responsible for deciding how and why your personal data is collected and used. If you have any questions about this policy or how we handle your data, please contact us using the details in Section 9.


02

What Personal Data We Collect

We only collect personal data that is necessary for us to provide our services and communicate with you effectively. The categories of data we may collect include:

Category Examples
Identity Data Full name, company name (where applicable)
Contact Data Phone number, WhatsApp number, email address, physical address
Property Data Property type, size, location, access instructions
Transaction Data Services booked, payment method, payment records, invoices
Communication Data Messages sent via WhatsApp, email, our contact form or phone
Technical Data IP address, browser type, device type, pages visited, time on site (collected via cookies)
Feedback Data Reviews, satisfaction ratings, complaints and enquiry records

We do not collect sensitive personal data such as national ID numbers, financial account credentials, health information or biometric data. We do not knowingly collect data from children under the age of 18.


03

How We Collect Your Data

We collect personal data through the following means:

Directly from you

Automatically

From third parties


04

How We Use Your Data

We use your personal data only for legitimate purposes and only to the extent necessary. The table below sets out what we use your data for and our legal basis for doing so:

Purpose Legal Basis
Responding to enquiries and providing quotes Legitimate interest / Pre-contractual steps
Confirming, scheduling and managing service bookings Performance of a contract
Processing payments and issuing invoices Performance of a contract / Legal obligation
Communicating service updates, reminders and aftercare Performance of a contract / Legitimate interest
Handling complaints, refunds and service rectifications Performance of a contract / Legal obligation
Sending promotional messages and service updates (opt-in only) Consent
Improving our website and service delivery Legitimate interest
Complying with legal and regulatory requirements Legal obligation

We will never use your personal data for purposes that are incompatible with the original reason it was collected, and we will not sell your data to third parties for their own marketing use.


05

Who We Share Your Data With

We do not sell, rent or trade your personal data. We may share your information only in the following limited circumstances:

Service delivery partners

Where a service is delivered in full or in part by a vetted sub-contractor, we may share your name, contact details and property address with them solely for the purpose of completing your booking. All sub-contractors are bound by confidentiality obligations.

Technology and communication tools

We use third-party platforms to operate our business — including WhatsApp (Meta), email providers, and website hosting services. These platforms may process your data as part of delivering their service to us. We only use reputable providers with appropriate data protection measures in place.

Payment processors

Where payments are made electronically (e.g. via M-Pesa or bank transfer), your transaction data is processed by the relevant payment provider. We do not store full payment credentials on our systems.

Legal and regulatory authorities

We may disclose your personal data where we are required to do so by law, court order, or in response to a lawful request from a government or regulatory authority in Kenya.

We do not transfer your personal data outside of Kenya except where required to use internationally-hosted platforms (such as email or WhatsApp). In those cases we take reasonable steps to ensure your data is handled securely.


06

How Long We Keep Your Data

We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our general retention periods are:

Data Type Retention Period
Booking & transaction records 7 years (for financial and tax compliance purposes)
Client contact details 3 years from the date of last interaction
Enquiries that did not lead to a booking 12 months from the date of enquiry
Complaint and dispute records 5 years from the date of resolution
Marketing preferences & consent records Until consent is withdrawn, then deleted within 30 days
Website analytics / cookies As set by the respective cookie — typically 30 days to 2 years

When data is no longer required, we securely delete or anonymise it so that it can no longer be associated with you.


07

Your Data Rights

You have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us using the details in Section 9. We will respond within 30 days.

Right of Access

You can request a copy of the personal data we hold about you at any time.

Right to Rectification

If any data we hold about you is inaccurate or incomplete, you can ask us to correct it.

Right to Erasure

You can ask us to delete your personal data where we no longer have a lawful basis to hold it.

Right to Object

You can object to us processing your data for marketing purposes at any time — we will stop immediately.

Right to Restrict Processing

In certain circumstances, you can ask us to limit how we use your data while a query is resolved.

Right to Data Portability

You can request that we provide your data in a structured, commonly used format so you can transfer it elsewhere.

Some rights may be limited where we have a legal obligation to retain certain data (for example, financial records). We will always tell you if we are unable to fulfil a request and explain why.


08

Cookies & Website Tracking

Our website uses cookies — small text files placed on your device — to help it function correctly, understand how visitors use the site, and improve your experience.

Types of cookies we use

Cookie Type Purpose Can Be Disabled?
Essential Required for the website to function — e.g. session management, form submissions No — site will not function without these
Analytics Help us understand how visitors navigate the site (e.g. pages visited, time on site). Data is anonymised. Yes — via your browser settings
Preference Remember settings you have chosen, such as language or region preferences Yes — via your browser settings

You can manage or disable cookies at any time through your browser settings. Please note that disabling non-essential cookies may affect your experience on our site. For more information on managing cookies, visit allaboutcookies.org.

We do not use cookies to serve third-party advertising on our website.


09

Data Security

We take the security of your personal data seriously and have put in place appropriate technical and organisational measures to protect it against unauthorised access, loss, disclosure or destruction. These include:

No method of data transmission or storage is 100% secure. If you have reason to believe that your interaction with us has been compromised, please notify us immediately using the contact details in Section 10.


10

How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to raise a concern about how we handle your personal data, please get in touch:

We will acknowledge your request within 2 business days and aim to resolve it fully within 30 days. If you are not satisfied with our response, you have the right to raise a complaint with the relevant data protection authority in Kenya.

Updates to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any updates will be posted on this page with a revised effective date. We encourage you to review this page periodically. Continued use of our website or services after an update constitutes acceptance of the revised policy.

Questions About Your Data?

Reach out directly — we're happy to explain how we handle your information or action any data request.