MaltaClean

Privacy Policy

Last updated: 20 August 2026

1. Who we are

MaltaCleaners ("we", "us") provides home and short-let cleaning services across Malta and Gozo. You can reach us at [email protected] or +356 99962381. For any privacy matter, write to the same address with "Privacy Request" in the subject.

2. What we collect

  • Booking data: name, phone number, email, service address, booking details, and any notes you share with us (including via WhatsApp).
  • Messages: the content of messages you send us through WhatsApp or our website, handled with AI assistance (see section 4).
  • Payment status: whether a booking was paid and by which method (cash or payment link). We do not store card numbers.
  • Service photos: optional before/after photos of the cleaning, taken by our team (see section 5).
  • Website and advertising data: your cookie-consent choice; cookies and similar technologies where consent is granted; and short-lived ad click identifiers (such as Google click IDs or Meta's Click-to-WhatsApp ID) when an ad interaction leads to a booking or business chat.
  • Employee data: our team members' identity, availability, and optional check-in location during jobs (see section 6).

3. Why we use it (legal basis)

  • To provide the service you book — contract performance. Scheduling, staffing, confirming your address and access details.
  • To communicate with you — contract performance and legitimate interest. Quotes, confirmations, rescheduling, payment reminders.
  • To keep the business running — legitimate interest. Accounting, dispute resolution, service quality, and security.
  • Marketing and advertising measurement — consent where required, and legitimate interests for first-party booking attribution and aggregate campaign effectiveness where no advertising cookie or customer contact data is sent. You can withdraw consent or object to legitimate-interest processing.
  • Legal obligations — tax and employment records.

4. AI-assisted messaging

We use artificial intelligence to help our team respond to messages (quotes, scheduling, FAQs) faster and more accurately:

  • Message content may be processed by AI systems through Cloudflare AI Gateway, using providers such as OpenAI, Google (Gemini), DeepSeek, Zhipu AI, and Cloudflare Workers AI.
  • AI helps classify intent, draft replies, and extract booking details (dates, addresses). A human reviews and approves quotes, bookings, and any consequential action before it reaches you.
  • We configure our AI providers under data-processing terms and do not use your messages to train AI models.
  • AI output may be imperfect. Prices and availability shown in AI-assisted chats are confirmed by our team before a booking is finalized.

5. Service photos

Before/after photos document the quality of the work delivered. They are taken only at your property during the booked service, stored securely, and used to verify service delivery, resolve disputes, and (if you request it) share proof of service. You may ask us to skip photos or to delete them after your booking. Photos never include people unless you explicitly request it.

6. Employee location data

Our cleaning professionals may record a check-in/check-out location to confirm arrival at a job. This is optional: a booking completes normally if the employee declines GPS permission or the device has no signal. We never track employees outside of job check-in moments, and location points are stored only as arrival/departure evidence, not as continuous monitoring.

7. Who we share data with

We only share what is necessary to operate, with:

  • Hosting & storage: Cloudflare (Pages, Workers, D1, R2) — EU-accessible regions.
  • AI providers: as listed in section 4, via Cloudflare AI Gateway, under their data-processing terms.
  • WhatsApp / Meta: for business messaging you initiate and, when the chat began from a Click-to-WhatsApp ad, reporting booking lifecycle outcomes using Meta's click identifier.
  • Google Ads: completed-booking conversion measurement using the Google click identifier, booking time, booking ID, and value; no name, email, phone, or address is included in this feed.
  • Email delivery: transactional email services.
  • Payment links: Revolut (payment processing; card data stays with Revolut).
  • Professional advisors: accountant or legal counsel, when required.

We never sell your personal data.

8. How long we keep it

  • Booking and customer records: up to 6 years (accounting/tax obligations, Malta).
  • Message content: retained with your customer record while the relationship is active; archived logs are pruned on the same schedule.
  • Service photos: until you ask us to delete them, or per the booking retention schedule.
  • Employee records: per employment-law retention periods.
  • Ad click identifiers: up to 90 days; channel and ad-ID aggregates may remain with the booking record after the click identifier is removed.
  • Analytics cookies: per the Cookie Policy.

9. Your rights

Under GDPR you may request: access to your data, correction, deletion, restriction, portability, or object to processing; and withdraw consent at any time. To exercise any right, email [email protected] with "Privacy Request". We respond within 30 days. You may also complain to the Malta Information and Data Protection Commissioner (idpc.org.mt).

10. Security

Access to personal data is restricted to team members who need it, protected by authentication and encrypted transport, and monitored for errors. If a data breach affects you, we will notify you and the IDPC as required by law.

11. Changes

We may update this policy as the service evolves. The "last updated" date above reflects the current version; material changes will be announced on this page before they take effect.