Privacy & Data Protection Notice
Last updated: October 2026 • TuumWorks UK Ltd (Registered in England & Wales)
1. Introduction & Overview
TuumWorks UK Ltd ("TuumWorks", "we", "us", "our") is committed to protecting the privacy and confidentiality of individuals who submit cleaning requests ("Customers") and cleaning service providers who register to quote ("Professionals").
This notice explains how we collect, store, process, and protect personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. The TuumWorks Contact Masking Vault
A core principle of TuumWorks is preventing spam calls and uncontrolled dissemination of customer personal data. When a customer posts a cleaning enquiry:
- Phone Number & Email: Kept strictly hidden and encrypted in our Contact Vault. Neither the general public nor unverified users can view customer contact details.
- Public Lead Card: Displays only non-identifying job requirements: the service category, postcode district, property specifications, preferred date, and description snippet.
- Strict 3-Unlock Cap: Only a maximum of 3 verified cleaning professionals who spend lead credits are permitted to access customer contact information to submit a quote.
3. Data We Collect
We may collect and process the following categories of personal information:
From Customers:
- Full name and contact telephone number
- Email address for quote confirmation receipts
- Property address / postal code
- Job instructions, cleaning notes, and photos
From Professionals:
- Business name, trading address, and contact details
- Self-declared legal Right to Work status and optional 9-character Home Office Share Code
- Public Liability Insurance and DBS declaration status
- Credit purchase billing records (processed securely via Stripe)
UK GDPR Data Minimisation: Right to Work & Home Office Share Codes
In accordance with the UK GDPR principle of Data Minimisation (Article 5(1)(c)), TuumWorks does not store copies of passports, biometric residence permits (BRPs), or immigration visas on public servers. Where applicable, independent professionals may provide their official 9-character UK Home Office Share Code directly to customers so verification takes place exclusively on the official UK Government portal (right-to-work.service.gov.uk).
4. Lawful Basis for Processing
We process your personal data under the following legal bases:
- Contract Performance: To match customer cleaning enquiries with local cleaning providers and facilitate direct quotes.
- Legitimate Interests: To prevent fraud, detect abusive behavior, and ensure marketplace safety.
- Legal Obligation: To maintain accounting records and comply with UK statutory regulations.
5. Your Legal Rights Under UK GDPR
You have the following statutory rights regarding your personal data:
- Right of Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete information.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your contact data from our active databases.
- Right to Restrict or Object to Processing: Limit how we process your personal data.
To exercise any of these rights, contact our Data Protection Officer at: dpo@tuumworks.co.uk
TuumWorks UK Ltd is registered with the Information Commissioner's Office (ICO). You have the right to lodge a complaint with the ICO at ico.org.uk if you believe your data has been handled contrary to UK law.