Privacy Policy

1. Who we are and contact

1.1 Accelur8 Ltd is a company registered in the United Kingdom, trading from Cwmbran, Wales. We provide SparkOps, a cleaning operations system for small UK cleaning businesses. We act as controller for personal data about our website visitors, prospective customers, business contacts and our own customer account and billing contacts. Add our company number and registered office address before publication.

1.2 Contact us about this policy or your personal data at support@accelur8.com. Our website is https://www.accelur8.com. We will verify your identity where reasonably necessary before acting on a request.

1.3 We handle data under the UK GDPR, Data Protection Act 2018 and applicable privacy law. This policy covers website visits, enquiries, waitlist sign‑ups, calls, customer relationships and communications.

2. Whose data this policy covers

2.1 This policy covers website visitors, people making enquiries or joining a waitlist, prospective and current business customers, customer account administrators and billing contacts, people booking calls, and people who communicate with us by email or other business channels.

2.2 It does not set out our processing of the personal data that a SparkOps customer enters about their own customers, cleaners or staff. In that context, the customer is generally the controller and Accelur8 Ltd is its processor. See clause 13 and the SparkOps Terms of Service for that arrangement.

3. Personal data we collect

3.1 Website use may provide device, browser and network details, approximate location, pages and links visited, referral, timestamps, cookie identifiers and security or diagnostic logs.

3.2 Enquiry and waitlist forms may collect your name, business contact details, role, business type or size, needs, current processes, interest in SparkOps and answers about your business. We use these to respond, assess fit and improve our offer. Do not include sensitive details unless requested with an explanation.

3.3 For customers, we collect business and contact details, account and billing contacts, subscription and onboarding information, support messages, payment status, invoices and transaction references. Stripe or PayPal processes payments; we generally receive confirmation and limited payment details, not full card credentials.

3.4 Call bookings include contact details, requested time, your notes, attendance and follow‑up. We will notify you and explain the choice before recording any call.

3.5 We retain email and support correspondence and may receive delivery, bounce, open or link‑click information where enabled and lawful, to administer and assess communications.

3.6 With your choices, cookies, pixels and similar technologies may collect online identifiers, browser and page activity, preferences and advert interactions for analytics and advertising measurement.

3.7 We may receive business contact details from public sources, referrals or colleagues. We do not intentionally collect special category or criminal offence data through marketing forms; if sent, we handle it only where necessary and lawful.

4. How we use personal data and lawful bases

4.1 We use personal data on these bases, as applicable:

• Enquiries, calls and pre‑contract steps: steps at your request before a contract, or legitimate interests in responding to business enquiries.
• Accounts, onboarding, support and subscriptions: contract performance or pre‑contract steps.
• Payments, invoices and records: contract performance, legal obligations and legitimate interests in managing our business.
• Website operation, security, troubleshooting and fraud prevention: legitimate interests and, where applicable, legal obligations.
• Non‑essential analytics and advertising measurement: consent where required by PECR and data protection law; you can change your choice.
• Marketing: consent where required, or legitimate interests in promoting similar services to existing business contacts where PECR permits.
• Business relationship management, feedback and claims: legitimate interests, legal obligations or legal claims, as applicable.

4.2 Our legitimate interests are to operate, protect and improve our business and maintain customer relationships. We consider impacts on individuals; you may object under clause 11.

4.3 If we need personal data to enter or perform a contract or meet a legal obligation, and you do not provide it, we may be unable to provide the requested service, process payment or respond fully. We will explain when particular information is necessary.

5. Marketing and communications

5.1 We send business marketing by email only with consent or another PECR permission. For existing customers, we may promote similar services where lawful and where you had a clear opt‑out when details were collected and in each message.

5.2 Emails include an unsubscribe or preference option. You can also contact support@accelur8.com. We will stop the relevant marketing promptly and may retain a minimal suppression record to honour your choice.

5.4 We do not sell personal data or provide it to other organisations for their own direct marketing.

6. Cookies and similar technologies

6.1 Cookies are small files placed on your device. Similar technologies include pixels, tags and local storage. Some are necessary for core website functions, security and remembering your privacy choices. Other technologies may support analytics or advertising measurement.

6.2 We seek your consent before using non‑essential analytics or advertising cookies and pixels where required by PECR. You can accept, reject or adjust non‑essential categories through the consent interface where available. You can also manage cookies in your browser, although blocking necessary cookies may affect website functions.

6.3 Analytics technologies help us understand visits and improve the website. Advertising pixels may record that a page or event was viewed and help measure whether an advertisement led to a visit or enquiry. Depending on the service and your consent, this information may be combined with online identifiers or other information held by the relevant provider.

6.4 Cookie durations and providers may change as we update our website. The consent interface should show the current categories and choices. If a cookie or tracker is not essential, it will remain disabled unless you consent where required.

7. Sharing personal data

7.1 We share data only as needed for this policy's purposes, under appropriate arrangements or where law requires. Providers may support hosting and technical infrastructure, customer management and communications, email delivery, support, analytics, advertising measurement and payments; we also use professional advisers.

7.2 Stripe and PayPal process payments. They may be separate controllers for some payment activities under their own privacy information. We receive details needed to confirm payment, administer subscriptions and keep records, and do not control their independent processing.

7.3 We may disclose data to authorities where legally required or needed to protect rights, safety or systems. In a business transfer, it may be shared with advisers and a successor under confidentiality and legal safeguards. Processors must protect data and use it only as authorised.

8. International transfers

8.1 Providers or support teams may process data outside the UK. We use a lawful transfer mechanism, such as UK adequacy regulations or an approved transfer agreement or addendum, and supplementary safeguards where required.

8.2 Contact support@accelur8.com for safeguard information. We may withhold security‑sensitive details while describing protections meaningfully.

9. How long we keep personal data

9.1 We keep personal data only for as long as reasonably necessary for the purpose collected, including legal, accounting, security and dispute‑resolution requirements. Actual retention may vary where a legal hold, complaint or investigation applies.

• Enquiry and prospective‑customer records: normally 24 months after the last substantive interaction, unless you ask us to delete them earlier and we have no lawful reason to retain them.
• Waitlist details: until you withdraw, the service launches or the waitlist closes, then normally no more than 24 months after closure unless you become a customer or another lawful reason applies.
• Customer account, onboarding and contract administration information: for the contract term and normally 6 years after it ends to manage claims and business records.
• Invoices and accounting records: normally 6 years after the end of the relevant financial year, or longer where a legal obligation requires.
• Call booking and meeting notes: normally 12 months after the call, unless the notes become part of a customer relationship or a dispute.
• Support correspondence: normally 24 months after the ticket is closed, unless needed for a continuing issue, legal claim or security investigation.
• Marketing email engagement data: normally 24 months after the last engagement or until you unsubscribe, except minimal suppression data retained to honour your preference.
• Website security and diagnostic logs: normally 12 months, with longer retention for a specific security incident or legal requirement.

9.2 For customers, we will return or delete it within 30 days of a verified request after termination, subject to legal retention requirements and routine backup deletion. The customer determines its own operational retention period.

9.3 When no longer needed, data is deleted, anonymised or isolated for legal or security reasons. Protected backup copies may persist until overwritten and are not used routinely.

10. Security

10.1 We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. Measures may include access controls, authentication, encryption in transit where supported, secure infrastructure configuration, backups, logging, monitoring, incident response, staff confidentiality and security practices, and controlled access removal.

10.2 No system is completely secure. Use a strong, unique password and contact us promptly if you suspect compromise.

11. Your privacy rights

11.1 Subject to the conditions and exemptions in UK data protection law, you may have the right to ask us for access to your personal data, correction of inaccurate data, deletion, restriction of processing, or a portable copy. You may also object to processing based on legitimate interests, including direct marketing, and withdraw consent at any time where processing relies on consent.

11.2 To exercise a right, email support@accelur8.com and describe your request. Please tell us enough to identify the relevant account or communication. We may ask for information to verify your identity or clarify the request. We aim to respond within the statutory period, normally one month, subject to lawful extensions for complex or multiple requests.

11.3 If you withdraw consent, this does not affect processing carried out before withdrawal. If you object to or ask us to erase information, we may retain data where a legal exemption or another lawful basis applies. We will explain our decision.

11.4 If your request concerns personal data controlled by a SparkOps customer, please contact that customer first. We will assist the customer as required by our processing agreement and will not determine the customer's response unless the law requires us to do so.

12. Automated decisions and children

12.1 We do not make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects.

12.2 Our services are for businesses, not children. If you believe a child has sent us personal data, contact us so we can take appropriate action.

13. Client data processed for customers

13.1 A SparkOps customer may enter its clients', cleaners' and staff details, including names, addresses, access codes, notes, rotas, actual hours and payroll exports. The customer generally decides why and how this data is processed and acts as controller. Accelur8 Ltd processes it on documented instructions as processor to provide, secure and support SparkOps.

13.2 The customer is responsible for having a lawful basis, giving privacy notices, managing permissions and access, ensuring information is accurate, setting retention, responding to individuals' rights and ensuring its use of access codes and staff information is lawful. The customer must not enter special category or criminal offence data unless it has established the required legal basis and safeguards and has agreed appropriate protections with us.

13.3 The processing terms, including security, sub‑processors, assistance, international transfers, breach notices and data return or deletion, are set out in Schedule 1 to the SparkOps Terms of Service. If you are an individual whose information has been entered by a cleaning business, contact that business about your rights. We will support the customer as required by the processing agreement.

13.4 This policy does not make us a controller of customer operational data merely because it is stored in SparkOps. We may separately act as controller for limited account administration, billing and support contact details as described in this policy.

14. Complaints and policy changes

14.1 Please contact us first at support@accelur8.com if you have a concern about how we use your personal data. We will consider it and respond. You also have the right to complain to the Information Commissioner's Office. Its public website is ico.org.uk.

14.2 We may update this policy to reflect changes in our practices, services or legal requirements. We will post the revised policy on our website and update the last‑updated date. If a change materially affects how we use existing personal data, we will provide additional notice where required by law.

14.3 This policy is a draft for review and does not state that its contents have been legally verified. Before publication, confirm that the described processing, service providers, cookie settings, transfer safeguards, contact details and retention periods match actual practice.