Who we are
Book My Cleaning ("we", "us") is a cleaning services business based in Dubai, United Arab Emirates, operating the website bookmycleaning.ae. We are the controller of the personal data described in this policy. For any privacy question or request, email info@bookmycleaning.ae.
The law we follow
We process personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the PDPL) and its implementing regulations, and other applicable UAE laws including Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes. We do not process personal data in the Dubai International Financial Centre (DIFC) or Abu Dhabi Global Market (ADGM) free zones on behalf of those jurisdictions.
What we collect
- When you book or ask for a quote: name, email, mobile number, area / community, building or villa details and unit number, the service and property details, notes you add (such as access instructions) and how you chose to pay.
- If you create an account: the same details plus a password, stored only as an encrypted one-way hash that nobody at Book My Cleaning can read.
- When you pay by card: payment is handled entirely by our payment provider (Stripe). We never see or store your full card number, expiry date or security code. We keep the amount, date and payment reference.
- Photographs of the work: cleaners may photograph rooms before and after the clean as a record of the work (see "Photographs").
- If you apply to work with us: your contact details, experience, availability, the areas you can work in, and — during hiring — copies of documents such as your Emirates ID, residence visa, work permit and good conduct certificate, which UAE law requires employers to check.
- Automatically: your IP address, browser type and basic technical logs, used to keep the site secure and prevent spam and fraud.
Why we use it and our legal basis
- To provide the clean you booked — confirmations, reminders, assigning a cleaner and giving them the address. Basis: necessary to perform our contract with you.
- To take payment, issue tax invoices and keep accounts. Basis: contract and our legal obligations, including UAE VAT record-keeping.
- To run the business safely — vetting staff, handling complaints and guarantee claims, preventing fraud and misuse. Basis: our legitimate interests and legal obligations.
- To send offers and news by email — only if you ticked the box. Basis: your consent, which you can withdraw at any time.
Marketing emails
We only send marketing email to people who have asked for it; the tick box is never pre-ticked. Every marketing email contains a one-click unsubscribe link, or you can email info@bookmycleaning.ae. Booking confirmations, reminders and invoices are part of the service and are sent regardless of your marketing choice.
Photographs
Cleaners photograph the rooms they work in, before and after, so that you and we have a record of what was done. Photos are shown only to you, your cleaner and our office, kept at full size for 60 days and then reduced to a small archive copy. We never use them in advertising without your written permission. If you prefer no photographs, say so in your booking notes.
Who we share it with
We never sell your personal data. We share only what is necessary with:
- Your assigned cleaner — your name, address, access notes and the job details.
- Service providers acting on our instructions: website and database hosting (Hostinger), email delivery (Brevo), card payments (Stripe) and, if enabled, our website chat assistant (Anthropic). Each is bound by contract to protect your data.
- Authorities where UAE law requires it, for example the Federal Tax Authority or a court or police request.
Transfers outside the UAE
Some of our service providers store or process data on servers outside the UAE (for example in the European Union or the United States). Where this happens we rely on the grounds permitted by Articles 22 and 23 of the PDPL, including transfers to countries with adequate protection and contractual safeguards that require the provider to protect your data to a standard comparable to UAE law.
How long we keep it
- Bookings, invoices and payment records: at least 5 years after the end of the tax period, as required by UAE VAT law, then deleted or anonymised.
- Accounts: until you ask us to close your account, subject to the record-keeping above.
- Enquiries that do not become bookings: 24 months.
- Job applications: 12 months after the decision, unless you join the team.
- Photographs: full size for 60 days, then a small archive copy.
Your rights
Under the PDPL you have the right to: be informed about how we process your data; access a copy of it; have inaccurate data corrected; have data erased where we no longer need it; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time. Email info@bookmycleaning.ae from the address we hold for you. We will respond within 30 days and may need to verify your identity first. If you are unhappy with our answer, you may complain to the UAE Data Office.
Cookies and similar technology
We use only what the website needs to work:
- bmc_session — keeps you signed in during a visit (essential, deleted when you close the browser).
- bmc_in — remembers that you are signed in so the header shows your account link (essential).
- Local storage sign-in token — a backup that keeps staff and customers signed in if the browser drops the session cookie (essential, up to 14 days).
We do not use advertising or tracking cookies. Our pages load fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google. If we add analytics or advertising tools in future, we will update this policy and ask for consent where required.
Security
The website runs over HTTPS. Passwords are stored as one-way hashes, access to customer data is limited to staff who need it and is logged, and card data never touches our servers. No system is completely secure; if a breach affects your data we will inform you and the UAE Data Office as the law requires.
Children
Our services and accounts are for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it.
Changes to this policy
We may update this policy. The date at the top shows the latest version; significant changes will be highlighted on this page or emailed to account holders.