Privacy policy

Last updated: September 2026

Who we are

Your World Solutions (“YWS”, “we”, “us”) is a UK-registered property services provider. We deliver cleaning, maintenance, trades, removals and related services to homes, offices and tenancies. Our head office is at 143 Caravel House, 22 Royal Crest Avenue, London, E16 2TD. For data-protection purposes we are the data controller.

If you want to contact our Data Protection Officer, email team@yourworldsolutions.com with the subject line “For the DPO”. We aim to respond within one working week.

What data we collect

We collect personal data in three ways: data you give us, data collected automatically, and data created when you use our service.

Data you give us

• Account: email, password (hashed), first/last name, phone.
• Booking: service requested, property size, address, scheduled date/time, add-ons, notes for the tradesperson.
• Payments: card details are tokenised and held by our payment processor. We never see or store the long card number.
• Communication: messages you send us, review text.
• Enquiries: if you ask for a quote or send us a message without booking, we keep your name, email, phone, postcode and what you told us about the job — including any photos you upload — so we can quote and follow it up. If you go ahead and book, these details carry over to your booking.

Data we collect automatically

• IP address, browser type, pages viewed.
• Referrer (which site you came from) for marketing attribution.
• Cookies (see below) for sign-in and analytics.

Data created through your use

• Job history, status transitions, payment events.
• Audit log entries for security and dispute resolution.

Children’s data: Our service is for adults. We do not knowingly collect personal data from anyone under 16. If a parent or guardian believes a child has used our site or provided personal data, please contact team@yourworldsolutions.com and we will delete the information within 7 days.

Why we use it (lawful bases)

Under UK GDPR we must have a lawful basis for each piece of processing. The bases we rely on are:

• Performance of a contract — booking scheduling, payment, the actual delivery of the service.
• Legitimate interests — operational improvement, fraud prevention, marketing attribution, and audit logging.
• Legitimate interests — answering your enquiry and quoting for a job before you have booked anything. We keep your enquiry details only while the quote is live and for a reasonable period afterwards, in case you come back to it.
• Consent — marketing communications (email / SMS). You can withdraw consent at any time; update your preferences.
• Legal obligation — keeping tax records for HMRC (typically 6 years).

Who we share it with

We share the minimum data needed to deliver your booking with our in-house team. We never sell your data.

We use a small number of trusted service providers to run our business — payment processing, transactional email, SMS notifications, file storage, and website hosting. They only ever see the data needed for the job they do for us, and they are not allowed to use it for their own purposes. The full list is available on request to team@yourworldsolutions.com.

If anything on the list changes — for example, we swap one provider for another — we update this page. Active customers are emailed about material changes.

How long we keep it

We hold data for the minimum time needed, then delete or anonymise it:

• Active customer account — until you delete it.
• Booking records — 7 years (HMRC requirement for VAT-registered businesses).
• Payment metadata (amount, last 4, date) — 7 years.
• Marketing consent record — until you withdraw, then retained as a single timestamp proving the withdrawal (so we don’t accidentally re-add you).
• Audit log — 5 years for security / dispute resolution.
• Support emails — 2 years, then anonymised.
• Enquiries that never became a booking — 12 months, then anonymised. If you book, the enquiry details become booking records and follow the 7-year HMRC retention instead.

Your rights

Under UK GDPR you have the right to:

• Access — request a copy of everything we hold on you.
• Rectification — correct anything wrong.
• Erasure — ask us to delete your data (“right to be forgotten”).
• Restrict — ask us to stop processing while we work something out.
• Portability — receive your data in a machine-readable format.
• Object — to processing based on legitimate interests.

To exercise any of these, use the controls in your account or email team@yourworldsolutions.com. We’ll respond within one calendar month. If you’re unhappy with our response you can complain to the Information Commissioner’s Office.

Cookies

We use essential cookies (sign-in, CSRF protection) and, with your consent, a privacy-respecting analytics service that tracks page views without cookies and without collecting personal data. We do not use advertising cookies and we do not let third parties track you across other sites. You can change your choice any time using the cookie banner at the bottom of any page.

International transfers

Some of our service providers may transfer or store your data outside the UK as part of delivering their service to us. Where that happens, we rely on the provider’s own UK GDPR safeguards (UK adequacy regulations or the EU Standard Contractual Clauses) to protect it.

Automated decisions

We do not use automated decision-making that produces legal effects on you. Any automation we run (for example, estimating job duration or flagging a booking that needs a manual quote) is reviewed by a person before the booking is confirmed. You always have the right to ask for a human review of any decision. Email team@yourworldsolutions.com with “Human review” in the subject line.

If something goes wrong

If we suffer a personal-data breach that is likely to result in a high risk to your rights, we will notify affected customers within 72 hours of becoming aware of it — alongside our report to the ICO. The notification will explain what data was affected, what we’re doing about it, and what you can do (e.g. change your password if your account was involved). We document every breach — even the small ones — in an internal incident register.

What we do if this policy changes

Material changes will be posted here and we’ll email active customers. The “last updated” date at the top of this page shows when it was last reviewed.