We take privacy seriously.
We abide by GDPR and Data Protection regulations, feel free to read our privacy policy below. Details for any enquiries are included in the policy.
Privacy Notice
Who is this privacy notice for
This Privacy Notice applies to information we collect about businesses and their representatives who interact with Central Cleaning Services Ltd (CCSL), whether that be making enquiries about or contracting our services, providing testimonials in relation to those services or applying for advertised jobs with us. It explains what personal information may be collected and how we use it.
About Us
We are Central Cleaning Services Ltd. A UK-based registered company (registration number SC343544) specialising in providing cleaning services and solutions to business communities across Scotland. We are committed to protecting data shared with us and complying with data protection law to its fullest extent. This Privacy Notice explains how we use and protect personal information, to show that we are adhering to the Data Protection Act (DPA) 2018 and the UK General Data Protection Regulation (GDPR).
The DPA 2018 and UK GDPR requires every organisation that processes personal information to be registered with the Information Commissioner’s Office (ICO). Our registration number is ZB291793 and you can find us on the Information Commissioner’s register and search for us by using our registration number.
How to contact us
If you have any questions about how your information is used, please contact our Director, Lorraine Neilson, by email at: Lorraine@centralcleaningservicesltd.co.uk
Our address is: 19G Winchester Avenue, Denny, FK6 6QE
What Personal Information do we collect about you and how can we use this lawfully
The following sections explain the types of data we collect and the legal basis, under current data protection legislation, on which this data is processed. Most of the information we process is provided to us directly by you for one of the following reasons:
- A Service Enquiry
- Contracting our cleaning services
- Administering your account with us
- Invoicing and financial transactions
- Collecting client reviews/testimonials to evaluate and promote our services
- Health and Safety management
- Legal compliance and financial audit purposes
Service enquiry – If you enquire about our services we will collect your name, email address, telephone number, organisation you work for, your job title and your message.
This will be collected either via the website, email or telephone depending on your preferred contact method. As it is necessary for us to collect that data to enable us to respond to your enquiry in the way you would expect we have a legitimate interest in processing that data. You can request for your information to be deleted at any time; however, we might not be able to provide you with our services or a reply if you request deletion of your information.
Contracting our cleaning services – If you go on to contract our cleaning services, we will be entering into a contractual relationship with your organisation, and this is our legal basis for processing your information. We will use your contact details and any details of contacts you provide to enable us to fulfil our contractual obligations towards you. We also will process limited financial details for the purpose of invoicing and financial transactions.
Where it differs from the billing address, we may hold the delivery address(es) for contracted services.
After engaging our services, we may send you a short feedback form. The information you provide will only be used to improve our services and, where you agree, to promote our services to potential clients via our website.
Applying for a job with us
When you respond to an advertised position, either on our social media channel or Indeed, we will ask you to email the relevant recruiter and you will be sent a dedicated applicant privacy notice to you with your application pack. If you make a speculative approach to us via the website, we will hold your details for up to a year to assess your suitability for any roles that may become available.
Where we advertise roles on Facebook, we do not respond to Direct Messages (DMs) or queries within Facebook’s messaging system. All role advertisements must be responded to via the published email address.
Sources of information
Your information may be sourced directly from you or your representative when you contact us. This information will be captured from enquiries and requests for services details.
Who may we share your information with
We, like many businesses, work in partnership with a number of third-party suppliers:
| Partner | Purpose | Location |
|---|---|---|
| 2-evolve / Microsoft | Provision of IT services to CCSL | Our outsourced IT provider, 2‑evolve, manages and hosts encrypted files on Microsoft’s secure on-premises and cloud infrastructure. All data is protected using industry-standard encryption both in transit and at rest. |
| Microsoft | Microsoft provides a wide array of products and services which we use to administer our services and client accounts | Microsoft’s commitment to data protection is grounded in privacy‑by‑design and stringent guardian controls: all data is protected in transit and at rest via strong encryption, ISO/IEC 27018/27001/27701 certifications, thorough governance oversight, and limited sub‑processor use under strict contractual agreements. They maintain transparency over data residency. Businesses choose data storage regions and we have ensured that data is only processed in the UK. |
| SAGE | Software for payroll and accounting purposes | Sage operates under strict data protection controls — for further details on how they handle personal data, see their privacy notice at Sage Privacy Notice. |
| Dickson Middleton | Accountants | We engage Dickson Middleton, a UK-based chartered accountancy firm, to provide accounting, and related financial services on our behalf. They may access and process your personal data as our data processor under UK GDPR. For details on how they handle personal data, see their privacy notice |
| Royal Bank of Scotland | Banking Services including invoice payments | We use Royal Bank of Scotland (RBS) for general banking services including invoice payments to suppliers. RBS processes personal data such as account details and payment information within secure, encrypted systems that comply with recognised financial and data protection standards. |
| Lyrecol | Provision of cleaning materials and PPE direct to client sites | We use Lyreco, a UK‑based provider of workplace supplies including cleaning materials and personal protective equipment, to deliver certain products directly to our clients’ premises. To enable these deliveries, we may share the relevant client contact details and business address with Lyreco solely for the purpose of arranging and completing the delivery. Lyreco supplies a wide range of workplace products, including cleaning and hygiene solutions and personal protective equipment, as part of their workplace solutions offering |
Outside of our contracted suppliers we will only share your information where we may be legally required to do so, e.g. to HMRC.
How long we keep your data
We take the principles of data minimisation seriously and ensure that we only ever ask for the minimum amount of data for the associated purpose and delete that data once it is no longer required.
We have long-term relationships with most of our clients, who engage us on a continuous basis. We also have clients who return to us on a repeat basis for shorter-term engagements. We therefore maintain client details for seven years after a contract cessation for financial audit purposes.
Security
We ensure that your information is kept safe and secure and have appropriate technical and organisational security measures in place to protect the limited amount of identifiable data that we do hold. This includes implementing Multi-Factor Authentication across our Head Office digital environment.
Where we outsource data processing, we ensure that robust and appropriate contracts are in place and of course, we excel at exacting rigorous due diligence on our suppliers.
Rights you have over your data
You have a number of rights under UK data protection law. These are listed below, along with our contact details, should you wish to make a request.
- Informed: You have the right to be informed about how we handle your personal data. This privacy statement is one of the ways we do this.
- Access: You have the right to ask for a copy of the personal data we hold about you and the purposes for which we are using it. ‘Personal data’ is any information which can directly, or indirectly, identify you.
- Rectification: You have the right to ask us to change any details that we hold which are incorrect, inaccurate or need updating.
- Erasure (known as the ‘right to be forgotten’): You have the right to ask us to delete your personal details under certain circumstances. We will assess any deletion request on a case-by-case basis. In some circumstances there may be overriding lawful reasons why we need to keep information about you.
- Object: You have the right to raise an objection about how we are handling your personal information where it is processed in support of our (or a third party’s) legitimate interest and you believe that processing infringes your data protection rights and freedoms.
- Restriction: You have the right to ask us to restrict or suppress your personal information whilst we investigate any concerns about how we use your information. This would mean we’d store it but not use it.
- Portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
You also have the right to make a complaint if you believe we have not handled your information appropriately. We would prefer that you contact us in the first instance so we can discuss your concerns and put things right, but you also have the right to escalate your concerns at any time to the UK Regulator (The Information Commissioner’s Office) by contacting them here
If you would like to access the rights listed above, or any other legal rights you have over your data under current legislation, please get in touch with us by emailing at: Lorraine@centralcleaningservicesltd.co.uk
Cookies
Our site uses very few cookies, and we will always ask for your Consent before deploying non-essential cookies to your devices. For more details of the cookies we use, please see our dedicated Cookie Policy
Our promise to you
- We will keep your information secure and confidential.
- We will not sell your data to a third party.
- We will not share your data with a third party save for our contracted suppliers in order to fulfil our contractual obligations to you.
- We know how to manage your information appropriately and in line with legal and regulatory requirements.
This privacy notice was last updated January 2026