Privacy policy

Clinical Clean & MedLogistics Ltd is a Sheffield-based commercial and clinical cleaning provider. Our registered address, contact number and email are shown in the footer of every page. We act as the data controller for information collected through this website and the client portal.

• Quote requests: the details you enter on the Commercial or Clinical quote forms (name, phone, email, postcode, site details).
• Portal accounts: your name, email, hashed password, the compliance documents and incident notes you or your provider add.
• Operational data: booking times, checklist completions, site inspections and QC scores relating to your site.
• Technical data: essential cookies for keeping you signed in, and anonymous crash logs. We do not use third-party analytics or advertising trackers on this site.

• Responding to your quote enquiry and issuing a proposal.
• Delivering cleaning and compliance services under contract.
• Maintaining the audit trail your regulator (e.g. CQC) requires.
• Sending magic-link invitations, incident alerts and expiry reminders to your registered contact address.

We never sell your data. We never share it with third parties for marketing.

Quote enquiries that don’t convert are deleted after 12 months. Portal and operational data are retained for the duration of your contract with us plus 6 years for VAT / regulatory purposes, then deleted. Compliance certificates are retained for the retention period your regulator requires.

You have the right to access, correct, export or delete the personal data we hold about you, and to object to its processing. To exercise any of these rights, email us at info@clinicalclean.co.uk. We will respond within 30 days.

If you believe your rights have been infringed, you can complain to the UK Information Commissioner’s Office at ico.org.uk.

We only use cookies that are strictly necessary — an HTTP-only session cookie to keep you signed in, and a matching CSRF cookie to protect your account. We do not use tracking, advertising, or analytics cookies.

Passwords are stored using bcrypt. All traffic to the portal is served over TLS. Access to production data is restricted to named staff on a least-privilege basis. In the event of a breach that risks your rights, we will notify the ICO within 72 hours and inform you without undue delay.

Data protection queries: info@clinicalclean.co.uk