Cross-Border Privacy Protection Protocol

Compliance: EU GDPR · California CCPA · UK Data Protection Act

1. Data We Collect

We collect only the data strictly necessary to operate the marketplace: full name, email, home address (Clients), postal service zones (Cleaners), payment details (via Stripe — never stored on CLEANBAZ servers), and government photo ID (Cleaners only, encrypted at rest).

2. GDPR Rights (EU/UK Residents)

You have the right to access, rectify, erase ("right to be forgotten"), restrict processing, port, and object to processing of your personal data. Requests are honored within 30 days at privacy@cleanbaz.com.

3. CCPA Rights (California Residents)

California consumers may request disclosure of collected data categories, deletion of personal information, and opt-out of any sale of personal data. CLEANBAZ does not sell personal data.

4. Home Address & Identity Safeguards

Client home addresses are shared with the assigned Cleaner only after job matching. Government photo ID documents uploaded by Cleaners are encrypted using AES-256 at rest, accessible only by the compliance verification team, and permanently purged 30 days after account termination.