Privacy Statement

ExpatCleaners is a sole proprietorship operated by Yuri Kisman, registered with the Dutch Chamber of Commerce (KvK) under number 94002185, BTW NL005057342B81, based in Amsterdam, the Netherlands.

ExpatCleaners is the data controller within the meaning of Article 4(7) GDPR for the personal data described in this statement.

We have not appointed a Data Protection Officer because we are not legally required to. For privacy matters, please contact us directly using the details above.

Contact: hello@expat-cleaners.com · WhatsApp +31 6 44 68 38 37

Identification data: name, email address, phone number, address, postcode.

Booking data: service requested, date, time, frequency, home characteristics (size, number of rooms, property type), preferences.

Communication data: messages and conversation history via WhatsApp, email, or our website.

Payment data: transaction reference, IBAN where you pay by bank transfer, payment status. We do NOT receive or store credit card details — these are handled by Mollie (see section 5).

Specific circumstances: information you choose to share about pets, allergies, accessibility, fragile items, or special requests.

Website usage data: IP address, browser type, device type, pages visited, and behaviour on our website. Collected via Meta Pixel (see section 5) and standard server logs.

• To prepare and perform our cleaning services for you.
• To communicate with you about bookings, scheduling, quality and complaints.
• To process payments and keep proper accounting records.
• To comply with legal obligations, including the Dutch fiscal retention duty of 7 years.
• To improve our services and operations based on aggregated insights.
• To measure the effectiveness of our advertising on Meta platforms (Facebook, Instagram), where you have given consent for analytical and marketing cookies.

Performance of the contract (Art. 6(1)(b) GDPR) — for delivering the cleaning service you booked.

Legal obligation (Art. 6(1)(c) GDPR) — for tax, accounting and other statutory record-keeping requirements.

Legitimate interest (Art. 6(1)(f) GDPR) — for service improvement, fraud prevention, and ensuring our business runs effectively. We balance this against your interests and use minimal data.

Consent (Art. 6(1)(a) GDPR) — for analytical and marketing cookies (including Meta Pixel) and any direct marketing. You can withdraw consent at any time without affecting the lawfulness of prior processing.

We share personal data only with parties who help us deliver our service or whom we are legally required to share it with. These are our processors and recipients:

Cleaning subcontractor(s): the cleaning company that delivers your clean. They receive only your address, access instructions, household specifics, and preferences — strictly what is needed to perform the work.

Mollie B.V. (payment processor, Amsterdam, the Netherlands) — for processing online payments. Mollie receives transaction data; we do not see your card details. Mollie acts as an independent controller for payment data under PSD2 obligations.

Meta Platforms Ireland Ltd. (WhatsApp Business + Meta Pixel for advertising) — for messaging and, where you have consented, advertising effectiveness measurement. Meta processes data under their own terms and may transfer data outside the EEA under Standard Contractual Clauses.

Our accountant — for bookkeeping and tax filings, bound by professional confidentiality.

Hosting and email providers — our website host and email provider, who store data on EU servers under processor agreements.

Dutch Tax Authority (Belastingdienst) and other public authorities — where required by law.

We do not sell, rent, or trade your personal data.

Where data is transferred outside the European Economic Area (EEA) — for example via WhatsApp / Meta — we rely on the European Commission’s Standard Contractual Clauses (SCCs) or an adequacy decision. We minimise data shared outside the EEA wherever possible.

Booking data and correspondence: up to 24 months after our last contact, then deleted or anonymised.

Invoices and accounting records: 7 years (Dutch fiscal retention obligation, Art. 52 General State Taxes Act).

Complaint files: 5 years after closure of the matter.

Marketing and analytics consent records: 3 years from last consent action.

Website usage and cookie data: as set out in our cookie banner; typically 6–24 months depending on the cookie.

Our website uses functional cookies (necessary for the booking flow) and, only with your consent, analytical and marketing cookies — including the Meta Pixel from Meta Platforms Ireland Ltd.

The Meta Pixel allows us to measure the effectiveness of our advertising and to show you relevant ads on Facebook and Instagram. You can manage your cookie preferences via the cookie banner on our website at any time, and adjust your Meta ad preferences at facebook.com/adpreferences.

You can also block cookies in your browser settings. Doing so may affect website functionality.

Under the GDPR you have the following rights regarding your personal data:

• Right of access — to ask what personal data we hold about you.
• Right to rectification — to correct inaccurate data.
• Right to erasure — to ask us to delete your data, where applicable.
• Right to restriction — to limit how we process your data.
• Right to object — to object to processing based on legitimate interest.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing.
• Right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

To exercise any of these rights, contact us at hello@expat-cleaners.com. We respond within 4 weeks. We may need to verify your identity before processing your request.

We take appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access. These include encrypted connections (HTTPS), restricted access to systems, separation of keys from address data, processor agreements with our service providers, and regular review of our practices.

If a personal data breach occurs that poses a risk to your rights, we will notify you and the Dutch Data Protection Authority within 72 hours, in accordance with Articles 33 and 34 GDPR.

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us so we can remove it.

We may update this Privacy Statement to reflect changes in our service or legal requirements. The latest version is always available at expat-cleaners.com/privacy. Significant changes affecting recurring clients will be communicated by email or WhatsApp.