Privacy Policy
Effective date: 31 August 2026 · Last updated: 31 August 2026
1. Data Controller
The Clean24 service and website are operated by:
ShineTower OÜ
Registry code: 11370220
Registered address: Sinimäe tn 10-31, 13816 Tallinn, Estonia
Email: info@clean24.ee
Clean24 is a service brand operated by ShineTower OÜ.
In this Privacy Policy, ShineTower OÜ is referred to as “ShineTower”, “we”, “us” or “our”.
2. Scope of this Privacy Policy
This Privacy Policy explains how we collect, use, disclose and protect personal data when you:
- visit the Clean24 website at clean24.ee;
- request a cleaning, landscaping or property maintenance service;
- submit a contact or quotation request;
- communicate with us by email, telephone or through our website;
- enter into a service agreement with us;
- provide information necessary to arrange or deliver our services.
We process personal data in accordance with Regulation (EU) 2016/679 (“GDPR”), the Estonian Personal Data Protection Act and other applicable laws.
3. Personal Data We Process
3.1 Information you provide
Depending on how you interact with Clean24, we may process:
- your name;
- email address;
- telephone number;
- company or organisation name;
- billing information;
- service address or property address;
- preferred communication language;
- the type of service you are requesting;
- information about the property or area requiring service;
- requested service date or frequency;
- information about the scope and requirements of the requested service;
- photographs or other files that you voluntarily provide;
- the content of your enquiry and subsequent correspondence;
- information necessary to prepare quotations, agreements, invoices or other business records.
You are not required to provide information that is not necessary for the requested service.
Please do not submit passwords, payment card details, private keys, access credentials, special-category personal data or other highly sensitive information through public website forms unless specifically requested through an appropriate secure channel.
3.2 Information relating to service delivery
Where you request or purchase our services, we may process information necessary to arrange and perform the service.
This may include:
- the location where the service is to be performed;
- property or premises information;
- access instructions;
- preferred dates and times;
- recurring service schedules;
- information concerning specific service requirements;
- communication with you regarding the performance of the service.
We process this information only to the extent reasonably necessary to provide the requested service and manage our business relationship with you.
3.3 Technical information
When you access the Clean24 website, limited technical information may be processed automatically by us and our infrastructure providers.
This may include:
- IP address;
- date and time of the request;
- requested page or resource;
- browser and device information;
- operating system information;
- network and traffic information;
- security, error and diagnostic logs.
This information is used to operate the website, maintain security, prevent abuse, diagnose technical problems and ensure the reliability of our services.
4. Purposes and Legal Bases
We process personal data only where we have a valid legal basis under the GDPR.
4.1 Service enquiries and quotation requests
We process information submitted through our website, email or other communication channels in order to:
- respond to your enquiry;
- understand your requirements;
- determine the appropriate service;
- prepare a quotation;
- communicate with you about the requested service;
- take steps towards entering into a service agreement.
The legal basis is Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract.
Where you contact us on behalf of a company or organisation, processing may also be based on Article 6(1)(f) GDPR, our legitimate interest in responding to business enquiries and establishing professional relationships.
4.2 Providing services
Where you become a Clean24 customer, we process personal data to:
- schedule and coordinate services;
- communicate with you;
- perform the agreed services;
- manage recurring services;
- handle changes or cancellations;
- resolve service-related issues;
- maintain appropriate business records.
The legal basis is Article 6(1)(b) GDPR, where processing is necessary for the performance of a contract.
4.3 Invoicing and business administration
We may process personal data to:
- issue and manage invoices;
- process payments;
- maintain accounting records;
- communicate about payments;
- manage customer and supplier relationships;
- comply with applicable business obligations.
The legal bases may include Article 6(1)(b) and Article 6(1)(c) GDPR, depending on the specific processing activity.
4.4 Website operation and security
We process technical information to:
- provide and maintain the website;
- protect the website against abuse and attacks;
- detect and investigate security incidents;
- diagnose errors;
- maintain service reliability.
The legal basis is Article 6(1)(f) GDPR, our legitimate interest in operating a secure and reliable website.
4.5 Legal obligations
We may process and retain personal data where necessary to comply with:
- accounting requirements;
- tax obligations;
- legal requirements;
- regulatory obligations;
- requests from competent authorities.
The legal basis is Article 6(1)(c) GDPR.
4.6 Legal claims and dispute resolution
We may retain relevant communications, agreements, invoices and other records where reasonably necessary to:
- establish, exercise or defend legal claims;
- resolve disputes;
- prevent fraud or abuse;
- demonstrate what was agreed between the parties.
The legal basis is Article 6(1)(f) GDPR, our legitimate interest in protecting and exercising our legal rights.
5. Required Information
Information marked as required in our forms is necessary for us to understand and respond to your request.
If you do not provide the required information:
- we may be unable to respond to your enquiry;
- we may be unable to provide a quotation;
- we may be unable to arrange or perform the requested service.
Providing optional information, photographs or attachments is voluntary.
6. Service Providers and Recipients
We do not sell, rent or trade personal data.
Personal data may be processed by service providers and other recipients where necessary to operate Clean24 and provide our services.
6.1 Cloudflare
We use Cloudflare for services including website infrastructure, content delivery, network security, traffic routing and protection against malicious traffic.
Cloudflare may process technical information such as IP addresses, request information, traffic data and security logs.
6.2 Resend
We use Resend, operated by Plus Five Five, Inc., to deliver website contact and service-request submissions to our business email address.
Information transmitted through Resend may include your:
- name;
- email address;
- telephone number;
- company information;
- service request;
- message;
- other information you voluntarily submit through our forms.
6.3 Business email provider
Website enquiries and subsequent correspondence may be received and stored by our business email service provider.
6.4 Google Fonts
The website may use fonts provided through Google Fonts.
Where fonts are loaded directly from Google infrastructure, your browser may communicate with Google and technical information such as your IP address and browser information may be processed.
6.5 Professional advisers and authorities
Where necessary, personal data may be disclosed to:
- accountants;
- legal advisers;
- auditors;
- insurers;
- public authorities;
- courts or other competent bodies.
Such disclosure will occur where reasonably necessary for the relevant purpose or where required by law.
Service providers may use authorised subprocessors where permitted under their contractual arrangements and applicable data-protection law.
7. International Data Transfers
Some of our service providers or their authorised subprocessors may process personal data outside the European Economic Area (“EEA”).
Where personal data is transferred to a country that has not been recognised by the European Commission as providing an adequate level of protection, we rely on appropriate safeguards available under applicable data-protection law.
These safeguards may include:
- European Commission Standard Contractual Clauses;
- additional contractual or technical safeguards;
- an applicable adequacy decision or framework, where available.
You may contact us for further information regarding applicable safeguards for a particular transfer.
8. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Generally:
- enquiries that do not result in a customer relationship are normally deleted or anonymised within 12 months after the last meaningful communication;
- information relating to an active customer relationship is retained for the duration of that relationship;
- customer and service records may be retained after the end of a relationship where reasonably necessary for accounting, legal, dispute-resolution or other legitimate business purposes;
- accounting, taxation and transaction records are retained for the periods required by applicable Estonian law;
- technical and security logs are retained for a limited period based on operational and security requirements;
- information stored in backups may remain until the relevant backup is securely overwritten or expires according to our backup-retention procedures.
Different retention periods may apply where required by law or reasonably necessary to establish, exercise or defend legal claims.
9. Cookies and Browser Storage
The Clean24 website does not currently use advertising cookies, behavioural tracking cookies or third-party analytics services.
The website may store your selected language in your browser’s local storage so that your language preference can be restored during future visits.
Cloudflare may use strictly necessary cookies or similar technologies where required for security, fraud prevention or operation of the services enabled on the website.
If we introduce analytics, advertising, marketing technologies or other non-essential cookies in the future, this Privacy Policy and our cookie information will be updated accordingly, and consent will be requested where required by law.
10. Automated Decision-Making
We do not use personal data submitted through the Clean24 website for automated decision-making or profiling that produces legal or similarly significant effects.
11. Your Rights
Subject to the conditions and limitations provided by the GDPR, you may have the following rights:
Right of access
You may request confirmation as to whether we process your personal data and obtain a copy of the data we hold about you.
Right to rectification
You may request correction of inaccurate personal data or completion of incomplete information.
Right to erasure
You may request deletion of your personal data where there is no valid legal reason for us to continue processing it.
Right to restriction
You may request restriction of processing in certain circumstances.
Right to object
You may object to processing based on our legitimate interests where the applicable legal conditions are met.
Right to data portability
Where applicable, you may request your personal data in a structured, commonly used and machine-readable format and request that it be transferred to another controller.
Right to withdraw consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint
You have the right to lodge a complaint with a competent data-protection supervisory authority.
To exercise your rights, contact:
info@clean24.ee
We may request information necessary to verify your identity before processing your request.
We will normally respond within one month, subject to any extension permitted by the GDPR.
12. Complaints
You have the right to lodge a complaint with the Estonian supervisory authority:
Andmekaitse Inspektsioon
Website: www.aki.ee
You may also contact the data-protection authority in the EU or EEA country where you live, work or believe that an infringement has occurred.
13. Security
We apply appropriate technical and organisational measures designed to protect personal data against accidental or unlawful:
- loss;
- destruction;
- alteration;
- unauthorised disclosure;
- unauthorised access.
However, no internet transmission or electronic-storage system can be guaranteed to be completely secure.
Please do not submit passwords, payment credentials, private keys or other highly sensitive information through public website forms.
14. Third-Party Links
The Clean24 website may contain links to third-party websites or services.
We do not control those websites and are not responsible for their privacy practices.
You should review the privacy information provided by the relevant third party before providing personal data to them.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
- our services;
- the Clean24 website;
- our service providers;
- our data-processing practices;
- applicable legal requirements.
The current version and its effective date will always be published on this page.
Where changes materially affect how existing personal data is processed, we will take reasonable steps to inform affected individuals where required by applicable law.
16. Contact
If you have questions, requests or concerns regarding this Privacy Policy or the processing of your personal data, please contact us:
ShineTower OÜ
Registry code: 11370220
Registered address: Sinimäe tn 10-31, 13816 Tallinn, Estonia
Email: info@clean24.ee
Clean24 is a service brand operated by ShineTower OÜ.
Questions? Contact us at info@clean24.ee