Privacy
Harber Group, trading as Harber Window Cleaning, is the controller responsible for personal information handled through this website and its staff and customer portals. Privacy questions can be sent to Jon at jon@harber-group.com.
Harber only collects information needed to respond to enquiries, provide window-cleaning services, manage bookings and maintain the cleaning diary. This may include your name, house number, contact details, service choices, preferred date and an optional what3words location.
Customer accounts use a verified email address to connect existing Harber bookings without creating duplicate customer records. Single-use sign-in links, secure sessions and any optional customer password are used only to protect account access. Account passwords are stored as protected password hashes and are never available to Harber in readable form.
When there is something useful to report, Harber may add a short visit note or take one photo of visible damage or a maintenance concern, such as damage to a sill. The note and photo may be included with your invoice email. Harber does not routinely photograph front doors or parcels as proof of attendance.
Your details are used only to organise and provide the requested service. If you submit a review, your first name, rating and comment may be published after approval. Your plot number is used only for verification and is never shown publicly. Details may be processed by trusted services used to operate the website and are not sold or used for unrelated marketing.
Visit notes and photos are stored securely as part of the service record and are kept only for as long as reasonably needed to provide the service, answer questions or resolve an issue.
Harber normally relies on taking steps at your request and performing a service contract for enquiries, bookings, customer accounts and payments; legal obligations for financial and Right-to-Work records; and legitimate interests for service safety, fraud prevention, account security, complaints and limited operational records. Where consent is the appropriate basis, it can be withdrawn without affecting earlier lawful use.
Information is shared only where needed with service providers that host and protect the website and private files, deliver email, provide maps and routing, authenticate authorised admin access, or process a payment you choose to make. Those providers act under their own terms and data-protection obligations. If information is processed outside the UK, Harber must ensure an appropriate UK transfer safeguard applies.
Expired sign-in tokens and sessions are automatically removed after a short operational grace period. Right-to-Work evidence for a former worker is scheduled for secure deletion two years after the working relationship ends. Other service, payment, safety and complaint records are retained only while needed for the service, legal, tax, insurance or dispute purposes; Harber must review these records and delete or anonymise them when those purposes end. Backups may retain a deleted record temporarily until the backup cycle expires.
You can ask for access to your information, correction, deletion, restriction, portability or an objection where the relevant UK data-protection right applies. Requests can be made by emailing jon@harber-group.com. Harber may need to verify your identity and some rights are not absolute where a legal record must be kept.
If you are unhappy with how Harber handles your information, contact Jon first so the issue can be investigated. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.
