Privacy
policy.
This policy explains how Genie Clean collects, uses, shares and protects your personal data. Effective 31 October 2026. For questions, contact us at customerservices@genie-clean.co.uk.
01Who we are
Genie Clean Limited is the controller of the personal data described in this policy. We sell cleaning products through our website (genie-clean.co.uk) and through marketplaces including Amazon and TikTok Shop.
| Detail | Value |
|---|---|
| Company | Genie Clean Limited |
| Company number | 15811742 |
| Registered address | Unit 3a Centurian Office Park, Tribune Way, York, YO30 4RY |
| ICO registration number | ZB911123 |
| Privacy contact | customerservices@genie-clean.co.uk |
We process personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy sits alongside our Terms of Service and Cookie Policy.
02Information we collect
We only collect what we need to sell, deliver and support our products.
| Source | What we collect |
|---|---|
| You, via our website | Name, email, phone, delivery and billing address, account login, order history, messages to customer services, marketing preferences |
| Payment providers | Confirmation that payment succeeded and partial card details (for example, the last four digits). We never see or store full card numbers |
| Amazon (Selling Partner API) | Order ID, products ordered, buyer name, delivery address and, where Amazon provides it, phone number. See section 4 |
| TikTok Shop and other marketplaces | Order details and delivery information needed to fulfil your order |
| Trade and wholesale customers | Business name, contact name, work email, phone, delivery address, VAT number |
| Affiliates and live streamers | Name, contact details, social media handles, sales and commission data, payment details for commission |
| Your device | IP address, browser type, pages viewed and cookie data, as set out in our Cookie Policy |
We do not knowingly collect special category data (such as health information) about customers.
03How we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Processing, packing and delivering orders | Contract |
| Handling returns, refunds, complaints and customer service | Contract |
| Managing website accounts and subscriptions | Contract |
| Keeping accounting and tax records, issuing invoices | Legal obligation |
| Preventing fraud and keeping our systems secure | Legitimate interests |
| Managing trade accounts and affiliate commission | Contract |
| Sending marketing emails or SMS to website customers | Consent (you can withdraw at any time) |
| Website analytics and advertising cookies | Consent |
| Improving our products and website | Legitimate interests |
We do not sell personal data. We do not use automated decision making that has legal or similarly significant effects on you.
04Amazon customer information
If you buy Genie Clean products on Amazon, we receive limited order information through the Amazon Selling Partner API (SP-API). We handle it under Amazon's Acceptable Use Policy and Data Protection Policy, as well as UK data protection law.
What we receive
Order ID, items ordered, buyer name, delivery address and, where needed for delivery, phone number.
What we use it for, and nothing else
- Fulfilling and shipping your order
- Handling returns, refunds and customer service for that order
- Calculating and paying tax, and producing tax invoices and other legally required documents
What we never do with it
- Send you marketing, newsletters or promotional messages
- Add you to our mailing lists or combine your data with our website customer records
- Contact you outside Amazon's Buyer-Seller Messaging service, except where needed to deliver your order
- Sell, rent or share it with anyone other than the delivery partner carrying your parcel
How long we keep it
We delete Amazon customer personal data no later than 30 days after your order is delivered. The only exception is where the law requires us to keep it longer, for example tax and accounting records. In that case we keep only what the law requires, encrypted, in restricted storage, and use it only to meet that legal obligation.
How we protect it
Amazon customer data is encrypted in transit (TLS 1.2 or higher) and at rest, access is limited to named staff who need it to fulfil orders, access is protected by multi-factor authentication, and we do not store it on personal devices or removable media.
05Who we share it with
We share personal data only with service providers who need it to do a job for us. They act on our instructions under written contracts.
| Recipient | Why |
|---|---|
| Shopify | Hosts our store, checkout and order records |
| Payment providers | Take payments and prevent fraud |
| Delivery partners, including Evri | Deliver your parcel |
| Amazon and TikTok Shop | Process marketplace orders you place with them |
| Email, SMS and review tools, including Shopify and Loox | Send order updates, marketing you opted into, and review requests (website customers only) |
| Analytics and advertising platforms, including Google, Meta and TikTok | Measure and improve our website and ads, with your consent |
| IT, web development and hosting support, including Bean Creative Marketing | Build, host and maintain our website and systems |
| Accountants, insurers and legal advisers | Professional advice and statutory compliance |
We may also disclose data where required by law, to the police or regulators, or to protect our legal rights. Amazon customer data is never shared with the recipients above except Amazon itself, the delivery partner carrying the parcel, and the contracted developer that runs our order integration, who is bound by the same restrictions.
06International transfers
Some of our providers (for example Shopify, Amazon and advertising platforms) process data outside the UK. Where they do, we rely on a UK adequacy decision, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses to keep your data protected to UK standards.
07How long we keep it
| Data | How long |
|---|---|
| Amazon customer personal data | Deleted no later than 30 days after delivery, unless the law requires longer (see section 4) |
| Website and marketplace order and invoice records | 6 years from the end of the financial year, as required by HMRC |
| Customer service emails and complaints | 2 years after the issue is closed |
| Website accounts | Until you close your account, then up to 2 years unless needed for tax records |
| Marketing consent and preferences | Until you unsubscribe; we keep a suppression record so we don't contact you again |
| Trade and affiliate records | 6 years after the relationship ends |
| Analytics and cookie data | As set out in our Cookie Policy |
When data reaches the end of its retention period we securely delete or anonymise it.
08Security and data breaches
We protect personal data with technical and organisational measures appropriate to the risk, including:
- Encryption of data in transit and at rest
- Role-based access, limited to staff who need it, with multi-factor authentication
- Unique logins for every user and prompt removal of access when someone leaves
- Regular review of who has access and of our service providers' security
- Staff training on data protection and confidentiality
If a personal data breach happens, we will report it to the Information Commissioner’s Office within 72 hours where required, and tell affected people without undue delay where there is a high risk to them. Any incident involving Amazon customer data will also be reported to Amazon at security@amazon.com within 24 hours of us detecting it.
09Your rights
Under UK data protection law you have the right to:
- Access a copy of your personal data
- Have inaccurate data corrected
- Have your data deleted, where we no longer need it
- Restrict or object to how we use it, including objecting to direct marketing at any time
- Receive your data in a portable format
- Withdraw consent at any time, where we rely on consent
To use any of these rights, email customerservices@genie-clean.co.uk. We will respond within one month and may need to confirm your identity first. There is normally no charge.
If you are unhappy with how we have handled your data, please contact us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
10Cookies, children and changes
Cookies
We use cookies as explained in our Cookie Policy. Non-essential cookies are only set with your consent.
Children
Our products are household chemicals and our website is not intended for anyone under 18. We do not knowingly collect data from children.
Changes
We may update this policy when our services, providers or the law change. The latest version will always be on this page with its effective date.
Effective date
31 October 2026
Contact
Genie Clean Limited, Unit 3a Centurian Office Park, Tribune Way, York, YO30 4RY. customerservices@genie-clean.co.uk