Legal

Privacy Policy

Last updated 17 July 2026

1. Who we are

This website is operated by The Wash, a commercial laundry and linen hire business serving hotels and hospitality across Bradford and West Yorkshire. We are the data controller for the personal data described in this policy.

If you have any question about this policy or about the data we hold, email info@thewashuk.co.uk and mark it for the attention of the data protection contact.

2. What we collect and why

We collect personal data in three situations: when you ask us for a quote, when you email us, and when you use the client portal as a contracted customer. Because we serve businesses, most of what we hold is workplace contact information rather than private personal detail.

When you request a quote

The quote form on our Request a quote page sends the following to our database: your business name, your name, your job role, work email, phone number, town or city, sector, the services you're interested in, your approximate volumes, when you'd like to start, and any message you write.

When you use the contact form

Our Contact form does not send anything to our servers. It opens your own email application with a pre-filled message, which you then choose to send. We only receive what you actually send us, and it arrives as an ordinary email.

When you're a client using the portal

Client accounts are created by our staff — you cannot register yourself. For each account we hold your business name, contact name, work email address, phone number and collection address, plus the orders you place (items, quantities, collection dates and any notes you add), and the invoices raised against them.

Your portal password is handled by our authentication provider and stored only as a cryptographic hash. Nobody at The Wash can see it, and we cannot tell you what it is.

Our staff may add internal notes to an order — for example a delivery instruction passed on by your reception. These are operational notes about the job, visible only to our team.

Technical data

Our website and portal providers keep standard server logs, which include IP addresses and timestamps, for security and reliability. We do not use these to build any profile of you.

3. Our lawful bases

Under UK GDPR we must have a lawful basis for each use of your data. Ours are:

We do not send marketing emails, and we don't rely on consent for anything described above.

4. Who we share it with

We do not sell your data, and we don't share it for anyone else's marketing. We use a small number of service providers who process data on our instructions:

• Supabase — hosts our database, client accounts and logins. All quote requests, account details, orders and invoices are stored here.
• Resend — sends our automated emails, such as a new invoice.
• Our website host — Vercel serves the pages of this site.

We may also share data with our accountants and professional advisers, or where we're required to by law.

This website loads no third-party fonts, analytics or scripts. Everything is served from our own domain, so simply reading these pages doesn't share your details with anyone else.

5. Where your data is stored

Our database is hosted in the European Union (Frankfurt, Germany). The EU has a UK adequacy decision, which means data can move there with the same protection it has in the UK.

Some of our providers are US-based companies and their support staff may access data from outside the UK or EU. Where that happens, the transfer is covered by the safeguards required by UK data protection law, such as the International Data Transfer Addendum or Standard Contractual Clauses in our contracts with them.

6. How long we keep it

You can ask us to delete your data sooner — see your rights below. We may have to keep invoice records even so, because the law requires it.

7. How we protect it

Client data is protected by database security rules that mean each client account can only ever read its own hotel's data — your orders and invoices are not visible to any other client. Staff access to all accounts is limited to authorised members of our team. Connections to this site and the portal are encrypted, and passwords are stored only as hashes.

8. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected — portal clients can update their own details on the Account page at any time;
• ask us to delete data, where we don't have to keep it;
• ask us to restrict how we use it, or object to our use of it;
• ask for a copy in a portable, machine-readable format; and
• withdraw consent, where we relied on consent.

To exercise any of these, email info@thewashuk.co.uk. We'll respond within one month. There's no charge unless a request is clearly unfounded or excessive.

9. Cookies

This website sets no cookies at all — no analytics, no advertising, no tracking. The client portal stores a single sign-in token in your browser so that you stay logged in, which is strictly necessary for it to work. That's why you won't see a cookie consent banner here: there is nothing to consent to. Full detail is in our Cookie & Storage Policy.

10. Changes & complaints

If we change this policy we'll update the date at the top of the page. Material changes affecting clients will be told to you directly.

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the UK's data protection regulator: