Privacy Policy
Last updated: January 21, 2026
1. Introduction
Canelux ("we," "us," or "our") operates the Canelux mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.
We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Data Controller: Canelux , 30035 Mirano VE, Italy Codice Fiscale: CRRLRT77E15F241Z Email: [email protected] Phone: +39 3937426700
2. Information We Collect
2.1 Personal Information You Provide
When you use our Service, we may collect the following personal information:
-
Identity Information: Full name
-
Contact Information: Email address, phone number, home address
-
Payment Information: Credit/debit card details (processed securely through Stripe)
-
Service Information: Booking details, service preferences, scheduling information
-
Communication Data: Messages, feedback, and customer support inquiries
2.2 Information Collected Automatically
When you access our Service, we automatically collect:
-
Location Data: With your consent, we collect precise or approximate location data to provide location-based services and connect you with nearby service providers
-
Device Information: Device type, operating system, unique device identifiers
-
Usage Data: App interactions, features used, pages visited, time spent on the Service
-
Log Data: IP address, browser type, access times, referring URLs
2.3 Information from Third-Party Services
We use the following third-party services that may collect information:
-
Stripe: Payment processing
-
Google Analytics: Usage analytics and performance monitoring
-
Firebase: Push notifications and app functionality
3. How We Use Your Information
We use your personal information for the following purposes:
-
Service Delivery: To process bookings, facilitate cleaning services, and manage your account
-
Payment Processing: To process transactions securely through Stripe
-
Communication: To send booking confirmations, service updates, and respond to inquiries
-
Push Notifications: To send relevant updates about your bookings and promotions (with your consent)
-
Location Services: To match you with nearby service providers and calculate service areas
-
Service Improvement: To analyze usage patterns and improve our Service
-
Legal Compliance: To comply with applicable laws and regulations
-
Safety and Security: To detect, prevent, and address fraud or security issues
4. Legal Basis for Processing (GDPR)
Under the GDPR, we process your personal data based on the following legal grounds:
-
Contract Performance: Processing necessary to fulfill our service agreement with you
-
Consent: Where you have given explicit consent (e.g., location data, push notifications, marketing communications)
-
Legitimate Interests: For business operations, security, and service improvement, where such interests do not override your rights
-
Legal Obligation: When required to comply with applicable laws
5. Data Sharing and Disclosure
We may share your personal information with:
5.1 Service Providers
-
Stripe, Inc.: For secure payment processing. Stripe Privacy Policy
-
Google LLC: For analytics and Firebase services. Google Privacy Policy
5.2 Cleaning Service Providers
We share necessary information (name, address, phone number, service details) with cleaning professionals to fulfill your booking.
5.3 Legal Requirements
We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
We do not sell your personal information to third parties.
6. Data Retention
We retain your personal information for as long as necessary to:
-
Provide our services to you
-
Comply with legal obligations
-
Resolve disputes and enforce agreements
When your data is no longer needed, we will securely delete or anonymize it. Typically:
-
Account Data: Retained while your account is active and for 5 years after account closure for legal compliance
-
Transaction Records: Retained for 10 years as required by Italian tax law
-
Analytics Data: Retained in anonymized form
7. Your Rights (GDPR)
Under the GDPR, you have the following rights:
-
Right of Access: Request a copy of your personal data
-
Right to Rectification: Request correction of inaccurate or incomplete data
-
Right to Erasure: Request deletion of your personal data ("right to be forgotten")
-
Right to Restrict Processing: Request limitation of how we use your data
-
Right to Data Portability: Receive your data in a structured, machine-readable format
-
Right to Object: Object to processing based on legitimate interests or for direct marketing
-
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
-
Right to Lodge a Complaint: File a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
To exercise your rights, contact us at [email protected]. We will respond within 30 days.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
-
Encryption of data in transit (TLS/SSL)
-
Secure payment processing through PCI-DSS compliant Stripe
-
Access controls and authentication measures
-
Regular security assessments
However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
9. International Data Transfers
Your information may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States (for services like Stripe, Google, and Firebase).
When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:
-
Standard Contractual Clauses approved by the European Commission
-
Adequacy decisions by the European Commission
-
Other legally approved transfer mechanisms
10. Children's Privacy
Our Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at [email protected], and we will take steps to delete such information.
11. Push Notifications
We use Firebase Cloud Messaging to send push notifications about:
-
Booking confirmations and updates
-
Service reminders
-
Promotional offers (with your consent)
You can manage push notification preferences in your device settings or within the app at any time.
12. Location Data
We collect location data to:
-
Connect you with nearby cleaning service providers
-
Calculate service areas and availability
-
Improve service recommendations
You can enable or disable location services through your device settings. Note that disabling location services may limit certain features of our Service.
13. Cookies and Tracking Technologies
Our website and app may use cookies and similar technologies to:
-
Remember your preferences
-
Analyze usage patterns
-
Improve user experience
You can manage cookie preferences through your browser settings.
14. Third-Party Links
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
-
Posting the updated policy on our website and app
-
Sending you an email notification
-
Displaying an in-app notification
