Privacy notice
How we use business contact information, why we are allowed to, how long we keep it, and how to tell us to stop.
Who we are
Offpause is the trading name of Justyna Lopez Sanchez, a UK sole trader.
General contact: hello@offpause.co.uk
Privacy questions and rights requests: privacy@offpause.co.uk
Data protection complaints: complaints@offpause.co.uk
What information we use
Depending on how you interact with us, we may use business contact information such as your name, role, organisation, work telephone number, work email, public-source details, communication history, marketing preference or objection, client contact and billing information, and information needed to handle a privacy request, complaint or security incident.
We do not ordinarily receive or store full payment-card details: where a client pays by card, Stripe processes the payment details through its payment service. We do not intentionally collect special-category data, identity documents or unrelated private information for our ordinary dormant-quote reactivation service.
Why we use information, and our role
Offpause business development
- Purpose
- Identifying and contacting relevant UK commercial cleaning firms about Offpause.
- Our role
- Offpause is the controller.
- Lawful basis
- Legitimate interests — targeted business development using minimal relevant business contact information — subject to our signed assessment, the telephone marketing rules under PECR including TPS and CTPS screening, and your right to object to direct marketing.
Enquiries and client relationships
- Purpose
- Answering enquiries, taking requested pre-contract steps, administering contracts and campaigns, and keeping necessary business correspondence.
- Our role
- Offpause is the controller.
- Lawful basis
- Contract, or steps taken at your request, where you are the contracting individual; legitimate interests in communicating with corporate client contacts and administering the relationship; legal obligation where particular records must be kept by law.
Client dormant-prospect campaigns
- Purpose
- Carrying out a cleaning company’s campaign to revisit its own selected older enquiries and quotations.
- Our role
- The cleaning company is normally the controller and Offpause is normally the processor, acting on its documented instructions under Article 28 terms.
- Lawful basis
- The client determines the lawful basis for that underlying processing. Offpause does not invent a separate basis for information it processes only as a processor.
Screening and suppression
- Purpose
- Screening proposed telephone numbers, respecting TPS and CTPS results, and honouring objections so that people are not contacted again by mistake.
- Our role
- Processor for client-specific screening and suppression under client instructions; controller for our own minimum suppression record.
- Lawful basis
- Client instructions where we act as processor; legitimate interests in preventing inappropriate re-contact, alongside the applicable direct marketing and data protection duties, for our own record.
Billing and accounting
- Purpose
- Issuing invoices, processing payments and refunds, and keeping necessary accounting and business evidence.
- Our role
- Offpause is the controller.
- Lawful basis
- Contract where you are the contracting individual; legitimate interests in corporate billing administration; legal obligation for tax and accounting records where applicable.
Rights requests, complaints and security
- Purpose
- Recognising, investigating, responding to and evidencing privacy requests, complaints and security incidents.
- Our role
- Controller for our own activities; processor where we are assisting a client with information they control.
- Lawful basis
- Legal obligation where applicable, and legitimate interests in security, complaint handling and keeping accountability or legal-claim evidence.
Where we obtain information
For our own business development, we may obtain business contact information from an organisation’s own website, Companies House or other appropriate current public business sources.
For client campaigns, the relevant cleaning company supplies or instructs us to process its own selected prior enquiry and quotation information. We may also receive information directly from you during calls, emails, contracts, payments or privacy correspondence.
When providing information is necessary
If you are a sole trader or individual client and we need particular contact, contract or billing information to take requested pre-contract steps or to perform an agreement, not providing it may mean we cannot enter into or administer the service. Some business and accounting information may also need to be retained to meet legal obligations.
If you receive marketing from Offpause, you are not required to give us any additional personal information merely because we have contacted you.
Direct marketing and your right to object
We use targeted rather than indiscriminate outreach. Before live marketing calls we apply the relevant telephone preference and suppression checks under our screening procedure. We identify Offpause, display a callback number, and stop the affected marketing when you object.
You can tell us at any time that you do not want direct marketing from Offpause, and we will stop. We may keep the minimum information necessary — usually the telephone number, the date and the scope of your objection — so that we do not contact you again by mistake. That information is never used to target you.
This website
These pages are hosted by GitHub, Inc. through its GitHub Pages service. Like any web host, GitHub records technical information about requests to this site in its own logs, including the visitor’s IP address, the date and time, and which pages were requested.
The pages themselves contain no analytics, no advertising, no tracking and no third-party scripts or fonts, and they set no cookies of our own. There is no contact form, no account or login, no file upload and no ordering or payment function on this site. If you email one of the addresses above, that message is handled in our business email system, not by the website.
Who receives information
Besides the website host described above, we currently use Microsoft 365 for our business email, Besides the website host described above, we currently use Microsoft 365 for our business email. Our proposed TPS/CTPS screening provider is still undergoing supplier and account verification and will be reflected here once that arrangement is live.
We intend to use VoIPstudio for calling, PandaDoc for electronic signature, HubSpot for our own sales pipeline and Stripe for invoicing, each for that limited function, once the relevant setup and provider checks are complete. We update this notice as those arrangements become live.
We do not place client dormant-prospect lists into PandaDoc, HubSpot or Stripe.
Where information is processed
Only Justyna handles identifiable information at Offpause — both our own business contacts and our clients’ campaign records — and she works in the UK. Nobody else at Offpause, here or overseas, is authorised to access it. That is separate from our technology providers, who are covered below.
This website is hosted by GitHub, Inc., a United States company, which states that it stores data in a range of locations including the United States. For transfers out of the UK and EEA, GitHub states that it relies on the European Commission’s standard contractual clauses and that it is certified under the UK Extension to the EU–US Data Privacy Framework.
Some of our other technology providers may also process or support information internationally as part of running their services. Before we use a provider for personal information, we review the relevant contractual and location safeguards, and we update this notice where a material change requires it.
How long we keep information
We keep personal information only for as long as reasonably needed for its purpose and for our legal and accountability needs. The periods below are the defaults and criteria we have adopted. They are not universal statutory periods.
- Our own business development. Closed or unresponsive contacts are normally removed or minimised from our active CRM within 30 days after the contact sequence closes. Genuine active conversations and agreed follow-ups are reviewed at least every six months.
- Client campaign working information. Raw candidate files are intended to be short-lived. Selected campaign working information is normally removed no later than 30 days after the final report is issued, unless the client asks for a compatible shorter period, or a documented complaint, dispute, legal hold or other justified purpose requires limited retention.
- Screening evidence. Detailed screening evidence may be kept for up to 12 months, but only where the accepted campaign retention arrangement provides for it, or where we have a separately documented lawful reason to keep a minimum accountability record. Where that period applies it runs from the last relevant call or the closure of the campaign, using the trigger recorded for that campaign; the trigger and expiry date are recorded at the time and are never chosen after the event. This does not allow us to keep a whole prospect file or detailed call notes.
- Objections. Minimum suppression information may be kept for as long as it is reasonably needed to honour an objection, so that we do not contact you again by mistake.
- Contracts, invoices and commercial evidence. Normally about six years after the engagement ends, subject to applicable tax and legal requirements. Unnecessary prospect-level details are minimised sooner.
- Complaint, rights-request and incident logs. Normally three years after the matter closes, with unnecessary supporting personal detail removed sooner. A continuing matter or a justified hold may require limited longer retention.
Where we hold information only on a cleaning company’s instructions, that company’s accepted retention instructions govern it, except where we have a separate lawful reason to keep a narrowly defined record of our own.
Your rights
Depending on the processing and the lawful basis, you may have rights of access, rectification, erasure, restriction, objection and, where applicable, data portability. You also have rights concerning certain solely automated decisions; Offpause does not use solely automated decision-making with legal or similarly significant effects in this service. Where we rely on consent for an activity, you may withdraw it.
You always have the right to object to direct marketing, and we will stop the affected marketing when you do.
To exercise any right, contact privacy@offpause.co.uk. If your request relates to information we process only on behalf of a cleaning company, we may need to pass it to that company or assist them as the controller — but we will not use that distinction as a reason to ignore your request.
Data protection complaints
You can complain to complaints@offpause.co.uk. We acknowledge a data protection complaint within the applicable 30-day maximum — sooner wherever we can — investigate it appropriately without undue delay, and tell you the outcome.
You also have the right to complain to the UK Information Commissioner’s Office. Their current guidance on how to do that is at ico.org.uk/make-a-complaint.
Security and automated decisions
We use access controls, business accounts, restricted access to the devices and accounts we work from, number screening, and deletion and suppression procedures appropriate to this service. Call recording is off. We do not use automated decision-making that produces legal or similarly significant effects.
Changes to this notice
We update this notice when our services, providers, purposes or material data flows change.