1. Who we are, and what this policy covers
SPARKLEHOMES INTEGRATED SERVICE LIMITED, trading as SparkleHomes, provides Home & Office Cleaning, Post-Construction Cleaning, Fumigation and Interior Design services in Abeokuta, Ogun State. In the language of the Nigeria Data Protection Act 2023, we are the data controller for the personal information described in this policy: we decide what is collected and what happens to it.
This policy covers the information we collect through this website, and through the WhatsApp and email conversations that the website starts. It explains what we collect, why, where it is kept, who can see it, how long we keep it, and the rights you have over it.
It does not cover our employees' information, which is handled under a separate internal policy that is not published here. Nor does it cover what you tell us in person or over the phone outside a booking or enquiry.
You can reach us by email at mysparklehomes@gmail.com, by phone or WhatsApp on +234 705 173 1138, or by post at House 58, Beside Elite Club, Elite Road, Idi Aba, Abeokuta, Ogun State, Nigeria.
2. The information you give us
We ask only for what we need to quote accurately and to arrive at the right place at the right time. There are three forms on this website, and each collects a different set.
When you make a booking, we collect your name, phone number and email address; whether you are booking as an individual or an organisation; the service, property size and frequency you have chosen; the number of additional BQ rooms where that applies; your preferred date and time; the address where the work will be carried out; any access instructions you give us; any additional details you add; and the indicative estimate the form showed you at the time.
When you request a quotation, we collect the name of the individual or organisation, the location, your description of the scope of work, the name of the contact person and that person's phone number.
When you send an enquiry, we collect your name, your phone number, the service you are asking about and your message.
When you leave a review, we collect the name you ask us to show, your rating, what you wrote, and — only if you choose to give it — your phone number. The phone number is never published. It exists so we can tell which visit a review is about.
If you apply to work with us on the careers page, we collect your name and phone number; your email address, the area you live in and your years of experience, each if you choose to give it; the kind of work you are looking for; anything you write about yourself; and your CV if you attach one. A CV is optional, and an application without one is not treated as incomplete.
You can still apply by email or WhatsApp instead. Whatever you send in that message — your CV, your work history, your references — we hold in the same way and for the same length of time.
Please do not send us card details, bank details or a Bank Verification Number through any form or message on this site. We never ask for them, and no field here is designed to receive them.
When you pay for a booking, your card details are entered on Paystack's own payment page. They do not pass through this website, and we do not receive them.
3. Information we receive automatically
Like every website, this one is served by a hosting provider that records technical information about each request: the IP address it came from, the page requested, the time, and the browser and operating system your device reports. Those records exist so the site can be kept running and secure. We do not use them to build a profile of you.
We run no analytics service on this website. There is no Google Analytics, no advertising pixel, no heatmap tool, no session recorder and no chat widget. Nobody is counting your visits or following you to other sites from here.
4. Cookies, tracking and browser storage
This website sets no cookies of its own. That is why you have not been shown a cookie banner — there is nothing to ask you to consent to.
It also does not use your browser's local storage or session storage. Anything you type into a form lives only in your browser's memory while that page is open. Close the tab before submitting and it is gone, and we never received it.
The one exception is outside our control: the map on our contact page is supplied by OpenStreetMap, and your browser's dealings with OpenStreetMap are described in section 7.
5. Why we use your information, and our lawful basis
Under the Nigeria Data Protection Act 2023 we must have a lawful basis for using your personal information, and we must tell you what it is.
We use your name, contact details, address, access instructions and the details of the work in order to prepare a quotation, confirm a booking, arrive at the right property and carry out the service you asked for. The lawful basis is the performance of our agreement with you, or the steps you have asked us to take before entering into one.
We keep a record of completed bookings and quotations so that we can answer a question about a past visit, honour the commitment in section 9 of our Terms of Service, and keep proper business records. The lawful basis is our legitimate interest in running the business properly, and in some cases a legal obligation to keep records.
We use the contents of a job application solely to consider that application.
We use a review to improve what we do, and — if we publish it — to show prospective clients what working with us is like. The lawful basis for publishing is your consent, which you give by sending it: the form says before you submit that nothing appears until we have approved it, and that we publish your name and your words but never your phone number. You can withdraw that consent at any time and we will take the review down.
We do not sell your information. We do not share it with advertisers. We do not use it to send you marketing you did not ask for, and we keep no mailing list.
6. WhatsApp and email
When you submit any of the three forms, the website composes your details into a readable message and opens WhatsApp with that message ready to send. This is deliberate: WhatsApp is how we actually confirm bookings, and it means your request reaches a person rather than sitting in a queue.
Two things follow, and you should know both. First, nothing is sent until you press send in WhatsApp — the message is prepared for you, not transmitted on your behalf. Second, once you do send it, the message passes through WhatsApp, which is operated by Meta, and is then handled under Meta's privacy terms as well as ours. We have no control over Meta's processing.
Where a message is too long for WhatsApp to carry without losing part of it, the site offers to send it by email instead so that no detail is lost. Our address, mysparklehomes@gmail.com, is a Gmail address, so email you send us is stored on Google's systems and handled under Google's privacy terms as well as ours.
If you would rather use neither, call us on +234 705 173 1138 and we will take the details over the phone.
7. The map on our contact page
Our contact page embeds a map from OpenStreetMap so you can see where we are. The map loads lazily, which means your browser contacts OpenStreetMap only if you scroll far enough down the page for the map to come into view.
When it does, your browser requests the map directly from OpenStreetMap, which necessarily receives your IP address as part of that request. We receive nothing from that exchange and cannot use it to identify you. OpenStreetMap is operated by the OpenStreetMap Foundation under its own privacy policy.
We chose OpenStreetMap over the alternatives precisely because showing a map should not require an advertising-funded tracking script.
8. Where your information is stored, and transfers outside Nigeria
Form submissions are recorded in a database hosted by Supabase, physically located in Ireland, within the European Union. The website itself is hosted by Vercel, which serves it from data centres in several countries.
A CV uploaded on the careers page is held by the same Supabase account, in private file storage rather than in the database. Everything else this section says applies to it.
When you pay for a booking, the payment is processed by Paystack Payments Limited, a Nigerian company and part of Stripe. Paystack receives what it needs to take the payment: the amount, a reference for your order, and the contact details you give on its page. Paystack states in its own privacy policy that it transfers personal data outside Nigeria, to other Paystack entities and to its service providers, relying on Binding Corporate Rules and the transfer mechanisms the Nigeria Data Protection Act permits.
This means your personal information is transferred outside Nigeria and stored abroad. We would rather state that plainly than bury it. The Nigeria Data Protection Act 2023 permits such transfers where the destination affords adequate protection; the European Union's data protection regime is among the strictest in the world, and both Supabase and Vercel are bound by it and by their contracts with us as our processors.
If you would prefer your details were not stored outside Nigeria, do not use the forms, and tell us you would rather not pay online. Call us on +234 705 173 1138 instead: we will take your booking without creating a database record, and arrange payment another way.
9. Who can access your information
Within SparkleHomes, your information is seen by the people who need it to quote for or carry out the work, and by whoever is responsible for scheduling. Our team members are vetted, and discretion in a client's home is a condition of working with us.
A visitor's browser can add a submission to our database. It cannot read one back — not anybody else's, and not its own. That rule is enforced by the database itself rather than by hiding anything, and it has been tested: an attempt to read records using the credentials this website hands your browser returns nothing, even when records exist.
Reading submissions requires signing in to a private administrative area, with an account we have granted access to. Holding an account is not enough by itself — the database checks on every single read that the account has been authorised, so someone who merely has a login still sees nothing. That check sits in the database rather than in the website's code, which means a mistake in the code cannot open it.
Access is granted part by part rather than all at once. Each person is given only the sections of that area their work requires, and the same check in the database decides every read against that person's own list — so a member of our cleaning team seeing the day's work is not thereby able to open anything else.
A CV is never published and has no address anyone can visit. It sits in private storage, and the only way to open one is for a signed-in administrator to ask our system for a temporary link — which expires within minutes and is issued only after the database has confirmed, for that specific request, that the account asking is authorised.
A review you leave is different from everything else on this page, and we would rather be plain about it: if we approve it, the name you gave and what you wrote become visible to anyone on the internet. Your phone number does not — it is not part of what is published, and the published list is built so that it cannot be. Nothing is published until a person has read it and approved it, and you can ask us to take it down at any time.
Beyond our own team, your information reaches only the providers named in this policy: Supabase, Vercel, Paystack where you pay for a booking, Meta where you send a WhatsApp message, and Google where you send an email — each acting on our behalf, or as the operator of a service you chose to use. We disclose information to anyone else only where the law requires it of us.
10. How long we keep your information
We do not keep personal information indefinitely, and we do not keep it longer than it is useful to you or to us.
Booking and quotation records are kept while we are providing services to you, and for up to 24 months after our last engagement with you, so that we can answer questions about past work and keep proper business records. After that they are deleted.
Enquiries that do not lead to a booking are kept for up to 12 months and then deleted.
Job applications are kept for up to 12 months after the decision, unless you ask us to delete yours sooner. A CV you uploaded is part of the application: it is deleted when the application is.
Where the law requires us to keep a record for longer — a tax record, for instance — we keep that record for as long as required and no longer.
11. How we keep your information secure
Every connection to this website is encrypted in transit. The database enforces the write-only rule described in section 9 at its own level, so a mistake in the website's code cannot expose other clients' records. The code sent to your browser carries no administrative credential of any kind, so there is nothing in it for someone to extract and reuse.
Uploaded CVs go to storage that has no public address at all, and the limits on them — the file types we accept and a five megabyte ceiling — are applied by that storage itself, not only by the form you filled in.
We also limit what we collect in the first place, which is the most reliable protection there is: information we never asked for cannot be lost.
No system is perfect, and we will not pretend otherwise. If a breach ever affects your personal information in a way likely to cause you harm, we will tell you, and the Nigeria Data Protection Commission, as the Act requires.
12. Your rights over your information
The Nigeria Data Protection Act 2023 gives you rights over the personal information we hold about you. You can ask for a copy of it. You can ask us to correct it if it is wrong. You can ask us to delete it. You can object to our using it, or ask us to restrict what we do with it. Where you gave us consent for something, you can withdraw that consent at any time. You can also ask us to provide your information in a portable form.
To exercise any of these, contact us using the details at the end of this policy and tell us what you would like us to do. We will not charge you, and we will not ask you why. We will respond within 30 days, and we may need to confirm who you are first so that we do not disclose your information to somebody else.
Asking us to delete your information is not the same as cancelling a booking, so please tell us if you mean both. We may also need to keep a minimal record where the law requires it; if so, we will tell you which record and why.
If you are unhappy with how we have handled your information or your request, you can complain to the Nigeria Data Protection Commission. We would rather you came to us first, so we have the chance to put it right — but that is your choice, not a condition.
13. Children's information
Our services are arranged by adults, and this website is not directed at children. We do not knowingly collect personal information about anyone under 18 through it.
We may inevitably notice something incidental about the children living in a home we clean — a name on a bedroom door, a routine to work around. We treat that as we treat everything else we see in a client's home: as nothing to be recorded, repeated or discussed.
If you believe a child has sent us personal information through this website, contact us and we will delete it.
14. Changes to this policy, and how to contact us
If our practices change, this policy changes with them, and the "Last updated" date at the top of this page changes too. Where a change materially affects how we use information you have already given us, we will tell the clients affected rather than rely on you to notice.
If you have a question about this policy, want to exercise one of the rights in section 12, or think something here does not match what we actually do, we would like to hear from you.
You can reach us by email at mysparklehomes@gmail.com, by phone or WhatsApp on +234 705 173 1138, or by post at House 58, Beside Elite Club, Elite Road, Idi Aba, Abeokuta, Ogun State, Nigeria.
Our Terms of Service cover the services themselves.
