Privacy Policy

1. Who we are

Deco Operations Ltd is a company registered in England and Wales (company number 17032490). Our registered office is in London, United Kingdom. We are registered with the Information Commissioner’s Office (ICO registration number ZC112793). We operate the website decooperations.co.uk and the Docket order-management platform at docket.decooperations.click.

For the purposes of the UK GDPR and the Data Protection Act 2018, Deco Operations Ltd is the data controller. You can reach us at hello@decooperations.co.uk.

2. What data we collect and why

Contact form (decooperations.co.uk)

When you submit the contact form on our website we collect your name, email address, phone number (if provided), the topic you selected, and the message you wrote. If you tick the optional marketing checkbox we also record that consent. Phone number is optional and used only to follow up on your enquiry.

Lawful basis: legitimate interests (responding to your enquiry). If you opt in to marketing, we additionally rely on your consent for that purpose.

Form submissions are processed by Formspree, Inc. (see §6 below) and delivered to our inbox. We do not store your submission on our own servers beyond what our email provider retains.

Docket — dry-cleaner order management

Docket is used by independent dry-cleaning shops (our clients) to manage customer orders. When a shop uses Docket to process your order, the following data may be collected:

• Your name and mobile phone number (provided at drop-off)
• Order details (garment description, ready date, price)
• SMS messages sent to your number about your order status

Lawful basis: performance of a contract (processing and returning your laundry order). The dry-cleaning shop is the data controller for your customer data; Deco Operations Ltd acts as a data processor on their behalf.

Phone numbers are stored securely in the EU and are used only to send you order-status SMS notifications via Twilio. We do not use your number for any other purpose, and we do not share it with third parties other than the sub-processors listed in §6.

3. How long we keep your data

• Contact form enquiries: retained in our inbox for up to 2 years, then deleted.
• Docket order records: retained for up to 3 years from the order date to support dispute resolution and shop accounting, then permanently deleted.
• Marketing consent records: retained until you withdraw consent.

4. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data (where no overriding legal basis applies)
• Object to processing based on legitimate interests
• Withdraw consent at any time (where consent is the lawful basis)
• Data portability (where processing is automated and consent- or contract-based)
• Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk

To exercise any of these rights, email us at hello@decooperations.co.uk. We will respond within one month.

5. Cookies and tracking

decooperations.co.uk does not currently set any cookies or use third-party analytics. If this changes we will update this policy and add a cookie notice.

Docket uses session cookies (HttpOnly, Secure) for staff authentication only. No cross-site tracking cookies are used.

6. Third-party sub-processors

7. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. If you have concerns, contact us at hello@decooperations.co.uk.

8. Changes to this policy

We may update this policy from time to time. Material changes will be noted at the top of this page with a revised “Last updated” date. Continued use of our services after a change constitutes acceptance of the revised policy.

9. Contact

Questions about this policy or how we handle your data: hello@decooperations.co.uk