Last updated: 27 February 2026
1. Purpose and Scope
Cirka Services Limited (“Cirka”, “we”, “us” or “our”) is committed to protecting your privacy and handling personal information transparently and securely. This Privacy Notice explains:
- what personal information we collect
- how and why we use it
- the legal bases we rely on
- how we protect and retain it
- your rights under UK data protection law, and
- how to contact us or raise a complaint.
This Notice applies to all individuals whose personal data we process, including customers, website visitors, employees, contractors, job applicants, suppliers and other third parties.
2. Who We Are
Registered name: Cirka Services Limited
Registered address: 3rd Floor Lawford House, Albert Place, London, England, N3 1QA
Company number: 11590421
References to “Cirka”, “we”, “us” or “our” mean Cirka Services Limited and, where relevant, any group entities.
3. Personal Information We Collect
Depending on our relationship with you, we may collect and process the following categories of personal information:
- Identity information: name, title, date of birth
- Contact information: postal address, email address, telephone numbers
- Employment and contractor information: CVs, qualifications, references, right-to-work documentation
- Security and access information: CCTV footage, photographs, site access records
- Technical and usage information: IP address, browser type, operating system, website usage data and cookies
- Financial and transaction information: invoicing and payment details
- Health and safety information: incident and accident records, including medical information where necessary
- Special category data: such as health information, where required for employment, health and safety, or other legal obligations
We collect personal information directly from you, from third parties (such as clients or background-check providers), and automatically through our website.
4. How We Use Personal Information
We use personal information to:
- deliver cleaning and facilities services
- manage employment and contractor relationships
- ensure health, safety and security at sites
- operate and improve our website and IT systems
- communicate with clients, suppliers and individuals
- comply with legal and regulatory obligations
- manage our business operations, including audit and accounting.
5. Lawful Bases for Processing
We process personal information only where permitted by law, relying on one or more of the following legal bases:
- performance of a contract
- compliance with a legal obligation
- our legitimate business interests
- your consent (for example, for marketing or optional cookies).
Where we rely on legitimate interests, these may include delivering and improving our services, ensuring site security, preventing fraud, and managing our business effectively. We balance these interests against your rights, freedoms and reasonable expectations.
Where we process special category data (such as health information), we do so only where permitted by law, including for employment obligations, health and safety purposes, or to protect vital interests.
6. Sharing Personal Information
We may share personal information with:
- our employees, contractors and authorised agents
- service providers such as IT, payroll and background-check providers
- clients or site operators where required to deliver services
- regulators, law enforcement or public authorities where required by law
- potential purchasers of our business in the event of a sale or restructuring.
All third parties are required to protect personal information and use it only for authorised purposes.
7. International Transfers
Where personal information is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or approved contractual protections, in accordance with data protection law.
8. Data Security
We use appropriate technical and organisational measures to protect personal information, including access controls, encryption, confidentiality obligations and regular security reviews.
9. Data Retention
We retain personal information only for as long as necessary for legal, regulatory and operational purposes. Typical retention periods include:
- Client and contract records: up to 6 years
- Employee and contractor records: up to 6 years after the relationship ends
- Health and safety records: at least 3 years
- Marketing consent records: until consent is withdrawn.
When information is no longer required, it is securely deleted or anonymised.
10. Your Rights
Under UK data protection law, you have rights to:
- access your personal information
- correct inaccurate information
- request deletion
- restrict or object to processing
- request data portability, and
- withdraw consent where processing is based on consent.
To exercise your rights, contact [email protected].
11. Cookies and Website Tracking
Our website uses cookies and similar technologies. For full details, please see our Cookie Policy. Non-essential cookies are used only with your consent.
12. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for their content or privacy practices.
13. Complaints and Contact
If you have questions or concerns about this Privacy Notice, please contact us at [email protected] or at our registered address. You may also raise a complaint with the UK Information Commissioner’s Office (ICO).
14. Changes to This Notice
We may update this Privacy Notice from time to time. The “Last updated” date will indicate the most recent version.