Privacy Policy

The data controller is HOLMAN WATER MANAGEMENT LTD (“Sheen”, “we”, “us”), registered office at 8 Valley Gardens, Kingsway, Gloucester, United Kingdom, GL2 2AR. For any privacy question or request, contact us at support@holwatman.shop or +44 7518374150.

• Account & contact data: name, email address, and messages you send us.
• Subscription & billing data: plan, billing status and the last four digits and card brand as returned by our payment processor. We never receive or store your full card number.
• Coach inputs: the task, surface, material, stain and free-text notes you enter, and any photos you choose to upload, so we can generate your cleaning plan and visuals.
• Generated outputs: the plans, Before/After visuals and reveal sequences we create for you.
• Support data: the contents of enquiries and our replies.
• Technical & usage data: IP address, device and browser type, and pages visited, collected through logs and essential cookies.

We collect personal data from these sources:

• Directly from you: when you create an account, subscribe, contact support, complete a form, enter a user input in the coach, or upload a photo or file.
• Automatically from your device: through essential cookies, request logs and limited analytics when you browse or use the service.
• From service providers: subscription and payment status from Stripe, and delivery, storage or processing status from our hosting, database, email and AI providers.

We do not buy personal data from data brokers or other third parties.

• To provide the service (generate plans and visuals, manage your account) — performance of a contract.
• To take payment and manage subscriptions — performance of a contract and legal obligation (tax and accounting records).
• To provide support and respond to you — legitimate interests and contract.
• To keep the service secure and improve it — legitimate interests.
• To send service or marketing messages — consent (which you can withdraw at any time) or legitimate interests for service messages.

Each user input — including the cleaning task, surface, material, stain, constraints and free-text notes — is sent to our contracted AI provider only as needed to generate the requested plan, image or reveal sequence. If you upload a photo, file or example data, it is processed for that same request. The AI provider acts as our processor and may temporarily retain request data for secure service delivery and abuse prevention under our contract; it may not use that data for its own advertising.

Uploaded images, example files and associated user input are cached for up to 30 days to support re-generation and support, then deleted from our active systems. Generated outputs are kept with your account so you can revisit them until you delete them or close your account; deletion requests may remain in encrypted backups only for a limited recovery cycle before being overwritten.

We do not use your user input, uploads, example data or generated results to train our models, and we contractually prohibit our AI provider from using them to train its models. Please do not upload photos of other people’s property without permission, and do not upload sensitive personal information.

Payments are processed by Stripe. Card details are entered on Stripe’s secure, PCI-compliant checkout. Sheen does not receive, see or store your full card number, CVC or expiry. We receive only limited confirmation data such as payment status and the card brand and last four digits.

We share personal data only with processors that help us run the service, under contract:

• Hosting & delivery: Vercel (application hosting and content delivery).
• Payments: Stripe (checkout, subscriptions, invoicing).
• Database, authentication & storage: Supabase.
• AI provider: our contracted AI content, image and video generation provider, which processes the minimum user input and uploaded files needed to render plans, visuals and reveal sequences on our instructions.
• Email: our email provider, used to send confirmations and support replies.

We may also disclose data where required by law. We do not sell your personal information.

Some processors may store or process data outside the UK or EEA. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses or an adequacy decision.

• Account and subscription records: for the life of the account and up to 6 years after, to meet tax and legal obligations.
• Uploaded photos and example files: up to 30 days, then deleted.
• Support correspondence: up to 24 months.
• Technical logs: typically up to 12 months.

Depending on your location, you have the right to:

• access a copy of your personal data;
• correct inaccurate data;
• erase data (“right to be forgotten”);
• restrict or object to processing;
• data portability;
• withdraw consent at any time;
• for California residents: know, delete, correct, and opt out of any sale or sharing of personal information, without discrimination.

To exercise any right, email support@holwatman.shop. We respond within the timeframes required by law.

Sheen does not sell your personal information and does not share it for cross-context behavioural advertising. If this ever changes, we will update this policy and provide a clear opt-out.

We use essential cookies to run the site and keep you signed in, and limited analytics to understand usage. See our Cookie Policy for details and choices.

The coach generates cleaning guidance automatically from your inputs, but this does not produce legal or similarly significant effects about you. Our service is not directed at children: it is not for anyone under 13, and users aged 13–17 must have consent from a parent or guardian, who must supervise any handling of cleaning products.

We use encryption in transit, access controls and reputable processors to protect your data. No system is perfectly secure, but we work to protect your information and will notify you and the relevant authority of a qualifying breach as required by law.

Contact us any time at support@holwatman.shop. If you are in the UK you may also complain to the Information Commissioner’s Office (ICO); in the EEA, to your local supervisory authority; in California, you may contact the California Privacy Protection Agency.