Privacy notice and data-processing policy

1. Data we process

We process only the information needed to provide services, answer requests, administer accounts, and recruit or engage our team.

• Clients and contacts: name, phone, email, address, property details, access instructions, preferences, bookings, payments, and communications.
• Applicants and workers: name, contact details, area, experience, availability, ID type and number, ID copy, electronic signature, signed text, and integrity records such as date, IP address, and browser.
• Site technical data: security and server logs, and analytics only where the relevant tools have been configured.

2. Purposes

We use personal data for the stated and compatible purposes below:

• Quoting, booking, charging, scheduling, and providing cleaning services; coordinating access and handling guarantees.
• Responding to messages, preventing fraud, protecting clients and staff, investigating incidents, and preserving evidence.
• Reviewing applications, verifying identity and experience, interviewing, hiring, training, assigning work, and meeting employment, social-security, and workplace-safety obligations.
• Meeting accounting, tax, contractual, court, and administrative obligations and defending legal claims.
• Measuring and improving the site when analytics is enabled. We do not sell personal data or make hiring decisions solely through automated processing.

3. Authorisation and applicant data

Applicant-data authorisation is requested through a separate, unchecked box before submission. We retain evidence of the authorisation and the version of this notice accepted.

ID copies and signature marks receive heightened protection. They are encrypted before storage, kept outside the public site directory, and delivered only through an authenticated route for authorised administrators. Contact us before applying if you require an accessible alternative or do not wish to draw a signature online.

Applying does not authorise indiscriminate disclosure to police or third parties. We will disclose relevant data to an authority only where a duty, order, legal interest, or other lawful basis exists, and will limit disclosure to what is necessary.

4. Processors and international handling

We may use hosting, database, messaging, payment, backup, analytics, and support providers that process information for MimiMaids. We require confidentiality, security, and use limited to the contracted purpose. Payment providers process financial data under their own policies; MimiMaids does not store full card numbers.

Where a provider handles data outside Colombia, we apply Colombian rules on international transmission or transfer and the safeguards that are required.

5. Retention and security

We retain data only as long as needed for the stated purpose, the contractual relationship, and legal or claim-defence periods. Unsuccessful applications are periodically reviewed so documents no longer needed can be deleted. A deletion request is honoured unless a legal or contractual retention duty applies.

Controls include access restrictions, administrator authentication, document encryption, integrity hashes, and separation between private files and public content. No system is infallible; if we identify an incident that must be reported, we will act under applicable law.

6. Your rights

You may know, update, and correct your data; request proof of authorisation; ask how it has been used; complain to Colombia’s Superintendence of Industry and Commerce after the direct process where required; revoke authorisation or request deletion where permitted; and access your data without charge.

• Send your request to hello@mimimaids.co with your name, reply method, a description of the request, and the information needed to verify your identity.
• If acting for someone else, include proof of authority. Do not send extra identity documents unless requested.
• We respond within the time and process established by applicable Colombian rules.

7. Children and changes

The employment application is intended for adults. Do not submit an application for a child through this channel.

We may update this policy for legal, technical, or operational changes. The version and date will remain visible; if a change requires fresh authorisation, we will obtain it before using data for the new purpose.