Your Space, Brilliantly
Clean & Refreshed

Our Statement

Your trust matters as much as a spotless home. When you create an account, book a cleaning or contact us, you share personal details with Maid In My City. We handle them carefully, openly and only for the purposes explained here.

This policy follows three laws that apply to our business and our customers: the Data Privacy Act of the Philippines (Republic Act 10173), the European Union General Data Protection Regulation (GDPR), and Nevada Revised Statutes Chapter 603A on the security and privacy of personal information.

What we collect: your email address, username and password (account); and your name, phone number, address and service details when you book or contact us. Why: to run your account, schedule and confirm cleanings, answer your questions and keep the website secure. We do not sell your personal information.

Data Privacy Act of the Philippines

This law protects personal information handled by government and private organizations, and created the National Privacy Commission (NPC) to enforce it. Its core rules:

• Transparency: you must be told what is collected, why, how it is used, who is responsible for it, and how to use your rights.
• Legitimate purpose: data may be used only for a declared and lawful purpose.
• Proportionality: only data that is necessary for that purpose may be collected, and nothing excessive.

Your rights include being informed, accessing your data, objecting to its use, correcting it, having it erased or blocked, claiming damages if you are harmed, receiving a portable copy, and filing a complaint with the NPC (privacy.gov.ph).

Our duties: use appropriate security safeguards, share data only where the law allows, and report serious data breaches to the NPC and the people affected within 72 hours. Serious violations carry fines and imprisonment.

EU General Data Protection Regulation

The GDPR protects people in the European Union and sets one of the strictest standards in the world. It requires that personal data be:

• Processed lawfully, fairly and transparently;
• Collected for specific purposes and not reused for incompatible ones;
• Minimized to what is needed, kept accurate, and stored only as long as necessary;
• Protected with integrity and confidentiality (security); and
• Handled with accountability, so the organization can prove it complies.

Every use of personal data needs a lawful basis: your consent, a contract with you, a legal obligation, protecting vital interests, a public task, or a legitimate interest that does not override your rights. Privacy must also be built in by design and by default.

Your rights (GDPR Articles 12 to 22): to be informed, to access your data, to correct it, to have it erased, to restrict or object to its use, to data portability, and not to be subject to purely automated decisions. Requests should be answered within one month.

Breaches: the supervisory authority must be notified within 72 hours when a breach puts people at risk, and affected individuals must be told without undue delay when the risk is high.

Nevada Revised Statutes Chapter 603A

This Nevada law applies to businesses that collect personal information from Nevada residents. In plain terms it requires that we:

• Keep reasonable security measures that protect records from unauthorized access, use, change or disclosure, and require anyone we share data with by contract to do the same (NRS 603A.210).
• Treat logins as protected data. The law counts a username or email address combined with a password as personal information when it could open an online account (NRS 603A.040).
• Follow payment card rules: comply with the Payment Card Industry Data Security Standard when accepting cards, and encrypt personal data sent electronically outside our secure system (NRS 603A.215).
• Destroy records properly by making personal information unreadable when we no longer keep it (NRS 603A.200).
• Tell you about a breach in the most expedient time possible and without unreasonable delay, unless law enforcement asks for a delay (NRS 603A.220).
• Publish an online privacy notice that explains the categories of information collected, the categories of third parties it may be shared with, how you can review or change it, how we announce changes, whether third parties may track activity across sites, and the effective date (NRS 603A.340).
• Honor opt-out-of-sale requests: you may send a verified request that we never sell your covered information, and we must respond within 60 days (NRS 603A.345).

Violations can be treated as deceptive trade practices, and the Nevada Attorney General can seek court orders and civil penalties.

How We Apply These Laws on This Website

• Collect only what we need. Account sign-up asks for email, username and password; bookings ask for the details required to perform the cleaning.
• Use data only for the stated purposes above, and ask for your consent again before using it for anything new.
• Protect your login. Passwords are stored in protected (hashed) form, never in plain text, and connections to the site are encrypted.
• Handle payments safely. Card payments go through payment providers that meet PCI standards; we do not keep full card numbers.
• Limit access to authorized personnel and our appointed IT professional, who are bound by confidentiality.
• Never sell your personal information. We share it only with service providers acting for us (such as hosting, email or payment providers) who must protect it, or where the law requires.
• Click analytics: to improve the website we count anonymous clicks on our own pages (Home, About, Blog, Prices and Contact): the page, the button or link, the time, whether you are on a phone or a computer, plus a random visit code that is not linked to your name, email or account. We never record what you type into forms, we use no third-party trackers for this, and staff (admin) activity is excluded.
• Sign-in activity: when you continue as a guest, sign up, log in or log out, we record the type of visitor (guest, user, admin or maid), your username or ID No., the date and time, whether it worked, whether you used a phone or a computer, and a short scrambled code made from your connection address (not the address itself). We never record your password. This helps us keep accounts secure and spot misuse, and only authorized staff can see it.
• Keep it only as long as needed, then delete or destroy it securely.
• Honor your rights. To see, correct, delete, export or limit the use of your information, or to opt out of any sale, contact us at 702-722-7237 or through the contact form. We aim to reply within 30 days and will verify your identity first.
• Act fast on breaches. If your information is ever exposed, we will notify the authorities and the people affected within the time the law requires, within 72 hours where it applies.
• Tell you about changes. Any material update will be posted here with a new effective date.

Confidentiality Statement

Details about you, your home, your access instructions and your schedule are confidential. They are used only to provide your cleaning service and manage your account.

• Address and access details are shared only with the team members assigned to your cleaning.
• The business owner and our appointed IT professional may access account data only as needed to operate and maintain the website, under a written confidentiality commitment.
• We do not disclose your information to anyone else unless you ask us to, a service provider needs it to perform work for us under confidentiality and security obligations, or the law requires it.
• Sensitive information is safeguarded, and any dispute about it is handled professionally and respectfully.

Conclusion

Sources & Notice

This is a plain-language summary for general information and is not legal advice. Please read the full texts: Data Privacy Act Implementing Rules (National Privacy Commission), GDPR, Regulation (EU) 2016/679 (EUR-Lex) and NRS Chapter 603A (Nevada Legislature).