Your laundry is personal. Your data should be too.

WashMe is responsible for the personal data processed to provide our laundry services and operate this website.

• Identity and contact: name, optional email, mobile number and preferred language.
• Collection and return: exact address, location type, access instructions, reception details and time windows.
• Service: selected services, weight, garments, care instructions, issues, operational notes and order status.
• Payment: amount, status, provider references, authorization, card brand and last four digits.
• Communication and tracking: service messages sent, delivery status, STOP, START or HELP requests, tracking access and operational driver location during an active route.
• Security and website: sessions, audit events, request-rate controls, aggregate cookie-free measurement and optional Google Analytics when you consent.

We process the data needed to prepare a booking, perform the requested service, coordinate drivers, provide order updates, calculate and charge the final amount, resolve issues and maintain billing records.

The main legal basis is performing the contract or taking steps you request before entering it. We also process data to meet legal obligations, for our legitimate interests in security, fraud prevention and reliable operations, and with consent where an optional feature requires it, such as non-essential analytics.

We do not use your data for solely automated decisions that produce legal or similarly significant effects.

Full card details and the CVV are entered directly in SumUp’s secure environment. WashMe does not receive or store them. We retain the card brand and last four digits so you can identify the method used.

At booking, you authorize one later charge for the final itemised total after the laundry is received, weighed and inspected. WashMe temporarily keeps an encrypted reference to the SumUp payment instrument to make that charge. Our reusable reference is revoked and cleared 7 days after every linked order has been delivered or cancelled.

SumUp processes card data under its own legal and security obligations. Its retention periods may differ from WashMe’s.

We provide access only where it is needed to deliver or protect the service. Recipient categories include authorized WashMe staff and providers acting for us, such as:

• SumUp for payment setup and processing charges or refunds.
• Twilio to deliver service SMS and process STOP, START and HELP replies.
• Google for address verification, maps and route planning; Google Analytics cookies are allowed only with consent. Consent Mode may send limited cookieless signals while analytics is denied.
• Vercel and our database and infrastructure providers to host and secure the platform.

We do not sell personal data or share communication data with third parties or affiliates for their own marketing. We provide it only to providers acting for WashMe where needed to deliver and protect the service. If a provider processes data outside the European Economic Area, we use a valid transfer mechanism where required, such as an adequacy decision or standard contractual clauses.

Order, invoice, payment, refund, authorization and audit records may be kept longer where needed for accounting or tax duties, contracts, claims, fraud prevention or legal defence. We review these periods and delete or anonymize data when it is no longer needed.

Under the General Data Protection Regulation, you may request access, correction, erasure, restriction, objection and portability where applicable. You may also withdraw consent without affecting earlier processing.

Email info@washme.es and state the right you want to exercise. We may request reasonable information to verify your identity. We normally respond within one month, subject to the extensions permitted by law for complex requests.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

We may update this notice when the service, our providers or the law changes. The date at the top identifies the current version.

Read our cookie policy too.