Privacy Policy - Landscaping Camdentown
This Privacy Policy explains how Landscaping Camdentown collects, uses, stores, shares, and protects personal data relating to customers and prospective customers. It applies to all Landscaping Camdentown customers in the area, including individuals who request quotations, book services, communicate with us, or receive landscaping and related property care services. We are committed to handling personal data in a lawful, fair, and transparent way in line with the General Data Protection Regulation (GDPR).
1. Who this policy applies to
This policy applies to any person whose personal data we process in connection with our services. That includes:
- Customers who purchase landscaping services
- Prospective customers who request estimates or information
- Property owners, occupiers, tenants, or agents who liaise with us
- Individuals whose details are provided in connection with a service visit, site assessment, or ongoing maintenance work
By using our services or communicating with us, you acknowledge that your personal data may be processed in accordance with this policy.
2. Data we collect
We only collect personal data that is necessary for service delivery, administration, legal compliance, and legitimate business operations. The types of data we may collect include:
Identity and contact details
- Name
- Address and service location
- Telephone number
- Email address
Service and transaction information
- Details of requested or completed landscaping services
- Property and site notes relevant to the work
- Quotation history, invoices, and payment records
- Communication records relating to bookings, scheduling, and service updates
Technical and usage data
- Basic device or browser information if you contact us electronically
- Records of messages sent through digital communication channels
- Limited log information needed to maintain secure systems
Special category data
We do not intentionally collect special category data, such as health information, unless it is strictly necessary and you choose to provide it. If such information is ever processed, we will do so only where permitted by GDPR and with appropriate safeguards.
3. How we use personal data
We use personal data for the following purposes:
- To provide quotations and assess service requirements
- To schedule, deliver, and manage landscaping services
- To communicate with customers about appointments, updates, and service matters
- To issue invoices, process payments, and maintain accounting records
- To manage customer relationships and respond to enquiries or complaints
- To comply with legal, tax, insurance, and regulatory obligations
- To protect the security of our systems, staff, and business operations
- To maintain records necessary for quality control, dispute resolution, and service improvement
We will not use your personal data for purposes that are incompatible with the reasons for which it was collected, unless we have a lawful basis to do so.
4. Lawful basis for processing
Under GDPR, we rely on one or more lawful bases depending on the purpose of the processing. These include:
Contract
We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotes, confirming bookings, delivering services, and managing billing.
Legal obligation
We process data where necessary to comply with legal obligations, including tax, accounting, record-keeping, and regulatory requirements.
Legitimate interests
We may process personal data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. This may include service management, administrative efficiency, fraud prevention, business improvement, and maintaining secure records.
Consent
In limited cases, we may rely on your consent, for example where it is legally required for a specific type of communication or optional processing. Where we rely on consent, you may withdraw it at any time.
5. Sharing of personal data and processors
We may share personal data with trusted third parties who act as data processors or, in some cases, independent controllers. We only share data where necessary and with appropriate contractual and security safeguards. Our processors may include:
- Accounting and bookkeeping providers used to manage invoices, payments, and statutory records
- IT and cloud service providers used to store and secure business data
- Communication service providers used to send emails, messages, or booking updates
- Payment service providers used to process transactions securely
- Professional advisers such as legal, tax, or insurance advisers where needed
We may also disclose personal data if required by law, court order, regulatory request, or to protect our rights, property, staff, customers, or the public. We do not sell personal data.
6. International transfers
If any processor stores or accesses data outside the UK or EEA, we will ensure that appropriate safeguards are in place. These may include adequacy decisions, standard contractual clauses, or equivalent protection measures required under applicable data protection law.
7. Data retention
We keep personal data only for as long as necessary for the purpose for which it was collected, unless a longer period is required by law. Retention periods may vary depending on the type of data and the reason for processing.
- Customer and service records are retained for the duration of the relationship and for a reasonable period afterwards for administration and dispute handling
- Financial and tax records are retained for the period required by law
- Communication records are retained as needed to manage ongoing customer service and business accountability
- Security and system records are retained for a limited period unless needed longer for investigation or legal compliance
When personal data is no longer needed, we will delete, anonymise, or securely destroy it.
8. Data security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our data handling practices. However, no system is completely secure, and we cannot guarantee absolute protection.
9. Your rights under GDPR
You have a number of rights concerning your personal data, subject to certain legal limitations. These rights include:
Right of access
You may request confirmation of whether we process your personal data and ask for a copy of the information we hold about you.
Right to rectification
You may ask us to correct inaccurate or incomplete personal data.
Right to erasure
In some circumstances, you may request that we delete your personal data, for example where it is no longer needed or where consent has been withdrawn and no other lawful basis applies.
Right to restriction
You may ask us to restrict processing in certain situations, such as where you contest the accuracy of the data or object to processing.
Right to data portability
Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, commonly used format.
Right to object
You may object to processing based on legitimate interests, and we will consider whether our lawful grounds override your objection.
Rights related to consent
Where we rely on consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.
If you wish to exercise any of these rights, we may need to verify your identity before responding. We aim to respond within the timescales required by law.
10. Complaints
If you believe your personal data has been handled unlawfully or unfairly, you have the right to raise a complaint with the relevant data protection authority. You may also contact us to discuss your concerns so we can review and address them where appropriate.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how personal data is handled.
Last reviewed: This policy is intended to provide clear GDPR-aligned information for customers of Landscaping Camdentown in the area.