Privacy Policy - Landscaping Hackbridge

This Privacy Policy explains how Landscaping Hackbridge collects, uses, stores, shares, and protects personal data. It applies to all Landscaping Hackbridge customers in the area, including prospective customers, existing customers, and anyone who interacts with our services. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Landscaping Hackbridge provides landscaping-related services to customers in the local area. In delivering our services, we may collect and process personal information about individuals, property owners, tenants, contractors, and representatives of businesses. This policy applies whenever we act as a data controller, meaning we decide how and why personal data is used.

2. Personal Data We Collect

We only collect personal data that is necessary for providing our services, managing customer relationships, meeting legal obligations, and improving our operations. The data we may collect includes:

Identity data such as name and title.
Contact data such as address, email address, and telephone number.
Service details including information about your property, requested work, preferences, and service history.
Communication data such as messages, enquiries, feedback, and complaint records.
Payment data such as billing details and payment status.
Technical data such as basic website or device information if you contact us through digital means.
Marketing preferences where you choose to receive or decline promotional information.

We do not seek to collect special category data unless it is strictly necessary and you have chosen to provide it, or unless another lawful basis applies. Special category data includes information such as health details, religious beliefs, or biometric data.

3. How We Use Your Data

We use personal data only for legitimate business and legal purposes. These may include:

Providing quotations, arranging appointments, and delivering landscaping services.
Managing customer accounts and maintaining service records.
Communicating about service updates, scheduling, and customer support.
Processing invoices and payments.
Handling complaints, disputes, and follow-up matters.
Meeting tax, accounting, and legal obligations.
Protecting our business, staff, and customers from fraud or misuse.
Improving service quality and understanding customer needs.
Sending marketing communications where permitted by law and where you have not opted out.

We will always ensure that our use of your information is proportionate and limited to what is necessary for the purpose concerned.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Landscaping Hackbridge relies on the following legal grounds:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes arranging quotations, carrying out agreed work, taking payment, and managing service delivery.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Examples include responding to enquiries, improving services, keeping records, preventing fraud, and managing internal administration. We always assess whether our interests are appropriate and whether processing is fair.

Legal Obligation

We may process and retain certain information to comply with legal obligations, including tax rules, accounting requirements, health and safety duties, and record-keeping responsibilities.

Consent

In limited cases, we rely on your consent, for example for certain types of marketing. Where consent is used, it will be specific, informed, and freely given. You may withdraw consent at any time.

Vital Interests and Public Task

These bases are unlikely to apply in most cases, but we may rely on them if needed to protect someone’s life or where required by law in exceptional circumstances.

5. Data Sharing and Processors

We may share personal data with trusted third parties who help us provide our services. These parties act as processors when they process data on our instructions. We require all processors to handle personal data securely, use it only for agreed purposes, and comply with data protection law.

Examples of processors may include:

IT and cloud service providers used for secure storage, email, and system administration.
Accounting or bookkeeping providers who help manage invoices and financial records.
Payment service providers who process transactions securely.
Scheduling or administration tools used to organise appointments and service records.
Professional advisers such as legal or insurance advisers where necessary.

We may also disclose personal data to independent controllers where required, such as HMRC, regulators, law enforcement, insurers, or courts. In those cases, those organisations determine how they use the data in line with their own obligations.

We do not sell your personal data. Any sharing is limited to what is necessary and subject to appropriate safeguards.

6. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods depend on the type of data and the purpose of processing.

Customer and service records are usually kept for the duration of the relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law.
Communication records may be kept to resolve disputes or demonstrate service history.
Marketing preferences are retained until you withdraw consent or object.

When data is no longer required, it is securely deleted, anonymised, or destroyed. We review retention needs regularly to ensure we do not keep information longer than necessary.

7. Security of Personal Data

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff awareness, and limiting data access to authorised individuals only. While no system can be guaranteed completely secure, we work to maintain a high standard of protection.

8. Your Rights

Depending on the circumstances, you have rights under data protection law. These include:

Right of access to request a copy of your personal data.
Right to rectification to ask us to correct inaccurate or incomplete information.
Right to erasure in certain situations, also known as the right to be forgotten.
Right to restrict processing in certain cases where use of your data should be limited.
Right to object to processing based on legitimate interests or direct marketing.
Right to data portability for certain information processed by automated means based on consent or contract.
Right to withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data has been handled unlawfully or unfairly. We encourage you to raise concerns with us first so we can try to resolve the matter promptly.

9. Cookies and Online Interactions

If you interact with us online, we may receive limited technical information from your browser or device. Any such data is used only for basic functionality, security, and performance purposes. Where cookies or similar technologies are used, they will be handled in a way that respects applicable legal requirements and your preferences where required.

10. Children’s Data

Our services are generally directed to adults. We do not knowingly collect personal data from children unless it is necessary for a service arrangement and provided by a parent, guardian, or authorised adult. If we become aware that we have collected data unlawfully from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically so they remain informed about how their personal data is used.

12. Summary of Our Commitment

Landscaping Hackbridge is committed to handling personal data responsibly, securely, and lawfully. We collect only what we need, use it for clear and legitimate purposes, retain it for appropriate periods, and work with processors who are bound by strict data protection obligations. Customers in the area can exercise their rights and expect transparency in how their information is managed. This policy is designed to support trust, protect privacy, and ensure compliance with applicable law.