Privacy Policy - Landscaping Newcross

This Privacy Policy explains how Landscaping Newcross collects, uses, stores, shares, and protects personal data relating to all customers in the area. It applies to anyone who engages our landscaping services, requests a quote, communicates with us, or otherwise provides us with personal information in connection with our work. We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data We Collect

We only collect personal data that is necessary for the provision and administration of our services. The type of data we collect depends on your relationship with us and the services requested.

Information you provide directly

Identity and contact details such as your name, address, telephone number, and email address.
Service information such as property details, garden preferences, project requirements, access notes, and scheduling instructions.
Communication records including messages, calls, complaints, feedback, and correspondence.
Payment-related information such as billing details and transaction records, where relevant.
Contract and account details such as quotes accepted, invoices issued, service history, and work orders.

In limited cases, we may also process special category data if you choose to provide it and it is necessary for a specific request, for example, if access needs or safety considerations are relevant to service delivery. We do not seek unnecessary sensitive information.

Information collected automatically

When you communicate with us electronically, we may collect technical information such as email metadata, device details, and basic usage information. This is used to manage our services, prevent misuse, and maintain security. We do not use unnecessary intrusive tracking.

2. How We Use Your Data

We use personal data only for legitimate business and legal purposes connected to our landscaping services. Typical uses include:

Providing quotations, site assessments, and service delivery.
Managing bookings, schedules, and customer requests.
Issuing invoices, processing payments, and maintaining accounting records.
Responding to enquiries, complaints, and service updates.
Meeting legal, regulatory, tax, and insurance obligations.
Protecting our business, staff, clients, and property from fraud or misuse.
Maintaining service quality, internal records, and operational planning.

We do not use your personal data for purposes that are incompatible with the reasons it was collected unless we have a lawful basis to do so and have informed you where required.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Landscaping Newcross relies on the following bases:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, arranging services, completing landscaping work, and managing related admin.

Legal obligation

We may process personal data where required to comply with legal duties, such as tax, accounting, record-keeping, and insurance obligations.

Legitimate interests

We may process data where it is necessary for our legitimate interests and where your rights do not override those interests. This may include managing customer relationships, improving service operations, preventing fraud, and keeping secure business records. We always consider the impact on your privacy before relying on this basis.

Consent

In some situations, we may ask for your consent, especially where processing is optional or relates to sensitive information. If we rely on consent, you may withdraw it at any time. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

4. How We Share Personal Data

We do not sell personal data. We may share data only where necessary and appropriate for service delivery, legal compliance, or business operations.

Service providers who help us with administration, accounting, secure storage, scheduling, or communications.
Professional advisers such as accountants, insurers, or legal advisers when needed.
Authorities or regulators if disclosure is required by law or necessary to protect rights and safety.

All processors and service providers are selected carefully and are required to handle personal data securely and only on our instructions where applicable.

5. Processors

A processor is a third party that processes personal data on our behalf. We use processors only where they can provide suitable safeguards for confidentiality, integrity, and security. Examples of processor functions may include cloud storage, email hosting, invoicing, accounting software, document management, and secure backups.

We ensure, through written agreements and internal review, that processors:

process data only for the agreed purpose;
implement appropriate security measures;
do not use the data for their own purposes;
assist with data subject requests and compliance where required.

Where personal data is transferred outside the UK, we will only do so where appropriate safeguards are in place and the transfer is lawful.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or contractual requirements. Retention periods depend on the nature of the record and the reason for processing.

Customer and project records are retained for the duration of the relationship and for a reasonable period afterward.
Invoices and accounting records are retained for the period required by tax and financial laws.
Correspondence and service communications are retained as long as needed to manage the matter and maintain an accurate business record.
Supporting documentation may be kept where necessary to address disputes, enforce agreements, or satisfy insurance requirements.

When data is no longer needed, we take steps to delete, anonymise, or securely destroy it. We do not keep personal data indefinitely.

7. Your Rights

As a data subject, you have rights under data protection law. These rights may apply depending on the circumstances and any legal exemptions.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can request deletion of your data in certain situations.
Right to restriction – you can ask us to limit how we use your data in specific cases.
Right to object – you can object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – you can request transfer of certain data to another controller, where technically feasible and legally applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we may need to verify your identity before responding. We aim to respond within the time limits required by law.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and staff confidentiality requirements. While no system can be guaranteed completely secure, we work to maintain a level of protection appropriate to the risks involved.

9. Children’s Data

Our services are not directed to children, and we do not knowingly collect personal data from children unless it is incidentally provided by an adult customer in connection with a service request. Where children’s data is inadvertently processed, we will handle it in accordance with applicable law and with appropriate care.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or business changes. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers in the area to review this policy periodically so they remain informed about how their data is handled.

By using our services, you acknowledge that you have read this Privacy Policy and understand how your personal data is processed by Landscaping Newcross.