Privacy Policy - Landscaping Blackheath

This Privacy Policy explains how Landscaping Blackheath collects, uses, stores, shares, and protects personal data when providing landscaping services. It applies to all Landscaping Blackheath customers in the area, including prospective, current, and former customers, as well as anyone who interacts with us in connection with our services.

We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018. We only collect information that is necessary for delivering our services, managing customer relationships, complying with legal obligations, and improving our operations.

1. Personal Data We Collect

We may collect personal data directly from you, from third parties acting on your behalf, or from records created during the provision of our services. The types of information we may collect include:

Identity details: name, title, and any details needed to identify you or your property.
Contact details: address, telephone number, and email address.
Service information: details of the landscaping work requested, quotes, project specifications, and service history.
Payment information: billing records, transaction details, and payment status. We do not store full card details unless processed securely by a payment provider.
Communication records: emails, messages, call notes, and feedback.
Site and property information: photographs, measurements, access details, and notes relevant to carrying out work safely and effectively.
Technical data: limited information such as IP address or device activity when using digital forms or online systems.

We do not intentionally collect special category data unless it is strictly necessary and permitted by law. If such data is ever required, we will ensure an appropriate lawful basis and additional safeguards are in place.

2. How We Use Personal Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to plan, deliver, and manage landscaping services;
to communicate about appointments, changes, and service updates;
to process invoices and payments;
to maintain records of work completed and customer preferences;
to deal with complaints, queries, or disputes;
to meet legal, tax, accounting, and regulatory obligations;
to improve service quality, safety, and operational efficiency;
to protect against fraud, misuse, or unlawful activity.

We only use personal data where it is necessary for a clear and legitimate purpose, and we do not use it in ways that are incompatible with the original reason it was collected.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing personal data. Landscaping Blackheath relies on the following lawful bases depending on the context:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotations, arranging appointments, delivering landscaping services, and handling payment administration.

Legal Obligation

We may process personal data where required to comply with legal duties, such as tax, accounting, record-keeping, health and safety, or other regulatory requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. Examples include managing our business, improving service quality, responding to customer questions, preventing fraud, and maintaining secure records. We always consider whether the processing is proportionate and necessary.

Consent

In limited cases, we may rely on your consent, for example for certain optional communications. Where consent is used, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Processors

We may share personal data with trusted third-party service providers who act as processors on our behalf. These processors only handle data under our instructions and are required to keep it secure and confidential. Examples may include:

IT and cloud storage providers;
email and communication service providers;
accounting and invoicing systems;
payment processing providers;
professional advisers such as accountants or legal advisers;
subcontractors or specialists involved in delivering specific landscaping tasks.

We may also disclose data where required by law, court order, or lawful request from a public authority. If a subcontractor or third party is engaged to assist with a project, we will only share the information necessary for that work and will take reasonable steps to ensure data is protected.

We do not sell personal data.

5. International Transfers

If any processor stores or accesses personal data outside the United Kingdom, we will only transfer data where appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We will take steps to ensure your data receives a level of protection that is substantially equivalent to UK standards.

6. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected, including satisfying legal, accounting, or reporting requirements. The exact retention period depends on the nature of the data and the reason for processing.

Customer and project records: kept for the period needed to manage services and resolve disputes.
Financial and tax records: retained for the period required by law.
Communication records: retained for a reasonable period to manage queries and maintain service history.
Marketing consent records: kept until consent is withdrawn or the data is no longer needed.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our procedures.

While no system can be guaranteed completely secure, we strive to ensure that personal data is handled with care and diligence at all stages of processing.

8. Your Rights

Under data protection law, you have a number of rights regarding your personal data. These may include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to ask us to limit how we use your data in certain situations.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to request certain data in a structured, commonly used format where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

We will respond to valid requests within the time limits set by law. In some cases, we may need to verify your identity before fulfilling a request. Please note that certain rights may not apply in all circumstances, especially where we must retain data to meet legal obligations or establish, exercise, or defend legal claims.

9. Children’s Data

Our services are generally intended for adults. We do not knowingly collect personal data from children unless it is necessary in the context of a customer’s household or property and is provided by an adult with authority to do so. If we become aware that we have collected data from a child without appropriate authorisation, we will take steps to delete it where required.

10. Automated Decision-Making

We do not use personal data for automated decisions that produce legal or similarly significant effects. Any decisions relating to quotations, scheduling, or service delivery are reviewed by people rather than made solely by automated systems.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

12. Summary of Our Commitments

In summary, Landscaping Blackheath collects only the data needed to deliver landscaping services and run our business responsibly. We process data on clear lawful bases, share it only with trusted processors or where legally required, retain it for no longer than necessary, and respect your rights under data protection law. We are committed to keeping all customer information secure, confidential, and handled in a transparent and lawful way.

This policy applies to all Landscaping Blackheath customers in the area.