Privacy Policy - Landscaping Nottinghill

This Privacy Policy explains how Landscaping Nottinghill collects, uses, stores, shares, and protects personal data when providing landscaping services. It applies to all Landscaping Nottinghill customers in the area, including prospective clients, existing customers, and individuals who interact with us in connection with quotations, site visits, garden maintenance, design work, and related services. We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Landscaping Nottinghill acts as the data controller for the personal information we collect and use in the course of our business. This means we determine the purposes and means of processing personal data for service delivery, administration, compliance, and customer support.

2. Personal Data We Collect

We collect only the personal data that is necessary for the provision of our landscaping services and for managing our relationship with customers. Depending on how you interact with us, we may collect the following categories of data:

Identity data: name, title, and other identifying details.
Contact data: address, email address, telephone number, and property location.
Service data: details about the landscaping services requested, agreed, or completed, including garden preferences, property access requirements, and site notes.
Payment data: invoicing information, transaction records, and payment status.
Communication data: records of enquiries, quotations, instructions, complaints, and correspondence.
Technical data: limited information such as IP address or device details if you interact with us through digital communication tools.
Contract and account data: agreements, service history, scheduling information, and record of ongoing work.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, or we are required to process it for a lawful reason. If such information is ever provided, it will be handled with enhanced care and only for a clearly defined purpose.

3. How We Use Personal Data

We use personal data for legitimate business purposes related to our landscaping services. Typical uses include:

providing quotations, estimates, and service recommendations;
planning and carrying out landscaping, maintenance, and related work;
managing customer records, scheduling visits, and tracking job progress;
issuing invoices, processing payments, and maintaining accounts;
responding to enquiries, requests, and feedback;
meeting legal, tax, insurance, and regulatory obligations;
preventing fraud, misuse, or security incidents;
improving service quality, internal operations, and customer experience.

We only use personal data for the purpose for which it was collected, unless we reasonably need to use it for a compatible purpose or another lawful basis applies.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Landscaping Nottinghill relies on the following lawful bases where appropriate:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, confirming jobs, delivering services, and handling payments.

Legal Obligation

We process certain information where required to comply with legal obligations, including tax recordkeeping, accounting rules, and other regulatory requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include managing appointments, maintaining accurate records, improving services, securing our systems, and handling customer communications.

Consent

Where required, we will rely on your consent. For example, if we need your explicit permission for specific optional communications or for processing information beyond the original purpose, we will request consent clearly and you may withdraw it at any time.

5. Sharing Personal Data and Processors

We may share personal data with trusted third parties who assist us in operating our business. These third parties act as processors when they process data on our instructions, or as independent controllers where they determine their own purposes. We require all processors to handle personal data securely and in accordance with data protection law.

Examples of processors and service providers may include:

Accounting and bookkeeping providers who help manage invoicing, financial records, and tax compliance;
IT and cloud storage providers who support secure data storage, system maintenance, and backup services;
Payment processing services that facilitate electronic transactions;
Scheduling or administrative tools used to manage appointments and job planning;
Professional advisers such as insurers, lawyers, or auditors where necessary for legal or business purposes.

We may also disclose personal data if required by law, court order, or lawful request from a public authority. If a business transfer, restructuring, or similar event occurs, relevant data may be transferred in accordance with legal requirements and appropriate safeguards.

6. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, and to meet legal, accounting, or reporting obligations. Retention periods depend on the type of information and the reason we hold it.

Customer service and contract records: kept for the duration of the service relationship and for a reasonable period afterwards to address queries, disputes, or follow-up work.
Financial and tax records: retained for the period required by applicable accounting and tax laws.
Communication records: retained as needed to maintain accurate business records and resolve issues.
Consent-based data: retained until consent is withdrawn or the data is no longer necessary.

When personal data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures are designed to reflect the nature of the data and the risks involved. Access is limited to people who need the information for legitimate business purposes, and we review our practices to help maintain security.

8. International Transfers

If any processor or service provider stores or accesses data outside the UK, we will take steps to ensure an adequate level of protection in accordance with data protection law. Where needed, this may include appropriate contractual safeguards or other approved transfer mechanisms.

9. Your Rights

You have a number of rights in relation to your personal data under UK GDPR. These rights may be subject to legal limitations and exemptions. Subject to those conditions, you may have the right to:

Access the personal data we hold about you;
Rectify inaccurate or incomplete information;
Erase your data in certain circumstances;
Restrict the processing of your data in certain situations;
Object to processing based on legitimate interests or direct marketing;
Data portability where processing is based on consent or contract and carried out by automated means;
Withdraw consent at any time where processing relies on consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached. We encourage you to raise concerns directly with us first so that we can attempt to resolve the matter promptly and fairly.

10. Children’s Data

Our services are generally directed to adults acting for themselves, their households, or their properties. We do not knowingly collect personal data from children unless it is incidental and necessary for service delivery, such as where a property is occupied by a family. If we become aware that we have collected data from a child without appropriate basis, we will take steps to delete it or otherwise handle it lawfully.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updates will take effect when published in the revised version. We encourage customers to review this policy periodically so they remain informed about how their information is used.

12. Summary of Our Commitment

Landscaping Nottinghill is committed to treating personal data with respect, care, and transparency. We collect only what we need, use it for clear and lawful purposes, keep it no longer than necessary, and protect it through appropriate safeguards. By using our services, you acknowledge that this policy applies to all Landscaping Nottinghill customers in the area and explains how your information is handled in connection with our landscaping work.