Privacy Policy - Landscaping Deptford

This Privacy Policy explains how Landscaping Deptford collects, uses, stores, shares, and protects personal data relating to its customers in the Deptford area. It applies to all Landscaping Deptford customers in the area, including individuals who request quotations, book services, receive gardening or landscaping work, or otherwise interact with us in connection with our services. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully to understand how your information is processed and what rights you have.

1. Personal Data We Collect

We only collect information that is necessary for providing our services, managing customer relationships, meeting legal obligations, and improving our operations. The personal data we may collect includes:

Identity details: name, title, and any relevant business name.
Contact details: address, email address, and telephone number.
Service information: details of the landscaping services requested, property access notes, site preferences, and job history.
Payment and billing information: records needed to process payments, issue invoices, and maintain accounting records.
Communication records: emails, messages, call notes, complaint records, and correspondence relating to services.
Technical and usage data: limited information such as website interaction data if you browse our online content, where applicable.
Special instructions or access information: information you choose to provide that helps us safely and effectively complete work at your property.

We do not intentionally collect more information than is necessary. Where special category data is provided to us by you, we will only process it when a lawful basis and an applicable condition under data protection law permits us to do so.

2. How We Use Personal Data

We use personal data for the following purposes:

to provide quotes, plan work, and carry out landscaping services;
to communicate with customers about appointments, schedules, changes, and service updates;
to handle billing, payments, refunds, and accounting;
to respond to enquiries, complaints, and feedback;
to keep internal records of work completed and customer preferences;
to meet legal, tax, and regulatory obligations;
to maintain the security and integrity of our business operations;
to improve the quality of our services and customer experience.

We will not use your personal data for purposes that are incompatible with the reasons it was collected unless we have a valid lawful basis to do so and have informed you where required.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis before processing personal data. Landscaping Deptford relies on the following lawful bases:

Contract

We process personal data when it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes preparing quotations, arranging visits, carrying out landscaping work, and managing related payments.

Legal Obligation

We may process personal data where required to comply with legal obligations, such as tax records, accounting requirements, health and safety duties, and record-keeping responsibilities.

Legitimate Interests

We may process data when it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. This may include managing customer administration, securing our systems, preventing fraud, and improving our services. Where we rely on legitimate interests, we assess whether the processing is proportionate and necessary.

Consent

In limited circumstances, we may rely on your consent, for example where we need permission for certain optional communications or for processing specific information not otherwise covered by another lawful basis. You may withdraw consent at any time where consent is the basis for processing.

4. Sharing and Processors

We may share personal data with trusted third parties who help us deliver our services or operate our business. These third parties act as processors or, in some cases, independent controllers. We require them to handle information securely and only for authorised purposes.

Examples of processors may include:

payment service providers;
accounting and bookkeeping providers;
IT, cloud storage, and software providers;
communication and messaging service providers;
professional advisers such as accountants or legal advisers where necessary;
contracted workers or specialists assisting with specific landscaping tasks, where data sharing is required to perform the service.

We only share personal data on a need-to-know basis. Where a third party processes data on our behalf, we ensure appropriate contractual safeguards are in place, including confidentiality, security, and data protection obligations.

We may also disclose personal data if required by law, court order, regulatory authority, or where necessary to protect our rights, customers, staff, or property.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and to meet legal, accounting, and operational requirements. The retention period depends on the type of data and the reason it is held.

Customer and service records: retained for the duration of the customer relationship and a reasonable period afterwards for administration, dispute handling, and service history.
Financial and invoicing records: retained for the period required under tax and accounting laws.
Communication records: kept for as long as necessary to resolve enquiries, maintain service records, or defend legal claims.
Consent-based data: retained until consent is withdrawn or the information is no longer needed.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

6. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, and restricted internal access to information. While no method of transmission or storage is completely secure, we take reasonable steps to safeguard the information we hold.

7. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete information.
Right to erasure: to request deletion of your personal data in certain circumstances.
Right to restriction: to ask us to limit how we use your data in certain cases.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to receive certain information in a structured, commonly used format where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

These rights are not absolute, and may be subject to legal exceptions. If you exercise any of these rights, we may need to verify your identity before responding.

8. International Transfers

If personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place so that your information remains protected in accordance with applicable data protection laws.

9. Children’s Data

Our services are intended for adults or for individuals acting on behalf of a property owner or occupier. We do not knowingly collect personal data from children unless it is provided incidentally and only where necessary for service delivery, in which case it will be handled with care and in accordance with legal requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we handle personal data. Any updated version will apply from the date it is published or otherwise made available. We encourage customers in the Deptford area to review this policy periodically.

11. How We Comply with GDPR Principles

Landscaping Deptford is committed to the core principles of data protection, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability. We seek to collect only what is needed, use it appropriately, keep it secure, and retain it only for as long as required.

By engaging our services, you acknowledge that your personal data may be processed as described in this Privacy Policy for the purposes of delivering landscaping services in the Deptford area.