Privacy Policy - Landscaping Croydon

This Privacy Policy explains how Landscaping Croydon collects, uses, stores, shares, and protects personal data relating to its customers, prospective customers, and other individuals in the Croydon area. It applies to all Landscaping Croydon customers in the area and is intended to provide clear information about data handling practices in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Landscaping Croydon provides landscaping and related outdoor property services to residential and commercial customers. In the course of delivering our services, we may process personal data about clients, site visitors, suppliers, and other individuals connected to an enquiry or project. We are committed to handling personal information in a lawful, fair, and transparent manner.

2. Personal Data We Collect

We may collect and process different types of personal data depending on how you interact with us and the services requested. This may include:

Identity information such as your name and title.
Contact information such as address, email address, and phone number.
Service details including property information, preferences, instructions, and project requirements.
Payment information where relevant for invoicing, billing, or account management.
Communication records including emails, messages, notes of calls, and service feedback.
Technical information if you use our digital systems, such as device information or basic usage data.
Photographic records of work areas, before-and-after images, or project progress where needed for service delivery, quality control, or evidence of completion.

We only collect data that is relevant and necessary for the purposes described in this policy. We do not knowingly collect more information than is required.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To manage bookings, carry out landscaping services, and deliver project updates.
To maintain client accounts, billing records, and payment administration.
To communicate about appointments, service changes, or ongoing work.
To improve service quality, resolve complaints, and maintain internal records.
To comply with legal, tax, accounting, and regulatory obligations.
To protect our business, customers, and property from fraud, misuse, or security risks.

We will only use personal data for the purpose for which it was collected unless we reasonably consider that we need to use it for another compatible purpose. Where required, we will notify you of the new use and, if necessary, seek your consent.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing personal data. Depending on the circumstances, Landscaping Croydon may rely on one or more of the following lawful bases:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes preparing quotations, scheduling services, carrying out agreed work, and managing invoices or payments.

Legal Obligation

We may process certain data where we are legally required to do so, such as for tax records, accounting obligations, insurance matters, or compliance with applicable laws.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include business administration, service improvement, quality assurance, record keeping, and protecting against fraud or misuse.

Consent

In some cases, we may rely on your consent, for example where consent is required for specific optional communications or certain forms of data use. If we rely on consent, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before it was withdrawn.

5. Data Sharing and Processors

We may share personal data with trusted third parties where necessary for the operation of our business and delivery of services. These third parties act as processors or independent controllers depending on the role they perform. We ensure that appropriate safeguards are in place before sharing data.

Examples of processors and service providers may include:

IT and cloud storage providers used to manage records and communications.
Accounting and invoicing providers used for financial administration.
Payment processing services where card or electronic payments are handled.
Scheduling and project management tools used to organise services.
Professional advisers such as lawyers, auditors, or insurers where necessary.

Where a processor handles personal data on our behalf, they are required to act only on our instructions, keep information confidential, and implement appropriate security measures. We do not sell personal data.

6. International Transfers

If personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place so that your information remains protected in accordance with applicable data protection law. These safeguards may include standard contractual protections or transfer mechanisms recognised under UK law.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, tax, insurance, and reporting requirements. The retention period will depend on the nature of the data and the reason it was collected.

In general:

Customer and service records are retained for the duration of the relationship and for a reasonable period afterwards.
Financial and tax-related records are retained for the period required by law or best practice.
Communication records are retained as long as needed to manage enquiries, disputes, or follow-up actions.
Photographic or project evidence is retained only as long as necessary for service, compliance, or record-keeping purposes.

When personal data is no longer required, it will be securely deleted, anonymised, or destroyed. Retention periods may vary depending on legal obligations and operational needs.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of security practices. While no system can be guaranteed completely secure, we take data protection seriously and work to reduce risks as far as reasonably possible.

9. Your Rights

Under data protection law, you may have several rights in relation to your personal data. These rights are subject to certain legal limitations and exemptions. They may include:

The right of access to obtain confirmation of whether we process your data and to receive a copy of it.
The right to rectification to correct inaccurate or incomplete personal data.
The right to erasure in certain circumstances, sometimes called the right to be forgotten.
The right to restriction to limit how we use your data in specific situations.
The right to object to certain processing, including processing based on legitimate interests.
The right to data portability where applicable, allowing you to receive certain data in a structured, commonly used format.
The right to withdraw consent where processing is based on consent.

If you wish to exercise any of these rights, we will respond in accordance with applicable data protection law. We may need to verify your identity before responding to a request.

10. Children’s Data

Our services are primarily aimed at adults and businesses. We do not knowingly collect personal data from children unless it is necessary in the context of a specific service request and with appropriate authority or legal basis. If we learn that we have collected data from a child without proper justification, we will take appropriate steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will apply from the date it is made available. We encourage you to review this policy periodically so that you remain informed about how we process personal data.

12. Summary of Our Commitment

Landscaping Croydon is committed to respecting privacy, safeguarding information, and processing personal data only where it is lawful and necessary. We aim to ensure that all personal information is handled with care, kept for no longer than needed, and shared only with appropriate parties under proper safeguards. Our approach is designed to support transparency, accountability, and trust for every customer in the Croydon area.

By using our services, you acknowledge that you have read and understood this Privacy Policy.