Privacy Policy - Landscaping Ilford

This Privacy Policy explains how Landscaping Ilford collects, uses, stores, shares, and protects personal data. It applies to all Landscaping Ilford customers in the area, including prospective customers, existing customers, and individuals who communicate with us about our landscaping services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Landscaping Ilford acts as the data controller for the personal data we collect in connection with our services. This means we determine why and how your personal data is used. We only collect and process personal data that is relevant to our services and business operations.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, and any details needed to identify you.
Contact data: address, email address, telephone number, and other communication details.
Service data: information relating to the landscaping services requested, provided, or quoted for.
Property data: details about the property or outdoor space where services are carried out.
Payment data: billing details and payment status, where necessary for invoicing and accounting.
Communication data: records of emails, messages, notes, and correspondence with you.
Technical data: limited information such as device identifiers or IP-related information if you interact with us digitally.

We do not intentionally collect special category data unless it is strictly necessary and lawful. If such information is provided by you, we will handle it with additional care and only where permitted by law.

3. How We Collect Your Data

We may collect your personal data in several ways:

When you request a quote or ask about our services.
When you become a customer or enter into a service agreement with us.
When you communicate with us by phone, email, text, or other messaging methods.
When you provide information during service visits, consultations, or inspections.
When third parties provide information necessary to deliver our services, such as payment processors or subcontractors.

We may also receive information indirectly where this is necessary for the performance of our services or to meet legal obligations.

4. How We Use Personal Data

We use your personal data for the following purposes:

To provide quotations, estimates, and landscaping services.
To manage bookings, scheduling, and service delivery.
To communicate with you about your project, appointments, and service updates.
To issue invoices, process payments, and maintain financial records.
To respond to enquiries, complaints, and requests.
To maintain internal records and improve service quality.
To comply with legal, tax, accounting, and regulatory obligations.
To protect our business, property, staff, and customers against fraud, misuse, or security incidents.

We will only use your personal data for the purposes for which it was collected unless we reasonably determine that it is necessary for a compatible purpose and permitted by law.

5. Lawful Basis for Processing

We process personal data only where we have a lawful basis under UK GDPR. The main lawful bases we rely on are:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes providing quotes at your request, carrying out landscaping work, managing appointments, and handling payments.

Legal Obligation

We process data where necessary to comply with legal and regulatory duties. This may include accounting records, tax obligations, and other statutory requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where your rights do not override those interests. This may include customer administration, service improvement, record keeping, fraud prevention, and business security. We always consider whether the processing is appropriate, proportionate, and respectful of your privacy.

Consent

In limited situations, we may rely on your consent. If we do, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.

6. Sharing Your Data and Processors

We may share your personal data with trusted third parties who help us operate our business and deliver services. These third parties act as processors or independent controllers depending on the service they provide. Where processors are used, they are only permitted to process personal data on our instructions and must keep it secure.

Examples of processors and service providers may include:

Accounting and bookkeeping providers.
Payment processing providers.
IT and cloud storage providers.
Communication and scheduling service providers.
Professional advisers such as insurers, legal advisers, or auditors where necessary.

We may also disclose personal data where required by law, court order, or regulatory authority, or where disclosure is necessary to protect our rights, customers, staff, or the public.

We do not sell personal data. Any sharing is limited to what is necessary and carried out with appropriate safeguards.

7. International Transfers

If any of our processors or service providers store or access data outside the UK, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent lawful transfer mechanisms designed to protect your personal data.

8. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. Retention periods vary depending on the type of information and the reason for holding it.

Customer and service records: retained for as long as needed to manage the service relationship and resolve issues.
Accounting and tax records: retained in line with statutory requirements.
Communication records: retained for an appropriate period to support customer service and business record keeping.
Legal claim-related records: retained for as long as necessary to establish, exercise, or defend legal claims.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

9. Data Security

We take reasonable technical and organisational measures to protect personal data from accidental loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, limited user permissions, and careful management of records. While no system can be guaranteed to be completely secure, we work to protect your data to a standard appropriate to the risks involved.

10. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to request that we limit how we use your data in certain situations.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to request transfer of certain data to you or another controller.
Right to withdraw consent: where processing is based on consent.

Important: These rights are not absolute and may be subject to legal exceptions or limitations. We will assess each request carefully and respond in line with the law.

11. Exercising Your Rights

If you wish to exercise any of your rights, please provide enough information for us to identify you and understand your request. We may need to verify your identity before responding. We aim to deal with requests without undue delay and within the time limits set by law.

12. Complaints

If you have concerns about how we use your personal data, we encourage you to raise them with us first so we can try to resolve the issue. You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

13. Children’s Data

Our services are intended for adults and business customers, and we do not knowingly collect personal data from children unless it is necessary and lawful in connection with a customer’s request or property access arrangements. If we become aware that we have collected data from a child without a lawful basis, we will take appropriate steps to delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational requirements. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

By using Landscaping Ilford services, you acknowledge that your personal data may be processed as described in this Privacy Policy and in accordance with applicable data protection law.