Privacy Policy - Landscaping Enfield

This Privacy Policy explains how Landscaping Enfield collects, uses, stores, shares, and protects personal data when providing landscaping and related services. It applies to all Landscaping Enfield customers in the area, including prospective customers, current customers, and anyone who communicates with us in connection with our services. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK GDPR and the Data Protection Act 2018.

1. Personal Data We Collect

We collect only the information necessary to manage enquiries, deliver services, and meet legal obligations. Depending on how you interact with us, this may include:

Identity information such as your name and title.
Contact details such as phone number, email address, and service address.
Property and service information including garden size, access details, preferred works, and site notes.
Billing and transaction data such as payment status, invoices, and records of services purchased.
Communication records including enquiries, messages, feedback, and complaint details.
Technical data where relevant, such as device or browser information if you interact with digital systems used for administration.
Photographs or site images taken for quotation, planning, quality control, or evidence of completed work.

We do not intentionally collect special category data unless it is strictly necessary and you have chosen to provide it, or unless the law permits us to process it. We ask that you avoid sharing sensitive information unless it is relevant to the service.

2. How We Use Your Data

We use personal data to manage our business and provide landscaping services effectively. Typical uses include:

Responding to enquiries and preparing quotations.
Scheduling visits, carrying out works, and managing customer accounts.
Handling invoices, payments, refunds, and records of transactions.
Keeping customers updated about appointments, service changes, or follow-up work.
Maintaining internal records for administration, quality assurance, and service improvement.
Meeting legal, accounting, insurance, and tax obligations.
Resolving disputes, managing complaints, and preventing fraud or misuse.

We will only use your personal data for the purposes described here, or for purposes that are compatible with them.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each type of processing. Landscaping Enfield relies on the following bases:

Contract

We process personal data where it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes preparing estimates, arranging services, completing works, and administering customer accounts.

Legal Obligation

We process data where required to comply with legal duties, including tax, accounting, record-keeping, and responding to lawful requests from public authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. These interests include managing our business, improving our services, keeping internal records, ensuring security, and preventing fraud. Where we rely on legitimate interests, we balance our needs against your privacy rights.

Consent

In limited cases, we may rely on your consent, for example where we need permission to use certain optional information or to send specific communications that are not covered by another lawful basis. Where consent is used, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing Personal Data and Processors

We may share personal data with trusted third parties only when necessary for the operation of our services, compliance with the law, or protection of our legitimate interests. These third parties act as processors when they process data on our behalf and under our instructions.

Examples of processors and recipients may include:

IT and hosting providers that support our systems, storage, and communications.
Accounting or bookkeeping providers that assist with invoicing, records, and tax compliance.
Payment service providers that handle payment processing securely.
Contracted service partners or subcontractors involved in delivering part of a landscaping project.
Insurance providers, legal advisers, or auditors where required for claims, advice, or compliance.
Public authorities where disclosure is required by law or to protect rights and safety.

We require processors to protect personal data and to use it only for the agreed purpose. We do not permit them to sell your data or use it for their own unrelated purposes.

5. International Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or approved contractual protections. These measures are intended to maintain a level of protection that is essentially equivalent to UK standards.

6. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and to meet legal, accounting, or reporting requirements. Retention periods vary depending on the nature of the data and the service provided.

In general:

Enquiry and quotation records are kept for a limited period after the enquiry ends.
Customer and contract records are kept for the duration of the service relationship and for a period after completion in case of queries or disputes.
Financial and tax-related records are retained for the period required by law.
Complaint and claims records may be retained longer where needed to defend or establish legal claims.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

7. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful management of third-party systems. While no method of transmission or storage is completely risk-free, we work to keep your information protected at all times.

8. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may apply depending on the legal basis for processing and the circumstances of the request:

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete information.
Right to erasure – in certain circumstances, you may request deletion of your data.
Right to restrict processing – you may ask us to limit how we use your data in some situations.
Right to object – you may object to processing based on legitimate interests, and in some cases to direct marketing.
Right to data portability – where applicable, you may request your data in a structured, commonly used format.
Right to withdraw consent – if we rely on consent, you may withdraw it at any time.

To exercise any of these rights, you may make a request using the usual service channels. We may need to verify your identity before responding. We aim to handle requests without undue delay and within the time limits set by law.

9. Complaints

If you are concerned about how your personal data has been handled, you have the right to raise a complaint with the relevant data protection authority. We encourage you to contact us first so that we can review and try to resolve the issue promptly and fairly. Your privacy matters to us, and we take concerns seriously.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any revised version will apply from the date it becomes effective. We recommend reviewing this policy periodically to stay informed about how we protect personal data.

11. Scope of This Policy

This policy applies to all personal data processed by Landscaping Enfield in connection with its landscaping services in the area. It covers enquiries, quotations, customer management, completed projects, and related administrative activity. By using our services or providing your information, you acknowledge that your personal data may be processed as described in this policy and in accordance with applicable data protection law.

In summary: Landscaping Enfield is committed to using personal data responsibly, transparently, and securely. We collect only what we need, process it on appropriate lawful bases, retain it for limited periods, use trusted processors where necessary, and respect your rights under data protection law.