Privacy Policy - Landscaping Southgate

Landscaping Southgate is committed to protecting the privacy and personal data of all customers in the Southgate area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when we provide landscaping and related services. It applies to all Landscaping Southgate customers in the area, including prospective customers, current customers, and former customers whose data we retain for lawful business reasons.

1. Who This Policy Applies To

This policy applies to individuals who:

Request a quote or information about our services;
Book, receive, or have received landscaping services;
Communicate with us by phone, email, message, or through any other business channel;
Are authorised contacts acting on behalf of a customer;
Interact with us in relation to billing, scheduling, complaints, or service updates.

We process personal data in accordance with the UK GDPR and the Data Protection Act 2018. We aim to ensure that all information is handled fairly, securely, and transparently.

2. Personal Data We Collect

We only collect information that is necessary for our services, legal obligations, and operational needs. Depending on the nature of the interaction, we may collect the following types of data:

2.1 Information you provide directly

Identity data: name, title, and, where relevant, business or household details;
Contact data: address, email address, telephone number, and preferred contact method;
Service data: details about the landscaping work requested, property access instructions, service preferences, and communication notes;
Billing data: invoicing details, payment status, and records relating to transactions;
Correspondence data: complaints, queries, feedback, and any other messages you send to us.

2.2 Information collected automatically

When you contact us or use our digital systems, we may collect limited technical information such as:

Time and date of communications;
Basic device or browser information where relevant for security or service administration;
Internal records of service requests, appointments, and job history.

We do not collect more information than is needed, and we do not use personal data for unrelated purposes without a lawful basis.

3. How We Use Personal Data

We use personal data for specific and legitimate purposes connected to our landscaping services. These purposes include:

Providing quotes, estimates, and service information;
Managing bookings, scheduling work, and carrying out landscaping services;
Communicating about appointments, changes, or completion of work;
Processing invoices, payments, and account administration;
Responding to enquiries, feedback, and complaints;
Maintaining accurate business and service records;
Meeting legal, tax, insurance, and regulatory obligations;
Protecting our business, staff, customers, and property from fraud or misuse.

Where we use data for a purpose not originally expected, we will ensure there is a valid lawful basis and that the processing remains fair and proportionate.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process personal data. Landscaping Southgate relies on the following lawful bases, depending on the situation:

4.1 Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotes you request, arranging services, carrying out work, and managing billing or service-related communication.

4.2 Legal obligation

We may process personal data where necessary to comply with legal duties, such as tax record keeping, accounting requirements, insurance obligations, or responding to lawful requests from authorities.

4.3 Legitimate interests

We may process data for our legitimate business interests, provided these interests do not override your rights and freedoms. Examples include:

Maintaining records of services delivered;
Improving operational efficiency;
Managing customer relationships;
Preventing fraud, misuse, or security incidents;
Protecting the quality and continuity of our services.

Where legitimate interests are relied upon, we carefully assess whether the processing is necessary and balanced.

4.4 Consent

In limited circumstances, we may rely on your consent, especially where the law requires it or where an optional activity is involved. If we rely on consent, you may withdraw it at any time. Withdrawal will not affect processing already carried out before consent was withdrawn.

5. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors or independent controllers, only where necessary and appropriate. We do not sell personal data. When processors are used, they are required to handle data securely and only on our instructions.

5.1 Common types of processors

IT and cloud service providers: for data storage, security, and communication systems;
Accounting and bookkeeping providers: for financial administration and tax compliance;
Payment service providers: for processing payments and related verification;
Administrative support services: for scheduling, record management, or business operations;
Professional advisers: such as lawyers, insurers, or auditors where needed;
Public authorities: where required by law or lawful request.

Some third parties may process data on our behalf only for specific purposes. We require appropriate contractual protections, confidentiality obligations, and security measures before sharing any personal data.

5.2 International transfers

If any processor stores or accesses data outside the UK, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent lawful transfer mechanisms, to protect your information.

6. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, including for legal, accounting, or reporting requirements. Retention periods depend on the type of data and the context in which it is used.

Customer and service records: retained for the period needed to manage our relationship and handle follow-up queries or disputes;
Financial and tax records: retained for the period required by law;
Correspondence and complaint records: retained for a reasonable period to support service management and dispute resolution;
Consent records: retained as evidence of permission where consent is used as the lawful basis.

When data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices.

7. Security of Personal Data

We take the security of personal data seriously. We use reasonable technical and organisational measures designed to protect information from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and routine review of data handling practices.

No system can be guaranteed completely secure, but we work to keep risks low and to respond appropriately if a security issue occurs.

8. Your Rights Under GDPR

You have important rights over your personal data. Subject to legal conditions and exceptions, these include:

Right of access: to request confirmation of whether we process your data and to obtain a copy;
Right to rectification: to ask us to correct inaccurate or incomplete data;
Right to erasure: to request deletion of data in certain circumstances;
Right to restriction: to request limited use of your data in certain situations;
Right to object: to object to processing based on legitimate interests or direct marketing;
Right to data portability: to receive certain data in a structured, commonly used format where applicable;
Right to withdraw consent: where processing is based on consent;
Right to complain: to the relevant data protection authority if you believe your rights have not been respected.

We may need to verify your identity before acting on a request. We will respond within the time limits required by law.

9. Children’s Data

Our services are not directed to children, and we do not knowingly collect personal data from children except where it is necessary in connection with a property, household, or service arrangement and where appropriate authority is provided by a parent, guardian, or responsible adult.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. The most recent version will apply from the date it is made available. We encourage customers to review it periodically so they remain informed about how their personal data is handled.

11. Summary of Our Commitment

Landscaping Southgate uses personal data responsibly and only where needed for service delivery, legal compliance, legitimate business interests, or consent-based activities. We aim to be transparent, fair, and lawful in every stage of data processing. By keeping records secure, limiting sharing to trusted processors, and respecting your rights, we work to maintain confidence in the services we provide to all customers in the Southgate area.