Privacy Policy - Landscaping Sutton

This Privacy Policy explains how Landscaping Sutton collects, uses, stores, shares, and protects personal data belonging to our customers and prospective customers in the area we serve. It applies to all Landscaping Sutton customers in area, including individuals who request quotations, book services, receive completed work, or otherwise interact with us. We are committed to handling personal information in a lawful, fair, transparent, and secure manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Landscaping Sutton is the data controller for the personal data we collect and use in connection with our landscaping services. This means we decide how and why your personal information is processed for business and service delivery purposes.

We only collect and use personal data where we have a valid legal reason to do so. We also take steps to ensure that any third parties who help us deliver our services process data responsibly and securely.

2. Personal Data We Collect

We collect only the information needed to provide our services, manage customer relationships, and meet our legal obligations. The types of data we may collect include:

Identity details such as your name.
Contact details such as address, email address, and telephone number.
Service details relating to the landscaping work requested, property access, job specifications, and scheduling preferences.
Billing and payment information needed to issue invoices, take payments, and maintain financial records.
Communications including messages, notes, and correspondence about quotes, bookings, site visits, or complaints.
Technical data such as basic device or usage information if you contact us through digital channels that record it.
Photographs or site images where required to assess work, document progress, or evidence completed services.

We do not intentionally collect special category data unless it is necessary and you provide it voluntarily, or it is required for a legal reason. If such information is ever provided, we will treat it with additional care and only process it where a lawful basis exists.

3. How We Use Your Data

We use personal data for the following purposes:

To provide quotations and manage bookings.
To deliver landscaping, maintenance, and related services.
To communicate about appointments, changes, and job progress.
To issue invoices, process payments, and manage accounts.
To keep internal records of work completed and customer preferences.
To handle complaints, service issues, or warranty-related matters.
To meet legal, accounting, and tax obligations.
To improve our services, operations, and customer experience.
To protect our business against fraud, misuse, or security incidents.

We do not sell your personal data. We only share it when necessary for service delivery, legal compliance, or business administration.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Landscaping Sutton relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes, booking services, carrying out landscaping work, issuing invoices, and managing related communication.

Legal Obligation

We process data when needed to comply with legal or regulatory obligations, such as tax, accounting, insurance, and record-keeping requirements.

Legitimate Interests

We may process personal information where it is necessary for our legitimate business interests, provided your rights do not override those interests. This may include managing enquiries, maintaining service quality, preventing fraud, improving operations, and keeping appropriate business records.

Consent

In limited cases, we may rely on your consent, for example where you voluntarily provide optional information or agree to specific processing. Where consent is used, you can withdraw it at any time.

Vital Interests

Although unlikely, we may process information to protect someone’s vital interests in an emergency.

5. Sharing Your Data and Processors

We may share personal data with trusted third-party service providers, also known as processors, who help us operate our business. These processors may include:

Payment service providers for handling card or electronic payments.
Accounting or bookkeeping providers for financial administration and tax compliance.
IT and cloud storage providers for secure data hosting, backup, and communication tools.
Scheduling or job management systems used to organise appointments and service records.
Professional advisers such as insurers, legal advisers, or auditors where necessary.

We require processors to keep data secure, use it only for our instructions, and comply with applicable data protection laws. We may also disclose information to public authorities, regulators, or law enforcement where required by law.

Where relevant, any processor we use must provide appropriate technical and organisational safeguards.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, and reporting obligations. The exact retention period depends on the type of data and the context in which it is used.

In general:

Quotation and customer enquiry records may be retained for a reasonable period to manage future work, disputes, or follow-up service requests.
Contract, invoice, and payment records are retained for the period required by tax and accounting laws.
Project notes, site information, and service records may be kept to support continuity and future service delivery.
Communications may be retained where needed to document instructions, complaints, or service history.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices. We review retention regularly to ensure data is not kept longer than necessary.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, password protection, secure storage, limited staff access, and careful selection of trusted processors.

While no system can be guaranteed completely secure, we take reasonable steps to reduce risks and respond appropriately to any suspected data breach.

8. International Transfers

If any processor stores or accesses data outside the United Kingdom, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent legal protections designed to keep your information secure and lawfully processed.

9. Your Rights

Under data protection law, you have several rights regarding your personal data. These rights may apply in different circumstances and may be subject to legal exceptions. They include:

Right of access - you can ask for a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete information.
Right to erasure - you can ask us to delete your data where there is no lawful reason to keep it.
Right to restriction - you can ask us to limit how we use your data in certain situations.
Right to object - you can object to processing based on legitimate interests or direct marketing.
Right to data portability - you can ask for certain information to be provided in a structured, commonly used format.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in line with applicable law. We may need to verify your identity before acting on a request.

10. Children’s Data

Our services are intended for adult customers and property owners or authorised representatives. We do not knowingly collect personal data from children in the ordinary course of business. If we become aware that we have inadvertently collected such information, we will take appropriate steps to delete or protect it as required.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any revised version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically so they remain informed about how their data is used.

12. Fair and Transparent Processing

We aim to process personal data in a way that is fair, lawful, and transparent. This means we only collect the information we need, use it for clear purposes, keep it secure, and respect your rights. We are committed to maintaining the trust of every customer we serve in our area.

By using our services or providing your details to Landscaping Sutton, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.