Privacy Policy - Landscaping Elephantandcastle

This Privacy Policy explains how Landscaping Elephantandcastle collects, uses, shares, stores, and protects personal data when providing landscaping and related services. It applies to all Landscaping Elephantandcastle customers in the area, including prospective customers, existing customers, and anyone who interacts with us in connection with our services. We are committed to handling personal data fairly, lawfully, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Landscaping Elephantandcastle provides landscaping, garden maintenance, design, installation, and associated property services. For the purposes of data protection law, we act as the data controller for the personal data we collect and use about our customers and other individuals whose data we process in the course of our business.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for delivering our services, managing our business, and meeting legal obligations. The types of data we may collect include:

Identity details: name, title, and any information needed to identify you.
Contact details: address, email address, telephone number, and service location details.
Service details: project requirements, property information, work history, preferences, and notes related to your landscaping needs.
Payment and transaction information: billing records, payment status, invoices, and related financial records.
Communication records: messages, call notes, complaints, quotes, and service updates.
Technical data: limited online data such as IP address or device information if you interact with us through digital systems.
Special category data: we do not usually seek to collect special category data. If such data is incidentally provided, we will only process it where lawful and necessary.

We do not collect more information than is reasonably required for the service relationship.

3. How We Collect Data

We collect personal data directly from you, for example when you request a quote, book a service, communicate with us, or make a payment. We may also receive data from third parties where appropriate, such as property managers, contractors, or payment providers, if they are involved in arranging or supporting services. In some cases, data may be generated internally through service delivery, scheduling, administration, or accounting.

4. Purposes of Processing

We use personal data for the following purposes:

to provide quotes, plan services, and carry out landscaping work;
to communicate with customers about bookings, changes, and service updates;
to manage accounts, issue invoices, and process payments;
to maintain business records and service history;
to resolve complaints, disputes, or customer queries;
to comply with legal, tax, accounting, and regulatory obligations;
to improve our services, quality standards, and customer experience;
to protect our business, staff, customers, and property from fraud or misuse.

We will only use your personal data for the purposes for which it was collected, or for compatible purposes where permitted by law.

5. Lawful Basis for Processing

We process personal data only where we have a lawful basis under the UK GDPR. Depending on the circumstances, we may rely on one or more of the following lawful bases:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes providing quotes, carrying out landscaping services, managing appointments, and handling payments.

Legal obligation

We may process data when required to comply with legal obligations, including tax, accounting, health and safety, and record-keeping requirements.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include managing our customer relationships, improving service delivery, keeping business records, preventing fraud, and protecting our operations. We balance these interests against your privacy rights before relying on this basis.

Consent

Where consent is required, we will ask for it clearly and separately. If you give consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before consent was withdrawn.

6. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to deliver our services or meet legal obligations. These third parties may act as processors or independent controllers depending on the service they provide.

Examples of processors we may use include:

accounting and bookkeeping providers;
payment processing services;
IT support, data storage, and system providers;
administrative or scheduling support providers;
professional advisers who assist with legal, tax, or compliance matters.

Where a processor acts on our behalf, they are only permitted to process personal data under our instructions and must keep it secure and confidential. We require appropriate data protection terms to be in place before sharing data with any processor.

We may also disclose personal data if required by law, regulation, court order, or to prevent fraud or serious harm.

7. International Transfers

If any service provider stores or accesses data outside the UK, we will ensure appropriate safeguards are in place so that your personal data remains protected to a standard consistent with UK GDPR requirements. We take reasonable steps to verify that transfers are lawful and secure.

8. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. Retention periods vary depending on the type of data and the reason it is held.

Customer and service records: retained for the period needed to manage the relationship and address any follow-up matters.
Financial and tax records: retained for the period required by applicable law.
Correspondence and complaint records: retained for a reasonable period to handle disputes and maintain service history.
Marketing preferences: retained until you opt out or withdraw consent where consent applies.

When data is no longer required, we will delete it securely or anonymise it so it can no longer identify you.

9. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limited data access on a need-to-know basis. Although no system can be guaranteed completely secure, we work to maintain a level of security appropriate to the risk.

10. Your Rights

Under data protection law, you have rights in relation to your personal data. These rights may apply depending on the circumstances and the lawful basis used for processing. Your rights include:

Right of access: to request confirmation of whether we process your data and to receive a copy of it.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain situations.
Right to restriction: to ask us to limit how we use your data in certain cases.
Right to data portability: to receive data you provided to us in a structured, commonly used format where applicable.
Right to object: to object to processing based on legitimate interests, including direct marketing where relevant.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We will respond within the timeframes required by law.

11. Children’s Data

Our services are intended for adult customers and property-related business purposes. We do not knowingly collect personal data from children unless it is necessary for a specific service request and lawfully provided by an adult acting on their behalf.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our operations, or the way we handle personal data. Any revised version will apply from the date it takes effect. We encourage customers to review this policy periodically so they remain informed about how their information is used.

13. Summary of Our Commitment

Landscaping Elephantandcastle is committed to respecting privacy and handling personal data responsibly. We collect only what we need, use it for clear and lawful purposes, share it only where necessary, retain it for appropriate periods, and support your rights under data protection law. Your trust matters to us, and we aim to process personal data in a fair, secure, and transparent way.