Privacy Policy - Landscaping Paddington

This Privacy Policy explains how Landscaping Paddington collects, uses, stores, shares, and protects personal data in connection with the services it provides. It applies to all Landscaping Paddington customers in the area, including prospective customers, current customers, and individuals who interact with us in relation to quotes, bookings, site visits, garden maintenance, landscaping work, and related services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We collect only the personal data necessary to deliver our services, manage customer relationships, and meet legal obligations. The type of information we collect may include the following:

Identity details such as your name and title.
Contact information such as address, email address, and telephone number.
Service details such as information about your garden, property, or landscaping requirements.
Communication records including enquiries, complaints, feedback, and service updates.
Billing and transaction data where relevant to payments, invoices, and account administration.
Technical information if you interact with our digital systems, such as basic device or usage data.
Site access and safety information where needed to complete work safely and efficiently.

We normally collect information directly from you. In some cases, we may also receive information from third parties authorised by you, such as property managers, household members, or business representatives, where relevant to providing services. We only collect special category data in exceptional circumstances and only where required for a lawful purpose and with appropriate safeguards.

2. How We Use Personal Data

We use personal data for the following purposes:

To provide quotations, plan work, and carry out landscaping or maintenance services.
To manage bookings, appointments, and service schedules.
To communicate with you about your requests, property needs, or project progress.
To process payments, issue invoices, and maintain accounting records.
To handle complaints, queries, and customer support matters.
To maintain records required for business administration, safety, and legal compliance.
To improve our services, standards, and customer experience.
To protect our business, staff, customers, and property from fraud, misuse, or unlawful activity.

We will only use your data where we have a valid reason to do so and will not use it in ways that are incompatible with the original purpose for which it was collected.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis to process personal data. Landscaping Paddington relies on the following lawful bases, depending on the situation:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes, arranging services, delivering work, and managing billing or customer service tasks linked to our agreement with you.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, improving service delivery, maintaining business records, preventing fraud, and ensuring the safety and security of our operations.

Legal Obligation

We may process or retain data where required to comply with legal duties, including tax, accounting, health and safety, or record-keeping obligations.

Consent

In limited circumstances, we may rely on your consent, for example where optional communication preferences or specific data uses require it. Where consent is used, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods depend on the type of data, the nature of the service, and any legal or regulatory requirements.

Customer records are generally retained for as long as needed to manage the relationship and any follow-up service.
Financial records are retained for the periods required by tax and accounting law.
Communication records may be retained for a reasonable period to deal with queries, disputes, or service history.
Site and project information may be kept to support future work, warranties, or maintenance needs.

When data is no longer needed, it is securely deleted, anonymised, or destroyed. We review our retention practices regularly to ensure data is not kept for longer than necessary. Retention is always limited to what is reasonably required for lawful business and compliance purposes.

5. Processors and Data Sharing

We may share personal data with trusted third-party processors who help us operate our business and deliver services. These processors act only on our instructions and are required to protect your data and use it only for the specified purpose.

Examples of processors or service providers may include:

Accounting and bookkeeping providers.
Payment processing services.
IT hosting, storage, and system support providers.
Communication and administrative support tools.
Contractors or subcontractors involved in delivering specific landscaping work.

We may also share personal data if required by law, regulation, court order, or a lawful request from a public authority. In the event of a business reorganisation, transfer, or sale, customer data may be disclosed as part of that process, subject to appropriate safeguards.

We do not sell personal data. Any sharing is limited, proportionate, and necessary for legitimate business or legal purposes.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures are designed to reflect the nature of the data and the risks involved. Access to personal data is restricted to authorised persons who need it for business purposes.

Although we work hard to protect information, no system can be guaranteed to be completely secure. If a personal data incident occurs, we will assess the issue and take steps in line with our legal obligations.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be exercised in certain circumstances and may be subject to legal limitations.

Right of access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete data.
Right to erasure - you can request deletion of your data where there is no valid reason for us to keep it.
Right to restriction - you can ask us to limit how we use your data in certain situations.
Right to data portability - you can request that certain data be provided to you or another controller in a structured format.
Right to object - you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.

To protect your privacy, we may need to verify your identity before responding to a rights request. We will respond within the timeframes required by law and may explain if an exemption applies.

8. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is incidentally provided in the course of a customer relationship and necessary for service delivery or safety. If we become aware that we have collected data unlawfully, we will take appropriate steps to delete it.

9. International Transfers

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place to protect it. Any such transfer will be carried out in accordance with data protection law and only where necessary for business operations or service support.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. The latest version will apply to our processing of personal data. We encourage customers to review this policy periodically so they remain informed about how their information is handled.

11. Our Commitment

Landscaping Paddington is committed to processing personal data responsibly, securely, and transparently. We recognise the importance of privacy and aim to ensure that every customer in the area understands how their information is used. By collecting only what we need, retaining it for limited periods, and sharing it carefully with trusted processors, we seek to maintain compliance and protect your rights.

This Privacy Policy applies to all Landscaping Paddington customers in the area.