Privacy Policy - Landscaping Shortlands

This Privacy Policy explains how Landscaping Shortlands collects, uses, stores, shares, and protects personal data when providing landscaping and related services. It applies to all Landscaping Shortlands customers in the area, including prospective customers, current customers, and anyone who communicates with us about our services. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Landscaping Shortlands is a landscaping service provider that processes personal data in connection with quotations, bookings, service delivery, billing, customer support, and business administration. For the purposes of data protection law, we act as the data controller for the personal information we collect and use in relation to our customers and service enquiries.

2. Personal Data We Collect

We collect only the data that is necessary for business, legal, and operational purposes. The information we may collect includes:

Identity details such as name and title.
Contact details such as address, email address, and telephone number.
Property information relevant to the landscaping work requested, including site access notes and garden details.
Service and transaction data including quotes, invoices, payment records, job notes, and service history.
Communication records such as messages, call notes, complaints, and feedback.
Technical data if you interact with our digital systems, such as IP address, device type, or basic usage information, where applicable.
Special category data is not ordinarily requested. If such information is incidentally disclosed to us, we will process it only where lawful and necessary.

We do not knowingly collect more information than is needed for the delivery of our landscaping services and related administrative functions.

3. How We Use Personal Data

We use personal data for the following purposes:

To provide quotations and assess service requests.
To manage bookings, site visits, and landscaping work.
To communicate with customers about appointments, updates, and service-related matters.
To issue invoices, process payments, and keep financial records.
To handle queries, complaints, and aftercare support.
To maintain accurate business and customer records.
To comply with legal obligations, including tax, accounting, and regulatory duties.
To improve our services, operations, and customer experience.

We will not use your personal data for purposes that are incompatible with the reasons it was originally collected, unless we have a valid legal basis for doing so.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for every use of personal data. Landscaping Shortlands relies on the following bases:

4.1 Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes preparing quotations, arranging work, delivering landscaping services, and managing invoices.

4.2 Legal Obligation

We may process personal data where required to comply with legal obligations, including record-keeping, tax, accounting, fraud prevention, and responding to lawful requests from authorities.

4.3 Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. This may include maintaining customer records, improving service quality, internal administration, and protecting our business from misuse or loss. Where we rely on legitimate interests, we ensure that the processing is proportionate and appropriate.

4.4 Consent

In limited cases, we may ask for your consent, for example if we need to use your information for a purpose not covered by another lawful basis. Where consent is used, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

5. Sharing and Processors

We may share personal data with trusted third parties where necessary for business operations or legal compliance. These third parties may act as processors or independent controllers depending on the circumstances.

Processors are service providers who process data on our behalf under written instructions and appropriate security measures. Examples may include:

Accounting and bookkeeping providers.
Payment processing services.
IT support and cloud storage providers.
Customer administration or scheduling tools.
Professional advisers such as accountants or legal advisers.

We require processors to protect your data, use it only for agreed purposes, and apply suitable technical and organisational safeguards. We do not sell personal data. If disclosure is required by law, court order, or to protect our rights, we may share information with relevant authorities or advisers.

6. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and in accordance with legal, accounting, and operational requirements. Retention periods may vary depending on the type of data and the reason for holding it.

Customer and service records may be retained for the duration of the relationship and for a reasonable period afterwards.
Invoice and tax-related records are typically kept for the period required by law.
Communication records are retained as long as needed to deal with enquiries, disputes, or service history.
Where data is no longer needed, we will securely delete or anonymise it.

We review retention regularly to ensure information is not kept longer than necessary. When data is no longer required, it is removed from active systems or securely destroyed.

7. Data Security

We take appropriate steps to protect personal data against unauthorised access, alteration, loss, or disclosure. These measures may include access controls, secure storage, password protection, staff awareness, and limiting access to those who need it for legitimate business purposes. Although no system can be guaranteed to be completely secure, we work to maintain a level of protection appropriate to the nature of the data we handle.

8. International Transfers

If any of our processors or systems store or access data outside the United Kingdom, we will ensure that appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other legally permitted transfer mechanisms designed to protect your information.

9. Your Rights

Depending on the circumstances, you may have the following rights under data protection law:

Right of access to obtain a copy of your personal data.
Right to rectification to correct inaccurate or incomplete data.
Right to erasure in certain situations, sometimes called the right to be forgotten.
Right to restriction of processing in certain cases.
Right to data portability where processing is based on consent or contract and carried out by automated means.
Right to object to processing based on legitimate interests or direct marketing, where applicable.
Right to withdraw consent where consent is the lawful basis.

Some rights are subject to legal limits and may not apply in every situation. If you make a request, we may need to verify your identity before responding. We will respond within the timeframe required by law.

10. Complaints and Supervisory Authority

If you are concerned about how your personal data is handled, you have the right to raise a complaint with the relevant data protection supervisory authority in the UK. We encourage you to raise any concerns directly so that we can address them promptly and fairly. You also have the right to seek an effective judicial remedy where appropriate.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. The revised version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically so they remain informed about how their data is used.

12. Summary of Our Commitment

Landscaping Shortlands respects your privacy and handles personal data with care. We collect only the information needed to deliver our services, we use it only for lawful purposes, we retain it for no longer than necessary, and we work with processors who are bound to protect it. Your rights matter, and we aim to make them easy to exercise. This policy applies to all Landscaping Shortlands customers in the area and is intended to provide clear, transparent information about how we process personal data in connection with our landscaping services.