Privacy Policy - Landscaping Neasden

This Privacy Policy explains how Landscaping Neasden collects, uses, stores, shares, and protects personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Landscaping Neasden customers in the area, including prospective customers, current customers, and individuals who enquire about our services. By using our services or communicating with us, you acknowledge the practices described in this policy.

1. Who We Are

Landscaping Neasden provides landscaping-related services to residential and commercial customers in the local area. For the purposes of data protection law, we act as the data controller for the personal data we collect and process about our customers and website or service users. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that it is handled lawfully, fairly, and transparently.

2. Personal Data We Collect

We collect only the information that is necessary to provide our services, manage our business, and meet legal obligations. The categories of data we may collect include:

Identity details: name, title, and related identification information.
Contact details: address, email address, and telephone number.
Service information: details about the landscaping services requested, property information, preferences, and instructions.
Payment and billing data: invoicing details, payment status, and transaction records.
Communication records: emails, messages, call notes, and feedback.
Technical data: limited device and usage information where applicable for security and service improvement.
Special category data: generally we do not seek this data. If you voluntarily provide information that may reveal health or access needs, we will only process it where necessary and lawful.

We do not intentionally collect more information than is needed. If you choose not to provide certain data, we may be unable to deliver some services or meet your request fully.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To plan, schedule, and deliver landscaping services.
To manage customer accounts, invoices, and payments.
To communicate about appointments, changes, service updates, and feedback.
To maintain records of work completed and customer preferences.
To improve our services, operations, and customer experience.
To comply with legal, tax, accounting, and regulatory obligations.
To protect against fraud, misuse, or security incidents.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for a compatible purpose. If we need to use it for an unrelated purpose, we will explain the legal basis and, where required, seek your permission.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each processing activity. Landscaping Neasden relies on the following lawful bases:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes preparing quotes, arranging services, and completing agreed work.

Legal Obligation

We process certain information to meet legal requirements, such as tax, accounting, record-keeping, or compliance duties.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. Examples include managing and improving services, handling customer support, preventing fraud, and maintaining business records.

Consent

Where required by law, we will rely on your consent. If we ask for consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Sharing and Processors

We may share personal data with trusted third parties who act as processors or, in some cases, independent controllers. These parties are only allowed to process your data for specified purposes and under appropriate safeguards.

Typical processors may include:

IT and hosting providers that support secure storage and communication systems.
Accounting and bookkeeping providers that assist with invoicing and financial records.
Payment service providers that process card or bank transactions.
Scheduling or administration tools used to manage appointments and service records.
Professional advisers such as legal or tax advisers, where necessary.

We require processors to protect your data and to process it only on our instructions, unless they are legally required to act otherwise. We do not sell personal data. If data is transferred outside the UK or EEA, we will ensure that appropriate safeguards are in place, such as an adequacy decision or approved contractual protections.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Retention periods depend on the type of information and why it was collected.

Customer and service records: retained for the period needed to manage the relationship and after completion for legitimate business needs.
Financial records: retained for the duration required under tax and accounting laws.
Communication records: kept for a reasonable period to handle queries, disputes, or service follow-up.
Consent-based records: kept until consent is withdrawn or the data is no longer needed.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. In some cases, we may retain data for a longer period if necessary to establish, exercise, or defend legal claims.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and regular review of our procedures.

Although no system can be guaranteed completely secure, we take reasonable and proportionate steps to safeguard the information we hold. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will act in accordance with legal requirements, which may include notifying the relevant authority and affected individuals.

8. Your Rights

Under GDPR, you have several rights in relation to your personal data. These rights may be subject to certain conditions or exemptions. They include:

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: you may request deletion of your data in certain circumstances.
Right to restriction: you may ask us to limit how we use your data in certain situations.
Right to data portability: you may request a machine-readable copy of certain data or ask us to transfer it where applicable.
Right to object: you may object to processing based on legitimate interests, and to direct marketing where applicable.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

We aim to respond to legitimate requests without undue delay and within the time limits set by law. To protect your privacy, we may need to verify your identity before acting on a request.

9. Children’s Data

Our services are generally directed to adults. We do not knowingly collect personal data from children unless it is necessary for a specific service arrangement and lawful basis exists. If we become aware that we have collected data from a child without appropriate authorisation, we will take steps to delete it where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. Any changes will be effective when published or otherwise communicated to you. We encourage you to review this policy periodically so that you remain informed about how we process personal data.

11. Summary of Our Commitment

Landscaping Neasden is committed to handling personal data responsibly, transparently, and lawfully. We collect only what is needed, use it for clear purposes, retain it for appropriate periods, and apply safeguards to protect it. We also respect your rights and will work to address any privacy concerns fairly and promptly.

This Privacy Policy applies to all Landscaping Neasden customers in area.