Privacy Policy - Landscaping Sidcup

Landscaping Sidcup is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect information relating to our customers, potential customers, suppliers, and website visitors where applicable. It applies to all Landscaping Sidcup customers in the area, including anyone who enquires about, books, receives, or manages landscaping services with us.

We aim to handle personal information in a fair, lawful, transparent, and secure way.

1. Who We Are

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Landscaping Sidcup acts as the data controller for the personal data we process in connection with our services. This means we decide how and why your personal data is used for our business operations.

This policy applies to personal data processed in connection with landscaping services, quotations, scheduling, invoicing, customer support, and related administrative activities.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity details: name, title, and business name if relevant
Contact details: address, email address, telephone number, and preferred contact method
Service details: property access notes, project requirements, job history, landscaping preferences, and service records
Payment and transaction data: billing information, invoices, payment status, and records of payments made or due
Communication records: messages, emails, phone call notes, complaint details, and correspondence history
Technical data: if you interact with our digital systems, we may collect IP address, device information, and basic usage data
Photographic records: images of properties or completed work for quotation, planning, evidence of work completed, or record-keeping purposes

We do not intentionally collect special category data unless you provide it to us voluntarily and it is necessary for a specific lawful purpose. If such data is ever required, we will apply additional safeguards.

3. How We Collect Your Data

We collect personal data in several ways:

When you request a quote or service
When you communicate with us by phone, email, text, or written correspondence
When you enter into a contract for landscaping work
When we visit a property to assess work or carry out services
When payment, invoicing, or account administration takes place
From third parties such as payment providers, subcontractors, insurers, or professional advisers where appropriate

We only collect data that is relevant and necessary for the purposes described in this policy.

4. How We Use Personal Data

We use personal data to operate our business and provide our services effectively. This may include:

Responding to enquiries and providing quotations
Planning, scheduling, and delivering landscaping services
Managing contracts and service agreements
Processing payments and issuing invoices
Keeping records of work completed and customer preferences
Handling complaints, disputes, or warranty-related matters
Meeting legal, tax, accounting, and regulatory obligations
Improving our services, internal processes, and customer experience

We will not use your personal data for purposes that are incompatible with the reasons it was collected unless we have a valid legal basis to do so.

5. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing your personal data. Landscaping Sidcup relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, confirming bookings, carrying out landscaping work, and managing invoices or service arrangements.

Legal Obligation

We process certain data where required to comply with legal duties, including tax, accounting, insurance, health and safety, and record-keeping obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include managing customer relationships, maintaining service records, preventing fraud, and improving our business operations.

Consent

In limited situations, we may rely on your consent, for example where it is needed for certain marketing activities or optional uses of data. If we rely on consent, you have the right to withdraw it at any time.

Vital Interests

In rare circumstances, we may process data to protect someone’s vital interests, such as where emergency action is required.

6. Sharing Your Data and Processors

We may share personal data with trusted third parties, but only where necessary and appropriate. These third parties may act as processors or independent controllers depending on the service they provide.

Examples of processors and service providers may include:

IT and cloud storage providers who host or support our records
Payment service providers who process transactions
Accountants and bookkeepers who assist with financial administration
Subcontractors and specialist contractors who help deliver parts of a landscaping project
Professional advisers such as legal advisers, insurers, or compliance consultants
Waste disposal or materials suppliers where needed to complete services

Where we use processors, we ensure there is an appropriate contract in place requiring them to protect your data and process it only on our instructions, unless they are acting as an independent controller.

We may also disclose personal data where required by law, court order, or lawful request from a public authority.

7. International Transfers

If any of our service providers store or access personal data outside the UK, we will take steps to ensure the transfer is lawful and your information remains protected. This may include the use of approved safeguards such as adequacy regulations or standard contractual protections where required.

8. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods may vary depending on the nature of the data and the reason it is held.

Customer and contract records: retained for the duration of the relationship and for a reasonable period afterwards
Financial and tax records: retained in line with legal accounting and tax requirements
Communications and complaint records: retained as needed to manage service issues and defend legal claims
Photographs and project records: retained while relevant to project evidence, quality assurance, or customer history

When personal data is no longer needed, we will delete, anonymise, or securely destroy it. Retention is based on necessity, legal obligation, and good business practice.

9. Security of Personal Data

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality requirements, and regular review of data-handling practices.

Although no system can be guaranteed completely secure, we work to reduce risk and to respond promptly if any issue arises.

10. Your Data Protection Rights

Depending on the circumstances and legal conditions, you may have the following rights under UK GDPR:

Right to be informed: to know how we use your data
Right of access: to request a copy of the personal data we hold about you
Right to rectification: to ask us to correct inaccurate or incomplete data
Right to erasure: to request deletion of your data in certain situations
Right to restriction: to ask us to limit how we use your data in certain cases
Right to data portability: to request transfer of certain data to you or another provider
Right to object: to object to processing based on legitimate interests or direct marketing
Rights relating to automated decision-making: to not be subject to certain decisions made solely by automated means

Some rights may not apply in every case, because legal exceptions or business obligations can limit them. If you make a request, we will assess it carefully and respond in line with the law.

11. Marketing Communications

Where permitted, we may contact you with relevant service updates or information. If marketing is ever used, it will be limited and lawful. You can object to direct marketing at any time, and we will stop using your data for that purpose.

12. Children’s Data

Our services are intended for adults responsible for properties and service arrangements. We do not knowingly collect data from children as part of our normal operations. If we become aware that we have collected such data without a valid reason, we will take appropriate steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we process personal data. The latest version will apply from the date it is issued. We encourage you to review this policy periodically so you remain informed.

14. How to Exercise Your Rights

If you wish to exercise any of your rights, please make a clear request identifying the personal data and the right you wish to exercise. We may need to verify your identity before responding. We will aim to respond within the time limits set by law.

Landscaping Sidcup takes privacy seriously and is committed to handling your information responsibly, transparently, and in accordance with data protection law.