Privacy Policy - Landscaping Hayes

This Privacy Policy explains how Landscaping Hayes collects, uses, stores, shares, and protects personal data relating to all Landscaping Hayes customers in area. It applies to anyone who uses our landscaping, garden maintenance, design, installation, or related services within the area we serve. We are committed to handling personal information in line with the UK GDPR and the Data Protection Act 2018.

We respect your privacy and aim to be transparent about what we do with your information. This policy should help you understand what data we collect, why we collect it, the legal reasons we rely on, how long we keep it, who may process it on our behalf, and what rights you have in relation to your personal data.

1. Who we are

Landscaping Hayes is a landscaping service provider operating in the local area. For the purposes of data protection law, we act as the data controller for personal data we collect and use in connection with our services. This means we decide why and how your personal data is processed.

2. Personal data we collect

We collect only the information that is necessary for us to provide services, manage our business, and meet legal obligations. The types of personal data we may collect include:

Identity data such as your name, title, and business name where relevant.
Contact data such as address, email address, and phone number.
Service information such as the services you request, project details, property access notes, preferences, and service history.
Payment and transaction data such as billing details, payment status, and records of invoices and receipts.
Communication data such as messages, enquiries, complaint details, and records of correspondence.
Technical data where you interact with our digital systems, including basic device and usage information if relevant.
Site-related information such as photographs of garden areas or outdoor spaces used to assess, plan, or complete work.

We do not intentionally collect special category data unless it is strictly necessary and permitted by law. If such information is ever provided to us incidentally, we will handle it carefully and only where there is a valid legal basis.

3. How we collect your data

We may collect personal data directly from you when you request a quote, book a service, communicate with us, sign a contract, or provide information during the course of a project. We may also collect data from third parties when necessary, such as from payment providers, subcontractors, or referring parties acting on your behalf.

In some cases, we may create records internally based on work completed, invoices issued, or communications exchanged. This helps us maintain accurate service and billing records.

4. Purposes for using personal data

We use personal data for the following purposes:

To provide quotations, schedule visits, and deliver landscaping services.
To manage contracts, service agreements, and project administration.
To communicate with you about your account, appointment times, job progress, or service issues.
To process payments, issue invoices, and manage financial records.
To maintain internal records and improve service quality.
To handle complaints, disputes, and enquiries.
To comply with legal, tax, accounting, and regulatory requirements.
To protect our business, staff, property, and customers from fraud or misuse.

We only use your data for purposes that are compatible with those described here or where the law allows us to do so.

5. Lawful basis for processing

Under data protection law, we must have a lawful basis for processing your personal data. Depending on the type of information and the purpose, Landscaping Hayes may rely on the following lawful bases:

Performance of a contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing services, managing bookings, preparing quotations, carrying out work, and processing payments.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include maintaining records, improving customer service, managing communications, and protecting the security of our business and clients.

Legal obligation

We process data where necessary to comply with legal or regulatory obligations, such as accounting, tax, insurance, or record-keeping requirements.

Consent

In limited situations, we may rely on your consent, for example where it is needed for optional communications or certain kinds of data processing. Where we rely on consent, you have the right to withdraw it at any time.

6. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. The length of time will depend on the nature of the information and the purpose of processing.

Typical retention periods may include:

Customer and service records: kept for the duration of the customer relationship and for a reasonable period afterwards.
Financial and tax records: kept for the period required by law.
Communication records: kept for as long as needed to resolve queries, disputes, or service matters.
Project documentation and photographs: kept only as long as needed for service delivery, administration, or legal protection.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

7. Processors and third parties

We may use trusted third-party service providers, known as processors, to help us run our business and deliver services. These processors only handle personal data on our instructions and are required to protect it appropriately.

Processors may include:

Payment processors for handling card or electronic payments.
Accounting and bookkeeping providers for financial administration and compliance.
IT and cloud storage providers for secure data storage and business systems.
Communication service providers for email, messaging, and document delivery.
Subcontractors or specialist trades where required to complete a project, subject to confidentiality and data protection safeguards.

We may also share data with professional advisers, insurers, or public authorities where necessary and lawful. We do not sell your personal data.

8. International transfers

Where data is stored or processed outside the UK, we will ensure appropriate safeguards are in place to protect it. This may include contractual protections or reliance on approved transfer mechanisms required by law. We take steps to make sure such transfers are lawful and secure.

9. Data security

We use reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include restricted access, secure storage, password protection, and staff awareness procedures. While no system can be completely secure, we work to protect information in accordance with the level of risk involved.

10. Your rights

As a data subject, you have a number of rights in relation to your personal data. Subject to legal conditions and exemptions, you may have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete information.
Erase your data in certain circumstances.
Restrict how we process your data in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability for information you provided to us where applicable.
Withdraw consent where processing is based on consent.

You also have the right to raise concerns about how your data is handled. If you are unhappy with our response, you may have the right to complain to the Information Commissioner’s Office (ICO).

11. Children’s data

Our services are not intended for children, and we do not knowingly collect personal data from children unless it is provided by a parent, guardian, or authorised adult in connection with our services. If we become aware that we have collected such data without appropriate permission, we will take reasonable steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The latest version will apply to all Landscaping Hayes customers in area from the date it is published or otherwise communicated.

Please review this policy periodically so that you remain informed about how we protect and use your personal data. Continued use of our services after changes take effect indicates that you have read the updated policy.

13. Summary of key points

We collect only the data needed to provide landscaping services and manage our business.
We rely on lawful bases such as contract, legitimate interests, legal obligation, and consent.
We keep data only as long as necessary and delete it securely when no longer needed.
We use processors and trusted third parties under appropriate safeguards.
You have rights over your personal data, including access, correction, deletion, and objection.

By using our services, you acknowledge that this Privacy Policy applies to your personal data as a customer of Landscaping Hayes in the area we serve.