Privacy Policy - Landscaping Mitcham

Effective date: This Privacy Policy applies to all Landscaping Mitcham customers in the area and explains how we collect, use, store, share, and protect personal data in connection with our landscaping services.

We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies to customers, prospective customers, suppliers, and other individuals whose data we process as part of our business operations in Mitcham and the surrounding area.

1. Information We Collect

We collect only the personal data necessary to provide our services and manage our business effectively. The types of information we may collect include:

Identity information: name, title, and, where relevant, business name.
Contact information: address, email address, telephone number, and site location details.
Service information: details about the landscaping work requested, completed, or under quotation, including property access notes and job preferences.
Payment information: billing details, payment status, and transaction records.
Communication records: emails, text messages, call notes, and other correspondence relating to enquiries, quotes, bookings, and service delivery.
Technical information: limited device or usage data if you interact with our digital systems, such as IP address or browser type, where applicable.

We may also collect special category data only where it is necessary and lawful, such as health-related information if you tell us about access requirements or safety issues affecting work on site. We do not seek to collect unnecessary sensitive data.

2. How We Use Personal Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to arrange and deliver landscaping services;
to manage customer relationships and service history;
to issue invoices, process payments, and maintain financial records;
to communicate about appointments, changes, or aftercare;
to improve our services, operations, and customer experience;
to comply with legal and regulatory obligations;
to prevent fraud, misuse, or unlawful activity.

We only process data for purposes that are compatible with the reason it was collected and that are reasonably expected in the context of our services.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the activity, Landscaping Mitcham relies on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotes at your request, delivering landscaping work, managing bookings, and taking payment.

Legal Obligation

We may process and retain data where required to comply with tax, accounting, insurance, employment, health and safety, or other legal obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining records, improving our services, managing client relationships, preventing fraud, and defending legal claims.

Consent

In some cases, we may rely on your consent, particularly for optional communications or certain types of sensitive data processing. Where consent is used, it will be freely given, specific, informed, and easy to withdraw at any time.

Vital Interests

In rare situations, we may process information to protect someone’s life or physical safety, for example where urgent site safety concerns arise.

4. Sharing Data and Processors

We do not sell personal data. However, we may share information with trusted third parties who help us operate our business. These parties act as processors or independent controllers depending on the service they provide.

Examples of processors and service providers may include:

bookkeeping and accounting providers;
payment processing providers;
IT, cloud storage, and software service providers;
customer relationship and administration tools;
professional advisers such as solicitors, insurers, and accountants;
subcontractors or specialist service partners involved in delivering a project, where necessary.

Where we use processors, we require them to handle personal data securely, only on our instructions, and in compliance with data protection law. We take reasonable steps to ensure any third party has appropriate security and confidentiality measures in place.

We may also disclose information if required by law, court order, regulatory authority, or to protect our legal rights, property, staff, customers, or others.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and in line with legal, accounting, and operational requirements.

Customer and contract records: retained for the duration of the relationship and for a reasonable period afterward.
Financial and tax records: retained for the period required by law, typically six years or longer where necessary.
Communication records: kept for as long as needed to manage enquiries, resolve disputes, or maintain service history.
Consent-based data: retained until consent is withdrawn or the information is no longer needed.

When data is no longer required, we will delete it securely or anonymise it so it can no longer identify you.

6. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include restricted access controls, secure storage, password protection, and staff awareness practices.

While we take reasonable steps to safeguard data, no system can be guaranteed to be completely secure. If a data breach is likely to result in a risk to your rights and freedoms, we will act in accordance with applicable law.

7. International Transfers

If any service provider stores or processes data outside the UK, we will ensure appropriate safeguards are in place so that your information remains protected to a standard equivalent to UK GDPR requirements.

8. Your Rights

You have a number of rights over your personal data, subject to certain legal conditions and exemptions. These include:

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: in certain circumstances, you can request deletion of your data.
Right to restrict processing: you can ask us to limit how we use your data in some cases.
Right to data portability: you can ask for certain data to be provided in a structured, commonly used format.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We will respond within the time limits required by law.

9. Marketing Preferences

We will only send marketing communications where permitted by law. You can opt out of marketing at any time. Choosing not to receive marketing will not affect your ability to use our services.

10. Children’s Data

Our services are not directed to children, and we do not knowingly collect personal data from children except where it is incidental and necessary for service delivery, such as access arrangements confirmed by an adult customer. If we learn that we have collected data improperly, we will take appropriate steps to delete it.

11. Complaints

If you have concerns about how we handle your personal data, you may raise them with us and we will review the matter carefully. You also have the right to complain to the UK Information Commissioner’s Office if you believe your data protection rights have been infringed.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we process personal data. Any updated version will apply from the date it is published and should be reviewed periodically.

Summary: Landscaping Mitcham’s Privacy Policy explains lawful data use, retention, processors, security, and your rights for all customers in the area, with GDPR-compliant safeguards.