Privacy Policy - Landscaping Finchley

This Privacy Policy explains how Landscaping Finchley collects, uses, stores, shares, and protects personal data when providing landscaping and related services. It applies to all Landscaping Finchley customers in area, including prospective customers, current customers, former customers, and individuals who interact with us on behalf of a business, household, or property. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Landscaping Finchley is the data controller for the personal information described in this policy. This means we determine the purposes and methods used to process personal data in connection with our landscaping services, quotations, customer account management, scheduling, invoicing, site visits, and related communications.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for the services we provide. Depending on your relationship with us, we may collect the following categories of information:

Identity data: name, title, and, where applicable, business name.
Contact data: postal address, email address, telephone number, and property location details.
Service and project data: details about requested landscaping work, site notes, preferences, quotes, schedules, and job history.
Billing and transaction data: payment records, invoice details, and accounting references.
Communication data: correspondence by phone, email, or written messages, including feedback and complaints.
Technical data: limited information generated when you interact with digital tools we use, such as IP address, device type, and browsing behaviour, where applicable.
Images and site records: photographs of outdoor spaces, before-and-after images, and documentation necessary to carry out or evidence completed work.

We do not intentionally collect special category data unless it is strictly necessary and lawful to do so. If such data is ever required, we will apply appropriate safeguards and only process it where the law allows.

3. How We Use Personal Data

We process personal data for legitimate business and legal purposes connected to our landscaping services. These purposes may include:

responding to enquiries and providing quotations;
assessing project requirements and planning work;
managing customer relationships and service records;
booking appointments, site visits, and scheduled maintenance;
carrying out landscaping, gardening, and related property services;
issuing invoices, processing payments, and maintaining accounts;
handling complaints, service issues, and customer support requests;
meeting legal, tax, insurance, and regulatory obligations;
protecting our business, staff, customers, and property from fraud or misuse;
keeping internal records accurate and up to date.

We will only use personal data in ways that are compatible with the purposes for which it was collected, unless we have a lawful reason to use it for another purpose.

4. Lawful Basis for Processing

Under UK GDPR, we must identify a lawful basis for each processing activity. Landscaping Finchley relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes at your request, delivering landscaping services, arranging appointments, and managing billing.

Legal Obligation

We may process data where required to comply with laws and regulations, including tax, accounting, insurance, health and safety, and record-keeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided these interests do not override your rights and freedoms. Examples include managing our customer base, improving our services, preventing fraud, and maintaining secure business records. We assess such interests carefully and use data in a way that is proportionate and respectful of privacy.

Consent

Where required, we rely on your consent. For example, if we ever need to use your data for a purpose that is not covered by another lawful basis, we will request consent clearly and inform you that it may be withdrawn at any time.

5. How We Share Personal Data

We may share personal data with trusted third parties who help us run our business and deliver our services. These organisations act as processors or independent controllers depending on the nature of the service provided. We only share the minimum information necessary and require appropriate safeguards.

Examples of processors and recipients may include:

accounting and bookkeeping providers;
payment service providers;
IT support, cloud storage, and software providers;
customer management and scheduling tools;
professional advisers such as insurers, auditors, or legal advisers;
subcontractors or trade specialists assisting with project delivery, where needed;
public authorities, regulators, or law enforcement where disclosure is required by law.

All processors are expected to handle personal data securely, use it only for specified purposes, and act in compliance with data protection law. Where we engage a processor, we put in place written data processing terms as required by law.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. Retention periods depend on the type of information and the reason we hold it.

In general:

quotation and customer enquiry records may be kept for a limited period after the enquiry concludes;
service and project records may be kept for the duration of the customer relationship and a reasonable period afterwards;
financial and tax records are usually retained for the period required by law;
communication records may be retained as needed to manage services, disputes, or customer support;
photographs and site records are kept only as long as necessary for project management, evidencing work, or legal purposes.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

7. Security of Personal Data

We take the security of personal data seriously and apply appropriate technical and organisational measures to help protect it from accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff awareness, and limiting access to those who need it for legitimate business purposes.

However, no method of transmission or storage is completely secure. While we work to protect personal data, we cannot guarantee absolute security.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the lawful basis used for processing.

Right of access: you can ask for a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: in some cases, you can ask us to delete your personal data.
Right to restriction: you can ask us to limit how we use your data in certain situations.
Right to object: you can object to processing based on legitimate interests, including direct marketing where applicable.
Right to data portability: in some cases, you can ask for data you provided to us in a structured, commonly used format.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. Some rights are subject to legal limits and may not always apply.

9. Children’s Data

Our services are not directed to children, and we do not knowingly collect personal data from children unless it is necessary in connection with a service request made by a parent, guardian, or authorised adult. If we become aware that we have collected personal data inappropriately, we will take steps to delete it where required.

10. International Transfers

Where personal data is processed or stored outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it in accordance with applicable law. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent legal mechanisms.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review it periodically to stay informed about how personal data is handled.

12. Summary of Key Points

Landscaping Finchley collects only the personal data needed to provide landscaping services, manage customer relationships, and meet legal obligations. We process data on lawful bases including contract, legal obligation, legitimate interests, and, where required, consent. We retain data only as long as necessary, share it with trusted processors under appropriate safeguards, and respect your rights under UK data protection law. This policy applies to all Landscaping Finchley customers in area and is intended to keep you informed about how your data is handled in a clear and transparent way.