Privacy Policy - Landscaping Heston

This Privacy Policy explains how Landscaping Heston collects, uses, stores, shares, and protects personal data relating to our customers and prospective customers in the Heston area. It applies to all Landscaping Heston customers in the area, including anyone who asks us for a quote, uses our services, or communicates with us about landscaping work. We are committed to handling personal data in a fair, lawful, and transparent way in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Landscaping Heston provides landscaping, garden maintenance, outdoor improvement, and related services. In the course of carrying out our work, we may need to collect and process personal data so that we can respond to enquiries, provide quotations, complete services, manage bookings, maintain records, and meet legal obligations. This policy explains what data we collect, why we collect it, how we use it, and what rights individuals have in relation to their information.

2. Personal Data We Collect

We only collect personal data that is necessary for the purposes set out in this policy. The information we may collect includes the following:

Identity details such as your name.
Contact details such as telephone number, email address, and address.
Property and service details including garden size, access information, preferred service dates, service requirements, and notes relevant to the work requested.
Billing and payment information where needed to process invoices, record payments, and manage accounts.
Communication records including emails, messages, call notes, complaints, feedback, and any instructions you provide.
Technical information if you use our digital systems, such as IP address or device-related information where applicable.

We do not intentionally collect special category data unless it is provided voluntarily and is relevant to the service, or unless we are legally required to do so. If such data is ever processed, we will do so only where permitted by law and with appropriate safeguards.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange appointments, schedule work, and deliver landscaping services.
To communicate with customers about bookings, changes, and service updates.
To issue invoices, manage payments, and keep financial records.
To handle customer support, complaints, and follow-up requests.
To maintain internal records and improve service quality.
To comply with tax, accounting, and other legal obligations.
To protect our business from fraud, misuse, or security incidents.

We only process personal data for legitimate business reasons and in a way that is consistent with the purpose for which it was collected.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Landscaping Heston relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes you have requested, arranging work, carrying out services, and managing payment.

Legal Obligation

We process certain information where we are required to comply with legal or regulatory obligations, such as accounting, tax, record-keeping, and fraud prevention requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include maintaining business records, improving our services, managing customer relationships, and protecting our operations.

Consent

In limited situations, we may rely on your consent, for example where you provide optional information or agree to a particular type of communication. Where consent is used, you may withdraw it at any time.

5. Sharing and Processors

We may share personal data with trusted third parties who act as processors on our behalf. These processors only use personal data under our instructions and must keep it secure. The types of processors we may use include:

IT and cloud service providers for data storage, email, and business systems.
Accounting and bookkeeping providers for invoicing, record management, and tax compliance.
Payment service providers for processing transactions where applicable.
Administrative support providers who help manage scheduling or records.

We may also disclose personal data where required by law, for example to tax authorities, courts, or law enforcement bodies. We do not sell personal data.

6. International Transfers

Where a processor stores or accesses data outside the UK, we will only use such services where appropriate safeguards are in place. These safeguards may include standard contractual protections or use of services in countries recognised as providing adequate protection.

7. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, or reporting requirements. The exact retention period depends on the type of record and why it was collected.

Quotation and enquiry records may be kept for a reasonable period to manage follow-up and future service requests.
Customer service records may be retained while the relationship is active and for a period afterwards for record-keeping and dispute handling.
Financial and tax records are kept for the period required by law.
Communications and complaint records may be retained as long as needed to resolve issues and demonstrate compliance.

When personal data is no longer required, we will securely delete or anonymise it.

8. Security of Personal Data

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures are designed to reflect the nature of the information we process and the risks involved. While no method of storage or transmission is completely secure, we take reasonable steps to safeguard the information in our care.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and any legal exemptions that may be relevant.

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – you may request deletion of personal data in certain circumstances.
Right to restrict processing – you may ask us to limit how we use your data in certain cases.
Right to object – you may object to processing based on legitimate interests.
Right to data portability – you may request transfer of data you provided to us, where applicable.
Right to withdraw consent – where we rely on consent, you can withdraw it at any time.

If you wish to exercise any of these rights, we will respond in line with applicable data protection law. We may need to verify your identity before fulfilling your request.

10. Automated Decision-Making

We do not use personal data for automated decision-making that produces legal or similarly significant effects. Any decisions about quotes, service provision, or scheduling are made by people using relevant business information.

11. Data from Third Parties

In some cases, we may receive personal data from third parties, such as property managers, household members, business contacts, or referral sources, where they have provided your details to us in order to request landscaping services. If this happens, we will only use the information for the relevant business purpose and in line with data protection law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. The latest version will apply to all customers in the Heston area from the date it is published or otherwise communicated.

13. Summary of Your Privacy

Landscaping Heston collects only the personal data needed to provide services, manage records, and meet legal duties. We rely on lawful bases such as contract, legal obligation, legitimate interests, and, where appropriate, consent. We may share data with carefully selected processors such as IT, accounting, and payment providers, and we retain data only for as long as necessary. You have rights to access, correct, erase, restrict, object, and withdraw consent where applicable. We are committed to protecting your information and handling it responsibly at every stage.