Privacy Policy - Landscaping Crystalpalace

Effective Date: This Privacy Policy explains how Landscaping Crystalpalace collects, uses, stores, shares, and protects personal data when providing landscaping and related services. It applies to all Landscaping Crystalpalace customers in the area, including prospective customers, current customers, and anyone who interacts with us in connection with our services.

1. Introduction

Landscaping Crystalpalace is committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and the rights you have over your personal data.

We only collect and use personal information where it is necessary for legitimate business purposes, service delivery, legal compliance, or with consent where required. We aim to respect your privacy and to ensure that any personal data we hold is accurate, secure, and limited to what is needed.

2. Data We Collect

We may collect the following categories of personal data when you request a quote, arrange services, make an enquiry, or otherwise engage with us:

Identity details: name, title, and any other information needed to identify you.
Contact details: address, email address, telephone number, and service location.
Service information: details about the landscaping work requested, property details, access notes, and preferences.
Billing and payment information: invoice details, payment status, and transaction records.
Communication records: emails, messages, call notes, complaint details, and service updates.
Technical information: limited data such as device or browser information if you contact us through digital channels, where relevant to security or service handling.
Contract and account information: quotations, contracts, schedules, work orders, and related documents.

We do not intentionally collect special category data unless it is strictly necessary and lawful to do so. If such data is ever provided to us, we will handle it with extra care and only where permitted by law.

3. How We Use Your Data

We use personal data for the following purposes:

To provide quotations, arrange appointments, and deliver landscaping services.
To manage customer accounts, records, invoices, and payments.
To communicate with you about bookings, work progress, service issues, or follow-up matters.
To maintain accurate records of services performed and customer preferences.
To handle complaints, disputes, and customer support requests.
To comply with tax, accounting, legal, and regulatory obligations.
To improve service quality, planning, and operational efficiency.
To protect against fraud, misuse, or unauthorised access.

We only use personal data in ways that are compatible with the reasons it was collected. Where we need to use data for a new purpose that is unrelated, we will consider whether that use is lawful and, if necessary, seek a valid legal basis before proceeding.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing personal data. Landscaping Crystalpalace relies on one or more of the following bases:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes providing quotes, managing appointments, carrying out landscaping work, invoicing, and dealing with service-related communications.

Legal Obligation

We process certain data to comply with legal requirements, such as tax rules, accounting obligations, record-keeping duties, and responses to lawful requests from authorities.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing customer records, improving services, maintaining security, preventing fraud, and resolving disputes.

Consent

Where consent is required, we will ask for it clearly and in plain language. You may withdraw consent at any time, although this will not affect the lawfulness of processing carried out before withdrawal. We do not rely on consent where another lawful basis is more appropriate.

5. Data Sharing and Processors

We may share personal data with trusted third parties who process information on our behalf, known as processors. These processors only act under our instructions and are required to protect your data and use it only for the agreed purpose.

Examples of processors may include:

Accounting and bookkeeping providers for invoice and tax record management.
Payment service providers for processing transactions securely.
IT and cloud storage providers for secure data hosting, backups, and email services.
Administrative support services that help manage bookings, records, or communication.
Professional advisers such as legal or financial advisers where necessary.

We may also disclose personal data if required by law, regulation, court order, or to protect our rights, our customers, or others. Where data is shared outside our direct control, we take reasonable steps to ensure appropriate safeguards are in place.

We do not sell your personal data. Any sharing is limited to what is necessary for service delivery, operational support, or legal compliance.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this policy, including legal, accounting, reporting, and dispute-resolution requirements. Retention periods depend on the type of information and the purpose for which it is used.

Customer and service records: retained for the period needed to manage the relationship and service history.
Financial records: retained for the period required by tax and accounting law.
Communication records: retained as long as needed to resolve queries or support ongoing customer service.
Consent records: retained to demonstrate compliance with privacy obligations.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices. If we retain information for legal reasons, we will limit access and use it only for those purposes.

7. Data Security

We use appropriate technical and organisational measures to safeguard personal data against accidental loss, unlawful access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and restricted data sharing.

While no system can be completely secure, we work to reduce risks and review our practices regularly. We expect any processors we use to maintain similar standards of protection.

8. Your Rights Under GDPR

You have several rights in relation to your personal data. These rights may apply depending on the circumstances and the lawful basis used for processing.

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: in some cases, you may request deletion of your personal data.
Right to restrict processing: you may ask us to limit how we use your data in certain situations.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to data portability: you may request certain data in a structured, commonly used format where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated. We encourage you to raise concerns with us first so that we can try to resolve matters promptly.

9. Third-Party Links and External Services

We may from time to time use external services for administration, storage, or business support. If you interact with third-party platforms through our services, their own privacy policies may apply. We are not responsible for how those third parties handle data outside our instruction, so we recommend reviewing their privacy notices where relevant.

10. Children’s Data

Our services are intended for adults and property-related customers. We do not knowingly collect personal data from children except where it is unavoidably provided in the course of service delivery and only when lawful to do so. If we become aware that children’s data has been collected without appropriate authority, we will take reasonable steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any updated version will apply from the date of publication or effective date stated in the policy. We encourage customers to review this notice periodically so they remain informed about how their data is handled.

12. Summary of Our Commitments

In summary, Landscaping Crystalpalace processes personal data only when necessary, lawfully, and transparently. We collect only the information needed to provide our services, maintain records, and meet legal obligations. We limit access, work with trusted processors, retain data for appropriate periods, and respect your rights under GDPR. Your privacy matters to us, and we aim to handle your information responsibly at every stage.

Last updated: This policy is intended to reflect GDPR-compliant privacy practices for Landscaping Crystalpalace customers in the area.