Privacy Policy - Landscaping Cranford

Effective Date: This Privacy Policy applies to all Landscaping Cranford customers in the area where our services are offered. It explains how we collect, use, store, share, and protect personal data in connection with our landscaping services.

1. Introduction

Landscaping Cranford is committed to respecting your privacy and handling your personal data in a lawful, fair, and transparent manner. This Privacy Policy is designed to meet the requirements of the General Data Protection Regulation (GDPR) and applicable privacy laws. It applies to all customers, prospective customers, and other individuals in the area who interact with our services, request information, or otherwise provide personal data to us.

For the purposes of this policy, personal data means any information relating to an identified or identifiable natural person. This may include names, addresses, telephone numbers, email addresses, service details, payment-related information, and communications with us.

2. Personal Data We Collect

We collect only the personal data needed to provide landscaping services, manage customer relationships, and meet legal obligations. Depending on the nature of your interaction with us, we may collect the following categories of information:

Identity data: name, title, and, where relevant, business name.
Contact data: address, email address, telephone number, and service location.
Service data: details about requested or completed landscaping work, preferences, property notes, quotes, appointments, and job history.
Financial data: billing details, invoice records, and payment confirmations.
Communication data: messages, inquiries, complaints, feedback, and records of correspondence.
Technical data: limited information such as device or browser data if you communicate with us electronically.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it to us voluntarily, or it is required for a legal reason. If such data is ever processed, we will do so only in accordance with GDPR requirements and with appropriate safeguards.

3. How We Use Personal Data

We use personal data for legitimate business and service purposes, including the following:

providing quotations and scheduling landscaping services;
delivering and managing customer projects;
communicating about appointments, updates, and service arrangements;
issuing invoices, processing payments, and keeping accounting records;
responding to questions, requests, or complaints;
maintaining accurate internal records;
improving service quality and customer experience;
complying with legal, tax, insurance, and regulatory obligations;
protecting our business, customers, and staff from fraud, misuse, or other unlawful activity.

We only use your personal data for the purposes for which it was collected, unless we reasonably determine that we need to use it for a compatible purpose or another lawful reason permitted under GDPR.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process personal data. Landscaping Cranford relies on the following bases, depending on the activity involved:

Performance of a contract: when processing is necessary to provide a quote, carry out landscaping services, manage bookings, or fulfill obligations under an agreement with you.
Legal obligation: when processing is required to comply with laws such as tax, accounting, record-keeping, or other regulatory obligations.
Legitimate interests: when processing is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. This may include business administration, service improvement, security, and customer relationship management.
Consent: where we rely on your clear consent for specific optional activities, such as certain forms of marketing or non-essential communications. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

We do not sell personal data. If our processing purposes change, we will ensure there is an appropriate lawful basis before using your data in a new way.

5. Data Sharing and Processors

We may share personal data with trusted third parties who help us run our business and provide services efficiently. These third parties act as data processors when they process personal data on our instructions. They may include:

IT and cloud storage providers;
accounting and bookkeeping services;
payment processing providers;
administrative support tools;
customer communication platforms;
professional advisers such as accountants or legal advisers, where necessary;
subcontractors or specialist service partners involved in delivering a project.

We require our processors to handle personal data securely, use it only for authorized purposes, and take appropriate technical and organizational measures to protect it. Where required, we put in place data processing agreements that meet GDPR standards.

We may also disclose personal data if required by law, court order, or lawful request from public authorities, or where necessary to establish, exercise, or defend legal claims.

6. International Transfers

If personal data is transferred outside the United Kingdom or European Economic Area, we will take steps to ensure it is protected to a standard consistent with GDPR. This may include using approved safeguards such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms. We will only permit such transfers where appropriate protections are in place.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to meet legal, accounting, and reporting requirements. Retention periods may vary depending on the type of data and the reason for processing.

Customer and service records: kept for the duration of the customer relationship and for a reasonable period afterward.
Financial and tax records: retained for the period required by applicable law.
Communications and inquiries: retained for as long as needed to manage the matter and for internal reference where appropriate.
Consent-based data: kept until consent is withdrawn or the data is no longer needed for the stated purpose.

When personal data is no longer needed, we will securely delete it or anonymize it so it can no longer identify you. Retention decisions are reviewed periodically to ensure they remain appropriate.

8. Data Security

We use reasonable and appropriate security measures to protect personal data from unauthorized access, accidental loss, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and staff awareness practices. While no system can be guaranteed completely secure, we work to maintain a level of protection appropriate to the risks involved.

Only individuals who need access to personal data for legitimate business purposes are permitted to handle it. We also encourage all staff and relevant partners to follow secure handling procedures and maintain confidentiality.

9. Your Rights Under GDPR

You have several rights regarding your personal data, subject to certain legal limitations. These rights include:

Right of access: you may request confirmation of whether we process your personal data and obtain a copy of that data.
Right to rectification: you may ask us to correct inaccurate or incomplete personal data.
Right to erasure: in some cases, you may request that we delete your personal data.
Right to restriction: you may ask us to limit the processing of your personal data in certain circumstances.
Right to data portability: you may request a copy of certain data in a structured, commonly used, machine-readable format.
Right to object: you may object to processing based on legitimate interests or to direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We will respond within the time limits required by law and will explain if an exception applies.

10. Cookies and Similar Technologies

If we use digital tools that place cookies or similar technologies on a device, they will only be used where lawful and, when required, with your consent. Such technologies may support basic functionality, analytics, or communication features. You can manage cookie preferences through your browser settings or other provided controls where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data practices. Any updates will take effect when published, and the revised policy will continue to apply to all Landscaping Cranford customers in the area. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

12. Summary

This Privacy Policy explains how Landscaping Cranford collects and uses personal data, the lawful bases for processing, how long data is kept, the processors we may use, and the rights available to you under GDPR. Our approach is designed to be transparent, secure, and proportionate to the services we provide. We aim to handle all customer data responsibly and with respect for privacy at every stage.