Privacy Policy - Landscaping Foresthill

This Privacy Policy explains how Landscaping Foresthill collects, uses, stores, shares, and protects personal data when providing services to customers in the Foresthill area. It applies to all Landscaping Foresthill customers in the area, including prospective clients, current clients, and anyone who interacts with us in connection with our landscaping services. We are committed to handling personal data lawfully, fairly, and transparently in line with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

By using our services, requesting a quote, communicating with us, or otherwise engaging with Landscaping Foresthill, you acknowledge that your personal data may be processed as described in this Policy. We only collect and use information that is necessary for legitimate business and service purposes.

1. Data We Collect

We may collect and process the following categories of personal data:

Identity details such as your name, title, and, where applicable, business name.
Contact details such as phone number, email address, billing address, and service address.
Service information including the type of landscaping work requested, property details, project notes, scheduling preferences, and service history.
Payment and billing information necessary to issue invoices, process payments, and maintain financial records.
Communications including emails, messages, call notes, feedback, complaints, and service instructions.
Technical or usage data if you interact with our digital tools, such as device information, IP address, browser type, and basic analytics data.
Images or site records that may be used to assess a property, document work completed, or support a quote, estimate, or maintenance plan.

We do not intentionally collect special category data unless it is necessary and lawfully permitted. If you provide information that may reveal sensitive details, we will handle it with appropriate safeguards and only where required for a specific purpose.

2. How We Use Your Data

We use personal data for the following purposes:

To provide landscaping, maintenance, design, and related services.
To prepare quotations, estimates, and service agreements.
To schedule and manage appointments, site visits, and recurring services.
To communicate with you about your project, account, or service updates.
To process payments, send invoices, and maintain accounting records.
To improve our services, training, planning, and customer experience.
To comply with legal, tax, insurance, and record-keeping obligations.
To protect our business, clients, employees, and property from fraud, misuse, or security threats.

We only use personal data for purposes that are relevant, proportionate, and necessary for the services we provide.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each processing activity. Landscaping Foresthill relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing estimates, confirming bookings, delivering services, issuing invoices, and managing customer accounts.

Legal obligation

We process certain information to meet our legal duties, such as tax, accounting, insurance, safety, and regulatory requirements.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This may include service management, business administration, quality control, preventing fraud, and maintaining security.

Consent

Where required by law, we will rely on your consent. For example, if we seek permission to send optional marketing communications, you may withdraw your consent at any time.

We do not rely on consent where another lawful basis is more appropriate or where processing is necessary to deliver a service you requested.

4. Data Retention

We keep personal data only for as long as necessary to fulfill the purposes for which it was collected, including service delivery, legal compliance, dispute resolution, and business record-keeping. Retention periods depend on the type of data and the reason it was collected.

Customer and project records are generally kept for the duration of the relationship and for a reasonable period afterward.
Financial and tax records are retained for the period required by applicable law.
Communication records are kept as needed to support ongoing service, handle queries, or resolve disputes.
Consent records are maintained to show how and when permission was obtained or withdrawn.

When data is no longer needed, we will securely delete, anonymize, or archive it in accordance with our retention practices. We do not retain personal data indefinitely.

5. Sharing and Processors

We may share personal data with trusted third parties, but only where necessary and only under appropriate safeguards. These third parties may act as data processors on our behalf or may act as independent controllers in limited circumstances.

Processors may include:

Payment service providers that handle secure payment processing.
Accounting or bookkeeping providers that support invoicing, tax reporting, and financial administration.
IT and cloud hosting providers that store or secure business data.
Scheduling, communication, or customer management tools used to organize service delivery.
Professional advisers such as lawyers, insurers, auditors, or consultants when necessary.

Where we use processors, we ensure they are bound by written agreements requiring them to process personal data only on our instructions, to keep it secure, and to comply with GDPR requirements. We do not sell personal data.

We may also disclose information if required by law, court order, regulatory authority, or where necessary to protect our legal rights, prevent harm, or investigate suspected wrongdoing.

6. Data Security

We take reasonable technical and organizational measures to protect personal data from unauthorized access, loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and limited access to records on a need-to-know basis.

Although no system can be guaranteed 100% secure, we continuously review our practices to reduce risks and to keep data protected to an appropriate standard.

7. International Transfers

If any personal data is transferred outside the UK or European Economic Area, we will ensure that appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or equivalent legal protections, depending on the destination and processing arrangement.

8. Your Rights

As a data subject under GDPR, you have a number of rights regarding your personal data. Subject to legal conditions and exceptions, you may have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete information.
Erase your data in certain circumstances.
Restrict how we process your data in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability for information you have provided to us, where applicable.
Withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed. We encourage you to raise concerns with us first so we can address them promptly and fairly.

9. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children except where it is incidental and necessary for service delivery in a lawful context. If we become aware that we have collected data from a child without appropriate authorization, we will take steps to delete it or otherwise handle it in accordance with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service offerings. When we do, we will revise the policy to ensure it remains accurate and transparent. We recommend reviewing it periodically to stay informed about how your information is protected.

Last updated: This policy is effective from the date it is published and applies to all customers in the Foresthill area who use Landscaping Foresthill services.

We are committed to respecting your privacy and handling your personal data responsibly, securely, and in line with GDPR principles of lawfulness, fairness, transparency, data minimization, accuracy, storage limitation, integrity, and confidentiality.