Privacy Policy - Landscaping Chessington

This Privacy Policy explains how Landscaping Chessington collects, uses, shares, stores, and protects personal data. It applies to all Landscaping Chessington customers in the area, including prospective customers, current customers, and individuals who enquire about our services. We are committed to handling personal information in a lawful, fair, and transparent manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Landscaping Chessington provides landscaping-related services to customers in the local area. In the course of operating our business, we may collect and process personal data about individuals who request quotations, book services, make payments, communicate with us, or otherwise interact with us. This policy explains how that information is managed.

2. Data We Collect

We may collect a range of personal data depending on how you interact with us. This may include:

Identity data such as your name and title.
Contact data such as your address, email address, and telephone number.
Service data such as details about the work requested, site information, service preferences, and project notes.
Payment data such as payment status, transaction records, and billing information.
Communication data such as emails, messages, call notes, and records of correspondence.
Technical data such as IP address, device information, and basic usage information where you interact with our digital services.
Marketing preferences such as whether you wish to receive promotional messages.

We only collect information that is relevant and necessary for the purposes described in this policy. We do not intentionally collect special category data unless it is required for a specific lawful reason and with appropriate safeguards.

3. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange, deliver, and manage landscaping services.
To process payments and maintain financial records.
To communicate with you about appointments, service updates, and customer support.
To manage records, improve our service quality, and maintain internal administration.
To meet legal, accounting, tax, and regulatory obligations.
To send marketing communications where permitted and where you have not opted out.
To protect our business, customers, and staff from fraud, misuse, or security risks.

We will only process your personal data where we have a valid legal reason to do so. We aim to keep all processing relevant, proportionate, and limited to what is necessary.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each type of processing. Landscaping Chessington may rely on one or more of the following lawful bases:

Contract

We process your data where it is necessary to enter into or perform a contract with you. This includes providing quotes at your request, scheduling work, completing services, issuing invoices, and managing customer accounts.

Legal Obligation

We may process personal data where required to comply with legal duties, such as tax rules, accounting obligations, or lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include improving our services, keeping business records, preventing fraud, and handling enquiries efficiently.

Consent

Where consent is required, for example certain types of marketing communication, we will obtain it clearly and give you the option to withdraw it at any time. If you withdraw consent, this will not affect the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We may share personal data with trusted third parties who help us run our business. These third parties act as data processors or, in some cases, separate controllers. We only share the data necessary for the service they provide and require them to handle it securely.

Examples of processors may include:

Payment processors who handle card or bank-related transactions.
Accounting and bookkeeping providers who help manage financial records and invoices.
IT and cloud service providers who store data or support our business systems.
Communication service providers who enable email, phone, or messaging services.
Professional advisers such as accountants or legal advisers, where necessary.

We may also disclose data where required by law, to prevent or detect crime, to protect the rights of Landscaping Chessington, or to support legal claims.

Where a processor is used, we ensure that appropriate contracts and safeguards are in place. This includes obligations to process data only on our instructions, maintain confidentiality, and apply suitable security measures.

6. International Transfers

If personal data is transferred outside the UK, we will take steps to ensure that it receives an adequate level of protection. This may include the use of approved safeguards such as appropriate contractual terms or transfers to jurisdictions recognised as providing suitable protection.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the reason for processing.

As a general approach:

Customer and project records are kept for as long as needed to manage the service relationship and after completion for a reasonable period.
Financial and tax-related records are retained for the period required by law.
Communication records are kept for a period appropriate to deal with follow-up queries, complaints, or disputes.
Marketing data is retained until you opt out or it is no longer required.

When data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices.

8. Security of Your Data

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include restricted access, secure storage, password protection, and internal procedures for handling data responsibly.

However, no system can be guaranteed to be completely secure. We therefore encourage users to take care when sharing information and to notify us promptly if they believe their data may have been compromised.

9. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to ask us to limit how we use your data in certain situations.
Right to data portability – to request that certain data be provided to you or another organisation in a structured, commonly used format.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

These rights are not absolute, and some requests may be limited where we have a legal obligation or other lawful reason to retain or process the data.

10. How to Exercise Your Rights

If you wish to exercise any of your rights, you may make a request in writing. We may need to verify your identity before responding. We will aim to respond within one month, although complex requests may take longer. In such cases, we will keep you informed of the progress.

11. Cookies and Similar Technologies

Where our digital services use cookies or similar technologies, they may collect limited technical information to support basic functionality, performance, and user experience. Where required, we will provide appropriate notice and obtain consent before placing non-essential cookies. You can manage browser settings to control cookie use.

12. Children’s Data

Our services are generally intended for adults. We do not knowingly collect personal data from children unless it is necessary in connection with a customer relationship and is provided by a parent, guardian, or authorised adult. If we become aware that we have collected data inappropriately, we will take steps to delete it where required.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational needs. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically.

14. Summary of Our Commitment

Landscaping Chessington is committed to processing personal data responsibly, securely, and lawfully. We use data only for clear business purposes, rely on appropriate lawful bases, retain information only for as long as necessary, and work with trusted processors under appropriate safeguards. We also recognise and respect your privacy rights.

In short, we aim to ensure that all Landscaping Chessington customers in the area can trust us to handle their personal information with care, transparency, and respect.