GDPR Compliance
Your data protection rights under UK GDPR
iris-civet is committed to protecting your personal data and respecting your privacy rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
iris-civet is the data controller for personal information collected through this website and in the course of providing our gardening services. We determine how and why your personal data is processed.
Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right to Access
You can request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
Right to Rectification
If personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will address correction requests within one month.
Right to Erasure
In certain circumstances, you can request that we delete your personal data. This right applies when:
- The data is no longer necessary for its original purpose
- You withdraw consent where consent was the legal basis
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restrict Processing
You can ask us to temporarily stop processing your personal data while we verify its accuracy or assess whether our legitimate interests override yours.
Right to Data Portability
Where processing is based on consent or contract, you can receive your personal data in a commonly used, machine-readable format and transmit it to another controller.
Right to Object
You can object to processing based on legitimate interests at any time. We will stop processing unless we can demonstrate compelling grounds that override your rights.
Rights Related to Automated Decision Making
We do not use automated decision-making or profiling that produces legal effects or significantly affects you.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Consent: When you voluntarily submit information through our contact forms
- Contract: When processing is necessary to provide services you have requested
- Legitimate Interests: For business operations that do not override your fundamental rights
Data Processing Activities
We process personal data for these purposes:
- Responding to enquiries and providing quotes
- Delivering gardening services
- Maintaining records for legal and accounting requirements
- Improving our services and website
Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected:
- Enquiry data: 24 months from last contact
- Customer records: 6 years after last service (for tax purposes)
- Cookie consent preferences: 12 months
Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Secure storage of personal data
- Limited access to authorised personnel only
- Regular review of data protection practices
International Transfers
We do not routinely transfer personal data outside the United Kingdom. If such transfers become necessary, we will ensure appropriate safeguards are in place.
Exercising Your Rights
To exercise any of your data protection rights, please contact us:
Email: [email protected]
Address: 47 Thornton Road, Bradford, West Yorkshire, BD1 2EP
We will respond to your request within one month. In complex cases, we may extend this by up to two further months, but we will inform you of any extension within the first month.
Complaints
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113
We encourage you to contact us first so we can address your concerns directly.
Last updated: January 2024