GDPR Compliance

Last updated: January 2024

Our Commitment to Data Protection

zephyrfold is committed to ensuring that your personal data is protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we comply with these regulations and outlines your rights.

Data Controller

zephyrfold acts as the data controller for personal information collected through this website and in the course of providing our gardening and landscaping services.

Contact details:
zephyrfold
47 Greenway Gardens
Leeds, LS8 2PQ
Email: [email protected]

Your Rights Under UK GDPR

Right to Be Informed

You have the right to be informed about how we collect and use your personal data. This is provided through our Privacy Policy and this GDPR page.

Right of Access

You can request a copy of the personal data we hold about you. This is commonly known as a "subject access request". We will respond to your request within one month of receiving it.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will action your request within one month.

Right to Erasure

Also known as the "right to be forgotten", you can request that we delete your personal data in certain circumstances, including:

• The data is no longer necessary for its original purpose
• You withdraw your consent (where consent was the basis for processing)
• You object to the processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.

Right to Data Portability

Where we process your data based on consent or contract, and processing is automated, you have the right to receive your data in a structured, commonly used format and to have it transferred to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision making.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the details above. We may need to verify your identity before processing your request. We will respond to all legitimate requests within one month. In complex cases, this may be extended by a further two months, and we will inform you if this is necessary.

Lawful Basis for Processing

We process personal data on the following lawful bases:

• Consent: Where you have provided clear consent for us to process your data for specific purposes
• Contract: Where processing is necessary to perform our service agreement with you
• Legitimate interests: Where we have a legitimate business need that is balanced against your rights
• Legal obligation: Where we must process data to comply with the law

Data Transfers

Your personal data is stored and processed within the United Kingdom. We do not routinely transfer personal data outside the UK. Should such transfers become necessary, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Retention

We retain personal data only for as long as necessary:

• Enquiry data: Retained for 2 years if services are not engaged
• Customer records: Retained for 7 years following completion of services for accounting and legal purposes
• Marketing preferences: Retained until you withdraw consent

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last revised.