Privacy Policy

Who we are

Lord of the Lawns is a landscaping business based in Okehampton, Devon. We carry out landscaping and related garden construction services: garden design, patios and paving, stonework and walls, driveways and paths, fencing and gates, bespoke garden features, and full garden builds across Devon.

We are the data controller for the information described in this policy. You can contact us at hello@lordofthelawns.co.uk or on 07947 962305.

Lord of the Lawns is a sole trader business owned and operated by Graham Sandercock, trading from Okehampton, Devon.

This Privacy Policy explains how Lord of the Lawns collects and uses personal information when you use this website, contact us or ask us for a quote. It also explains who we share information with, how long we keep it, and the rights you have under UK data protection law.

Information you give us

When you ask for a quote or contact us through the website, we may collect:

the service you are interested in;
the details you give us about your project;
your postcode and property address;
your first name and surname;
your phone number; and
your email address.

We use this information to understand your enquiry, respond to you, prepare or discuss a quotation, arrange a site visit where appropriate, and communicate with you about the work you have asked us about.

If you send us anything else in a message, we hold that too, simply because you sent it.

How we collect it

Through the quote form on this website. Through a lead form on Facebook or Instagram if you respond to one of our adverts. By email, phone, text or WhatsApp when you get in touch. And in conversation when we visit your property.

Once work is under way we may also hold photographs or descriptions of your garden, your preferred way of being contacted, and records relating to quotes, invoices, appointments and completed jobs.

Why we use your enquiry information

Where you ask us for a quotation or about work you may want us to carry out, we process the information needed to take steps at your request before entering into a contract.

We may also process limited information where necessary for our legitimate interests in running the business, keeping appropriate records, protecting the website and our communications from misuse, and dealing with enquiries efficiently. We only rely on legitimate interests where those interests are not overridden by your rights and interests.

Two other bases apply in narrower situations. We rely on legal obligation where we must keep records for tax and accounting. We rely on consent where consent is genuinely required, such as for optional cookies and similar technologies, and you can withdraw it at any time.

Postcode verification

When you enter a postcode on our quote form, we use Postcodes.io to check whether that postcode exists. Your browser sends the postcode you entered to Postcodes.io for that check. As with an ordinary web request, Postcodes.io’s servers will also receive technical connection information such as your IP address.

We do not send your property address, name, phone number, email address, selected service or project description to Postcodes.io.

Advertising on Facebook and Instagram

We advertise on Facebook and Instagram. If you submit an enquiry through one of Meta’s lead forms, the details you give are passed to us by Meta so we can contact you, and are also processed by Meta under their own terms.

Meta Pixel — if you choose to allow marketing or advertising technologies, we may use the Meta Pixel to understand how people interact with the website and to measure the effectiveness of advertising. This can result in information about your browser, device and interactions with the website being sent to Meta. We do not activate the Meta Pixel before the relevant consent has been given.

Our Cookie Policy explains this in full.

Photographs of finished work

We photograph gardens we have built and use those photographs on this website and on social media.

We do not publish your name, your address, or anything identifying your property without asking you first. If we have photographed your garden and you would rather we did not use the images, tell us and we will remove them.

Web3Forms / Web3Creative — our website quote form is submitted through Web3Forms. Web3Forms receives the information you enter into the form so that it can process the submission and deliver it to our business email. We have configured the Web3Forms retention setting for this form to 7 days. Web3Forms’ current Data Processing Agreement also describes retention behaviour within its underlying systems that is separate from the retention setting we control. Web3Forms may use infrastructure and sub-processors outside the United Kingdom, as explained below under International transfers.
Postcodes.io — receives only the postcode you type into the quote form, for the existence check described above. It does not receive the rest of the form.
Our email provider — because your enquiry arrives, and is answered, by email.
Cloudflare — our website is hosted and delivered through Cloudflare, so its systems handle the technical requests your browser makes to this site.
Meta — where you contact us through one of their lead forms, and where you have consented to the Meta Pixel as described above.
Our accountant — for invoices and business records.
Specialist trades, such as an electrician, where a job requires one and we need to share your address and the scope of work.
Authorities and regulators, where we are required by law to provide information.

We do not sell your information. We do not share it with data brokers or advertisers, other than the advertising described above.

International transfers

Some of the service providers we use may process personal information outside the United Kingdom. Where UK data protection law requires additional safeguards for an international transfer, we use an appropriate transfer mechanism recognised under UK data protection law and take reasonable steps to ensure the information remains protected.

Web3Forms processes form submissions using infrastructure that may involve processing outside the United Kingdom, including in the United States. Its Data Processing Agreement incorporates the Standard Contractual Clauses together with the UK International Data Transfer Addendum where applicable to transfers from the United Kingdom.

How long we keep it

We keep personal information only for as long as we reasonably need it for the purpose for which it was collected, including dealing with your enquiry, carrying out any work you ask us to undertake, maintaining appropriate business records, resolving disputes, and meeting legal, tax and accounting obligations. Different records may therefore be kept for different periods.

For our own records:

Enquiries that do not lead to work: up to twelve months from our last contact.
Quotes, invoices and job records: up to six years, which is what tax and accounting rules require.
Photographs of completed work: indefinitely, unless you ask us to remove them.

Where a dispute or complaint arises, we may keep relevant records for longer.

Separately from our own records, we have configured the Web3Forms retention setting for this form to 7 days. Web3Forms’ own Data Processing Agreement describes additional retention behaviour within its underlying systems. This is separate from our own copy of the enquiry delivered to our business email, which we retain according to our own retention practices.

Keeping it safe

We take reasonable steps to protect your information against loss, unauthorised access and misuse. No system is completely secure, so we cannot guarantee absolute security, but we do not hold more than we need and we do not keep it longer than we have to.

If something goes wrong

If personal information we hold is lost, stolen or accessed by someone who should not have it, and there is a risk to you as a result, we will report it to the Information Commissioner’s Office within 72 hours of becoming aware of it. Where the risk to you is high, we will contact you directly and tell you what has happened and what we are doing about it.

Your rights

Depending on the circumstances, data protection law may give you rights in relation to your personal information, including rights of access, correction, erasure, restriction, objection and data portability. Where we rely on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Email hello@lordofthelawns.co.uk and we will respond within one month.

Data protection complaints

If you are concerned about how we have collected, used, stored or shared your personal information, you can make a data protection complaint to us by emailing hello@lordofthelawns.co.uk. Please make clear that your concern is a data protection complaint and include enough information for us to understand what has happened.

We will acknowledge your complaint within 30 days of receiving it. We will take appropriate steps to investigate it without undue delay, keep you informed of the progress where appropriate, and tell you the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO). We would appreciate the opportunity to look into your concern first, but this does not affect your right to contact the ICO.

Other websites

Where we link to another website, that site has its own privacy practices. We are not responsible for what happens once you leave ours.

Changes

We may update this policy from time to time. The date at the top shows when it last changed.