Privacy Policy

Last updated: 21 October 2026

This policy explains how Kestmoor Garden & Property Care ("Kestmoor", "we") collects and uses personal data when you use www.kestmoor.co.uk. We are the data controller for this data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You can contact us about privacy using the contact form.

What we collect

• Quote requests: your name, email address, phone number (optional), postcode, the garden details you enter, and a garden photo if you choose to add one.
• Booking requests: your preferred date and time, the first line of your address and any notes you add.
• Messages: your name, email, phone (optional) and message.
• Technical data: your IP address is processed briefly to prevent abuse (rate limiting and bot protection) and is not stored with your quote.

Why we use it and our lawful basis

• To prepare your estimate and to arrange and carry out the work you ask for: steps taken at your request before entering into a contract, and performance of a contract (Article 6(1)(b)).
• To answer your messages and keep records of the work we do: legitimate interests (Article 6(1)(f)) in running our business.
• To protect the website from spam and misuse: legitimate interests.

We do not sell your data and do not use it for marketing without your consent. No decision about you is made solely by automated processing: every estimate is confirmed by a person on arrival.

Your garden photo

Before your photo is stored we remove embedded metadata such as GPS location. The photo is used only to prepare your estimate: an automated image-analysis service checks things such as grass length and the amount of garden waste. It can only flag work you may not have mentioned; it never sets the price. Photos are stored privately, never published, and automatically deleted within 90 days.

Who we share it with

We use service providers who process data on our behalf: Cloudflare (website hosting, database, photo storage, image analysis and bot protection) and Groq (writing the short message that accompanies your estimate; it receives only your first name and the service type, not your contact details or photo). If enabled, email confirmations are sent through our email provider, and new requests are forwarded to us by a private messaging notification. Some providers may process data outside the UK; where they do, transfers rely on appropriate safeguards such as UK adequacy regulations or the UK International Data Transfer Addendum.

How long we keep it

• Photos: deleted automatically within 90 days.
• Quotes that are not booked, and messages: up to 12 months, then deleted.
• Records of work carried out: up to 6 years, for accounting and legal purposes.

Cookies

We do not use advertising or analytics cookies. If bot protection (Cloudflare Turnstile) appears on a form, it uses strictly necessary technical data to tell people and bots apart.

Your rights

You have the right to access, correct or delete your data, to restrict or object to its use, and to data portability. To use any of these rights, contact us through the contact form; we will reply within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.