Privacy Policy
Last updated: December 5, 2025
Thoughtfullovecu ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website or use our services.
1. Information We Collect
We collect several types of information to provide and improve our services:
Personal Information
When you contact us or request our services, we may collect:
- Name and contact details (email address, phone number, postal address)
- Project details and requirements
- Property information and photographs
- Payment and billing information
- Communication preferences
Automatically Collected Information
When you visit our website, we automatically collect certain information:
- IP address and device information
- Browser type and version
- Pages visited and time spent on our site
- Referring website addresses
- Operating system and platform
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide landscape design consultations and services
- To communicate with you about your project
- To send quotes, invoices, and project updates
- To improve our website and services
- To send marketing communications (with your consent)
- To comply with legal obligations
- To protect our rights and prevent fraud
3. Legal Basis for Processing
Under UK GDPR, we process your personal data on the following legal grounds:
- Contract Performance: Processing necessary to fulfill our service agreement with you
- Consent: You have given clear consent for specific purposes
- Legitimate Interests: Processing necessary for our legitimate business interests
- Legal Obligation: Processing required to comply with the law
4. Data Sharing and Disclosure
We may share your information with:
- Service Providers: Third parties who assist us in delivering services (e.g., payment processors, email services)
- Professional Partners: Contractors, suppliers, and specialists involved in your project
- Legal Authorities: When required by law or to protect our rights
We never sell your personal data to third parties.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Secure data storage and transmission (SSL/TLS encryption)
- Regular security assessments and updates
- Limited access to personal data by authorized personnel only
- Employee training on data protection
6. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
- Active project information: Duration of project plus 6 years (for tax and legal purposes)
- Marketing communications: Until you unsubscribe or request deletion
- Website analytics: Typically 26 months
7. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Request transfer of your data to another service
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
To exercise these rights, please contact us using the details provided below.
8. Cookies
Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.
9. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
10. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.
11. International Data Transfers
Your information may be transferred to and processed in countries outside the UK. When this occurs, we ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.
12. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website and updating the "Last updated" date.
13. Contact Us
If you have questions about this privacy policy or wish to exercise your rights, please contact us:
Thoughtfullovecu
31 Iffley Road, Broad Marston, United Kingdom
Email: info@thoughtfullovecu.cv
Phone: +44 78 5876 5520
14. Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113