Privacy Policy | Your Rights & Choices

Introduction and Scope

At Zazyjao Custom Landscaping & Garden Design, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, process, and safeguard your data when you visit our website, use our services, or interact with our landscaping and garden design business.

This policy applies to all personal data processing activities conducted by Zazyjao, whether online or offline, and covers all services including landscape consultation, garden design, maintenance services, and related communications.

Data Collection and Usage

Information We Collect

Personal Information

Name, email address, phone number, postal address, and payment information when you request services or consultations.

Property Information

Property details, garden specifications, landscape preferences, and project requirements for service delivery.

Technical Data

IP address, browser type, device information, and website usage analytics for improving user experience.

Communication Records

Email correspondence, consultation notes, project discussions, and service feedback.

How We Use Your Data

Providing landscaping and garden design services
Processing service requests and managing project timelines
Communicating about ongoing projects and maintenance schedules
Sending service updates, seasonal care tips, and promotional materials
Improving our website functionality and user experience
Complying with legal obligations and business record-keeping
Analyzing service performance and customer satisfaction

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract Performance: Processing necessary for service delivery and project completion
Legitimate Interests: Business operations, customer service improvement, and marketing communications
Consent: Marketing communications and optional data collection with your explicit permission
Legal Compliance: Meeting regulatory requirements and business record obligations

Data Protection and Security

We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

            Technical Safeguards
            SSL encryption for all data transmissions
Secure server infrastructure with regular security updates
Access controls and authentication protocols
Regular security audits and vulnerability assessments
Encrypted data storage and backup systems

        

            Organizational Measures
            Staff training on data protection and privacy practices
Confidentiality agreements with all team members
Limited access to personal data on a need-to-know basis
Regular privacy impact assessments
Incident response procedures for data breaches

        

Your Rights Under GDPR

As a data subject, you have several rights regarding your personal information. We are committed to facilitating the exercise of these rights:

Right of Access

Request copies of your personal data and information about how we process it.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data under certain circumstances.

Right to Restrict Processing

Request limitation of how we process your personal data.

Right to Data Portability

Receive your personal data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

Data Retention and Deletion

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Our retention periods are:

Active customer data: Duration of service relationship plus 7 years for business records
Project documentation: 10 years for warranty and legal compliance purposes
Marketing communications: Until consent is withdrawn or 3 years of inactivity
Website analytics: 26 months from collection date
Financial records: 7 years as required by tax regulations

Third-Party Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following limited circumstances:

With trusted service providers who assist in business operations under strict confidentiality agreements
With suppliers and contractors necessary for project completion, limited to project-relevant information
When required by law, court order, or legal process
To protect our rights, property, or safety, or that of our customers or others
In connection with a business transfer, merger, or acquisition with appropriate data protection measures

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyze website performance. We use:

Essential cookies for website functionality and security
Analytics cookies to understand website usage and improve services
Preference cookies to remember your settings and choices

You can control cookie settings through your browser preferences, though disabling certain cookies may affect website functionality.

International Data Transfers

If we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved transfer mechanisms to protect your data rights.

Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will take steps to delete the information promptly.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. We will notify you of material changes through our website or direct communication. Continued use of our services after policy updates constitutes acceptance of the revised terms.