Privacy policy

Last updated: 8 September 2026

Information we collect

When you request a quote, we collect the contact and garden information you provide, including your name, postcode, phone number, email address, questionnaire answers and any garden photographs you choose to upload. We also store the quote result and price shown to you.

Location and service-area checks

When you check an area, a full postcode may be sent to Postcodes.io so it can be converted into a representative coordinate. Successful postcode results are cached as shared geographic reference data. If you choose “Use my location”, your browser sends a coordinate once for the service-area decision; we do not retain that precise browser coordinate in anonymous coverage analytics.

To understand demand and plan sensible routes, we retain coarse information such as a selected place, outward postcode district, coverage result, campaign reference and source page. Anonymous coverage events do not contain your name, contact details, IP address, exact full postcode, precise coordinate or unfiltered search wording. These planning records are reviewed and removed when they are no longer needed, with a normal maximum of 24 months.

Campaign attribution

If you arrive through an attributed leaflet or campaign link, we record its non-personal campaign reference and basic quote-funnel activity such as opening, starting and completing the quote. This helps us understand which local campaigns are useful. It does not require advertising cookies and the campaign reference does not alter your price.

How we use it

We use this information to calculate and preserve your quote, assess your enquiry, contact you, provide requested services and maintain basic business records. We do not sell your information.

Storage and processors

Enquiry records and private photo uploads are stored using Supabase, our database and file-storage provider. Information may also be processed by our website hosting and email providers where necessary to operate the service.

Lawful basis and retention

We process enquiries because it is necessary to respond to steps you take before entering a contract and for our legitimate interest in running the business. Unsuccessful enquiries are normally deleted after 24 months unless a longer period is needed for legal or dispute purposes. Customer records may be retained as required for tax, insurance and contractual obligations.

Your rights

You may ask for access, correction or deletion of your information, or object to certain processing. Some records may need to be retained where the law requires it.

Contact

For privacy questions or requests, email gardens@surreyleaf.co.uk.