1. Introduction
epd Landscape Architects is committed to protecting personal privacy and ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy outlines how personal data is collected, used, retained, and protected across our website and business operations.
2. Data Controller & Contact Information

• Data Controller: epd Landscape Architects
• Address: The Stables, Duxbury Hall Road, Duxbury Park, Chorley, Lancashire, PR7 4AT
• Telephone: 01257 460461
• Email: studio@epdlandscape.co.uk

3. Personal Data Collected & Purpose of Processing

• Enquiry & Contact Data: Names, email addresses, physical addresses, and phone numbers provided via contact forms, phone, or email. Processed to respond to service enquiries and administer pre-contractual steps. Retained for a maximum of 2 years from last contact.
• Corporate & Client Point of Contact Data: Business contact details provided by main contractors or client organisations. Processed under legitimate interests to fulfill project obligations and manage accounts.
• Supplier & Financial Data: Bank information, tax details, and transaction history for sole traders/ contractors. Processed to execute payments and meet UK statutory financial reporting requirements (retained for 6 years).
• Newsletter & Direct Marketing Data: Email addresses provided for updates. Processed based on explicit consent (individual consumers) or legitimate interest (B2B contacts). Managed via email processors like MailChimp, with an opt-out/unsubscribe option in every mailing.
• Technical & Analytics Data: IP addresses, browser types, and navigation metrics gathered via Google Analytics to evaluate and improve site usability.

4. Legal Grounds for Processing

• Contractual Necessity: Performing contracts or taking steps prior to entering agreements.
• Legitimate Interests: Business administration, client relationship management, and resolving queries or complaints.
• Consent: Direct newsletter marketing and non-essential cookie tracking.
• Legal Obligation: Compliance with UK legal, accounting, and tax duties.

5. Third-Party Sharing & International Data Transfers
Personal data is never sold. It is shared only with vetted third-party service providers (e.g., IT hosts, cloud providers, MailChimp) under strict data processing agreements. Any data transferred outside the UK complies with UK Adequacy Regulations or utilises approved transfer mechanisms such as the UK International Data Transfer Agreement (IDTA).
6. Your Rights Under UK GDPR
You have the right to request access to, correction of, or erasure of your personal data, as well as rights to restrict or object to processing and data portability. To exercise these rights, contact us in writing. If you believe your data has been handled improperly, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
7. Cookies
We use essential cookies for website operation and analytical cookies to understand visitor usage in compliance with the Privacy and Electronic Communications Regulations (PECR). Cookie preferences can be managed through browser settings or the site cookie banner.
8. Policy Updates

• Last Updated: September 1, 2026