Privacy Policy

Rebecca Read Landscape and Garden Design

Last updated: 28/03/2026

Who I am

I am Rebecca Read, a landscape and garden designer based on the Cornwall/Devon border. I operate as a sole trader under the name Rebecca Read Landscape and Garden Design. For Privacy reasons, my full business address is not published online but is available to clients and relevant authorities upon request.

I am the data controller for the personal information collected through my website and in the course of providing my garden design services. This means I decide how your personal data is used and I am responsible for protecting it.

What personal data I collect and why

Enquiries and contact form submissions

When you get in touch via the contact form, email, phone, WhatsApp, or social media (including Instagram, Facebook, or Pinterest), I may collect your name, email address, phone number, postal address, property details, garden dimensions, and information about your project requirements and budget. I use this information to respond to your enquiry, potentially provide a fee estimate, and, if you choose to proceed, deliver my design services.

The lawful basis for this processing is performance of a contract, specifically, my taking steps at your request which might lead to us entering into a contract.

Project delivery

If you become a client, I will collect and use additional information as needed to deliver your garden design. This may include site photographs, property plans, access arrangements, and your design preferences. I may also retain your address and contact details for invoicing and business records.

The lawful basis for this processing is performance of a contract between us, and legal obligation (for example, I am required to keep financial records for HMRC).

Special category data

Some clients may choose to share health, disability, or accessibility information with me in order to inform their garden design. For example, when commissioning a therapeutic, accessible, or dementia-friendly garden. Where you share such information, I treat it with the highest level of care. I will only use it to deliver the design services you have requested.

The lawful basis for processing this information is your explicit consent, and you may withdraw that consent at any time by contacting me at info@rebeccaread.com.

Testimonials

With your explicit consent, I may publish a testimonial from you on my website and my social media channels. Testimonials are attributed by first name only unless you specify otherwise. You may withdraw your consent to the publication of your testimonial at any time by contacting me at info@rebeccaread.com, and I will remove it promptly.

The lawful basis for this processing is consent.

Publicity and marketing

To demonstrate my professional work, I use project imagery for publicity and marketing purposes. This may include using project imagery in advertising, on my website, social media, and in my professional portfolio.

  • CAD Drawings and Renders: I use anonymised digital designs for publicity and marketing unless a client has specifically requested otherwise. Because these are carefully checked to ensure they do not identify you or your specific property, they are not considered personal data.

  • Project Photographs: I take site photographs to support project delivery (for further details, please see the Project Delivery section above). I will only use these photographs for publicity or marketing purposes with your explicit written consent. You may withdraw your consent to the use of such photographs at any time by contacting me at info@rebeccaread.com, and I will remove them promptly.

The lawful basis for the use of project photographs for publicity and marketing purposes is consent.

Blog and news subscription

If you choose to subscribe to receive updates via the sign-up form on my blog page, I will collect your email address for this purpose. I will use it only to send you occasional blog and news updates.

The lawful basis for this processing is consent. You can unsubscribe at any time by clicking the unsubscribe link in any email you receive from me, or by contacting me at info@rebeccaread.com.

Website analytics and cookies

My website is hosted by Squarespace, which uses cookies and similar technologies to enable the site to function, to understand how visitors use the site, and to remember your preferences. Some of these cookies are essential for the site to work; others are used for analytics and performance.

My website also embeds content from Instagram (operated by Meta Platforms, Inc.), which may set its own cookies and collect data when you view the embedded content.

For further details, please see the Cookies section below.

Who I share your data with

I do not sell your personal data to anyone. I may share your data with the following parties where necessary:

  • Squarespace — my website hosting provider, which processes data on my behalf in order to operate my website. If you subscribe to receive blog and news updates, your email address will also be stored and managed using Squarespace's Email Campaigns feature. In both cases, Squarespace acts as a data processor. You can read Squarespace's privacy policy at squarespace.com/privacy.

  • Meta Platforms (Instagram) — embedded Instagram content on my website may result in data being collected by Meta. You can read Meta's privacy policy at facebook.com/privacy/policy.

  • Google Workspace (Including AppSheet) — I use Google Workspace (operated by Google) for my professional email, document storage, calendar, and project management. If we arrange a virtual meeting, I typically use Google Meet. Your contact details, correspondence, project data and files are processed by Google in accordance with their privacy terms.

  • Microsoft — I use Microsoft Office tools for document creation and project work. If these files are synced to the cloud (via OneDrive), they are processed by Microsoft in accordance with their professional privacy standards.

  • Design and Visualization Software — I use professional design tools such as Vectorworks and Twinmotion (Epic Games). If project files are uploaded to their cloud services for rendering, storage, or sharing, your project data (which may include your name or address on drawing title blocks) is processed by these providers in accordance with their privacy policies.

  • Other Communication & Video Platforms — If you choose to contact me via WhatsApp, Facebook, or Instagram (all operated by Meta), or Pinterest, your messages and profile data are processed by those platforms. If you request to use a specific video platform other than Google Meet (such as Zoom or Microsoft Teams), that platform will process your name and audio/video data to facilitate the call.

  • Accountant or bookkeeper — I may share invoicing and financial records with my accountant for the purposes of tax compliance.

  • Professional Partners and Suppliers — I may share relevant project details (such as your name, site address, and design specifications) with other industry professionals involved in your project. This includes surveyors, trade nurseries, and landscape contractors. I will only share this data where it is necessary to facilitate the services you have requested.

I will not share your personal data with any other third party without your consent, unless required to do so by law.

How I keep your data secure

I take the security of your data seriously.

  • Local Storage — Any project data stored locally on devices including my desktop computer or laptop is protected by industry-standard security measures, including strong passwords and device encryption.

  • Cloud Security — All my accounts are securely protected including by multi-factor authentication (MFA) to prevent unauthorised access.

  • Physical Security — My home office is kept secure to prevent unauthorised physical access to business devices and records.

International data transfers

Some of the service providers I use are based outside the UK (primarily in the US), including Squarespace, Google, Microsoft, Meta, Vectorworks, and Epic Games. This means your personal data may be transferred to and stored in other countries (primarily the US). I ensure that these providers use approved safeguards, such as Standard Contractual Clauses or participation in recognised data privacy frameworks, to ensure your data is protected in accordance with UK GDPR.

How long I keep your data

Enquiries that do not proceed to a project: I retain your contact details and correspondence for up to 12 months after our last communication, after which they are deleted.

Client project records: I retain project files, correspondence, and design documents for up to 6 years after the completion of a project, in line with standard business record-keeping practices and HMRC requirements.

Financial records: Invoices and payment records are retained for 6 years as required by HMRC.

Testimonials and project imagery used for publicity and marketing: Retained and published until you withdraw your consent.

Blog and news subscribers: I retain your email address for as long as you remain subscribed. If you unsubscribe, your email address will be deleted promptly.

Automated decision-making

I do not carry out any automated decision-making or profiling using your personal data.

Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Access — you can request a copy of the personal data I hold about you.

  • Rectification — you can ask me to correct any inaccurate or incomplete data.

  • Erasure — you can ask me to delete your personal data, subject to any legal obligations I have to retain it.

  • Restriction — you can ask me to restrict the processing of your data in certain circumstances.

  • Data portability — you can request that I provide your data in a structured, commonly used format.

  • Objection — you can object to my processing of your data in certain circumstances.

  • Withdraw consent — where processing is based on consent (for example, testimonials), you can withdraw your consent at any time.

To exercise any of these rights, please contact me at info@rebeccaread.com. I will respond within one month.

Cookies

Cookies are small text files stored on your device when you visit a website. My website uses the following types of cookies:

  • Essential cookies — required for the website to function (for example, session management and security). These do not require your consent.

  • Analytics cookies — used by Squarespace to understand how visitors use the site, such as which pages are visited most often. These cookies do not identify you personally.

  • Third-party cookies — the embedded Instagram feed may cause cookies to be set by Meta Platforms. These are governed by Meta's own cookie and privacy policies.

You can manage your cookie preferences using the cookie banner displayed when you first visit my website. You can also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

How to complain

If you are unhappy with how I have handled your personal data, I would appreciate the chance to address your concerns. Please contact me at info@rebeccaread.com in the first instance.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator:

  • Website: ico.org.uk

  • Phone: 0303 123 1113

  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Changes to this policy

I may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. I encourage you to review this policy periodically.