Aizyne Garden & Landscaping

Effective 20 October 2026 · Version 2026-10-20

Privacy and data protection

This notice explains how personal information is handled through Aizyne Garden & Landscaping. The service is developed and operated by Carter Langley, a sole trader trading as Aizyne Group. For account, website, contact, billing, security and support information, Carter Langley trading as Aizyne Group is the data controller. Carter Langley is registered with the Information Commissioner’s Office under registration reference ZC276646. Contact: info@aizynegroup.com.

Our two data-protection roles

Aizyne Group as controller: we decide how and why account-holder, prospective-client, support, security and service-administration information is used.

Aizyne Group as processor: a subscribing gardening or landscaping business is normally the controller of customer, property, quotation, job, visit, photograph and invoice information it puts into its workspace. We process that information on the subscriber’s documented instructions to provide the service. Our Data processing terms explain this relationship.

Information we collect

  • Account and identity details, including names, email addresses, telephone numbers, sign-in and security records.
  • Business, subscription, tax and billing information supplied by a subscriber.
  • Contact enquiries and communications with Aizyne Group.
  • Workspace content supplied by subscribers, including customer details, addresses, property records, photographs, quotations, guarantees, jobs, visits, invoices and case histories.
  • Technical information needed to provide and secure the service, such as IP addresses, request records, essential cookies and security events.

We may receive customer information indirectly from the gardening or landscaping business that uses Aizyne. That business is responsible for telling its customers how it uses their information.

Why we use information and our lawful bases

Provide accounts, workspaces and requested services
Performance of a contract, or steps requested before entering a contract.
Answer enquiries and provide support
Contract where applicable, and our legitimate interests in responding and operating the service.
Secure accounts, prevent misuse and maintain audit records
Our legitimate interests in protecting users, Aizyne Group and the service, and legal obligations where applicable.
Keep financial, tax and compliance records
Legal obligation and our legitimate interests in managing and defending the business.
Send essential service messages
Contract and our legitimate interests in operating the service. These are not advertising messages.
Optional marketing
Consent where required. Consent can be withdrawn at any time.

Where we rely on legitimate interests, those interests are running, improving and protecting a proportionate business service, communicating with users, and establishing or defending legal claims. We consider the effect on individuals before relying on this basis.

Required and optional information

Information marked as required is needed to create or secure an account, provide a requested service, issue business records, or meet a legal requirement. Without it, we may be unable to provide that function. Optional information may be left blank.

Who receives information

Information is available only to authorised users of the relevant workspace and to Aizyne Group where necessary to operate, secure or support the service. We also use carefully selected providers for UK hosting and infrastructure, transactional email delivery, source-code and operational security services, and optional payment processing. When a subscriber explicitly enables Stripe, relevant business, customer, invoice and transaction information is sent to Stripe to create the connected account and process payments. Identity and payout information is supplied directly to Stripe; Aizyne does not receive full card or bank-account numbers. Stripe may act as our provider and as an independent controller for identity verification, fraud prevention and regulated payment services under its own privacy terms. We may disclose information to professional advisers, regulators, courts or law-enforcement bodies where lawful and necessary. We do not sell personal information.

Our current provider categories and processing locations are listed in the Subprocessor register.

International transfers

Some service providers may process information outside the UK. Before permitting a restricted transfer, we require an applicable lawful safeguard, such as UK adequacy regulations or an approved transfer agreement or addendum, together with proportionate security and transfer-risk checks. Contact us for information about safeguards relevant to your information.

How long we keep information

  • Contact enquiries are ordinarily retained for up to 24 months after the last meaningful contact, unless needed for an ongoing relationship or legal claim.
  • Account and workspace information is retained while the account is active and then for a limited period needed for export, recovery, legal compliance, disputes and secure deletion.
  • Financial and transaction records may be retained for the period required by tax and accounting law.
  • Security and audit information is retained only as long as reasonably needed to detect misuse, investigate incidents and protect the service.
  • Backups are removed through the normal backup-expiry cycle after live information is deleted.

Exact periods may vary where law, litigation, fraud prevention or an active complaint requires longer retention. We review the need to retain information and securely delete or anonymise it when no longer required.

Your rights

Depending on the circumstances and lawful basis, you may have rights to be informed; access your information; correct inaccurate information; erase information; restrict processing; receive portable information; and object to processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Your right to object: you may object at any time to direct marketing. You may also object to processing based on legitimate interests, giving reasons relating to your situation. We will stop unless there are compelling lawful grounds to continue or the information is needed for legal claims.

Signed-in subscribers can use the Data protection centre to download workspace information or submit a request. Anyone may email info@aizynegroup.com. We may need to verify identity before releasing or changing information. If Aizyne only processes information for a subscribing business, we may refer the request to that business as the controller.

Automated decisions

Aizyne does not currently make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

Security and breaches

We use organisation-separated workspaces, access controls, encrypted connections, restricted portal links, security headers, backups and audit information appropriate to the service. No online service can promise absolute security. We assess suspected personal-data breaches, document decisions, notify affected controllers, and report to the ICO or affected people where legally required.

Complaints

Please contact info@aizynegroup.com first so we can investigate. You also have the right to complain to the Information Commissioner’s Office, the UK data-protection regulator.

Changes to this notice

We may update this notice as the service or law changes. The effective date and version at the top identify the current notice. Material changes will be brought to account holders’ attention where appropriate.