Effective 16 October 2026 · Version 2026-10-16
Data processing terms
These terms form part of the Platform terms between the subscribing business (“Controller”) and Carter Langley, a sole trader trading as Aizyne Group (“Processor”), where Aizyne Group processes personal information on the subscriber’s behalf.
1. Processing details
Subject and purpose: hosting and operating the Aizyne Garden & Landscaping workspace, customer portal, communications and connected business records.
Duration: while the subscriber uses the service and during a limited secure exit, recovery and deletion period afterwards.
People: the subscriber’s customers, prospects, workers, contractors, suppliers and other contacts.
Information: identity and contact details, addresses, property and garden information, photographs, enquiries, quotations, approvals, guarantees, schedules, work records, invoices, communications and related audit information. The service is not intended for unnecessary special-category or criminal-offence information.
2. Documented instructions
Aizyne Group will process this information only to provide, secure and support the service under the subscriber’s documented instructions, including the subscriber’s ordinary use and configuration of the service, unless UK law requires otherwise. Where legally permitted, we will tell the subscriber before processing required by law.
3. Confidentiality and security
People authorised to process subscriber information are subject to appropriate confidentiality obligations. Aizyne Group will maintain proportionate technical and organisational measures, including access controls, organisation separation, encrypted transport, security monitoring, backups and recovery controls, having regard to the nature and risk of processing.
4. Subprocessors
The subscriber gives general written authorisation for the subprocessors identified in the Subprocessor register. We will impose data-protection obligations appropriate to the processing and remain responsible for our subprocessor obligations. We will provide reasonable notice of a material new subprocessor so the subscriber can raise a reasoned data-protection objection.
5. Individual rights and assistance
Taking account of the nature of processing, Aizyne Group will provide reasonable assistance so the subscriber can respond to requests for access, correction, erasure, restriction, portability and objection. If we receive a request concerning subscriber-controlled information, we will refer it to the subscriber unless legally prevented.
6. Breaches, assessments and regulators
We will notify the subscriber without undue delay after becoming aware of a personal-data breach affecting its information and provide available information reasonably needed for the subscriber’s assessment. We will provide reasonable assistance with security obligations, breach notifications, data-protection impact assessments and prior consultation, taking account of the processing and information available to us.
7. Return, export and deletion
During an active account the subscriber can export workspace information from the Data protection centre. On termination, and subject to lawful retention, we will delete or return subscriber-controlled information at the subscriber’s choice. Residual encrypted backups will expire through the normal backup cycle and remain protected until deletion.
8. Information and audit
We will make available information reasonably necessary to demonstrate compliance with these processor obligations and will permit proportionate audits or inspections where required by UK GDPR. Audits must protect other customers, security and confidentiality, avoid unnecessary disruption, and ordinarily use existing independent evidence before requiring an on-site inspection.
9. Controller responsibilities
The subscriber is responsible for providing lawful instructions, identifying its lawful bases, giving required privacy information, respecting individual rights, limiting access, entering accurate information and avoiding unnecessary or unlawful personal information.
10. Contact
Data-protection questions and requests should be sent to info@aizynegroup.com.