Privacy Policy

Last updated: June 2026

LawnHQ is operated by Korlo Ltd (Company Number 17280649), trading as LawnHQ.

Our ICO registration number is: [Pending, ICO registration in progress]

1. Who We Are

LawnHQ is a UK-based lawn care management software platform. We are the Data Controller for personal data collected directly from you (our Operators and website visitors). Where you use LawnHQ to manage your own customers data, we act as a Data Processor on your behalf.

2. What Personal Data We Collect

When you register or use the Service, we collect: name, email address, business name, phone number, business address, billing address (payment card details are processed by Stripe and not stored by us), business configuration data, and communications you send to us.

When you use LawnHQ or visit our website, we automatically collect: usage data, technical data (IP address, browser type, device), and log data.

As an Operator, you may enter personal data about your End Customers into the platform. For this data, you are the Data Controller and Korlo Ltd (trading as LawnHQ) acts as the Data Processor.

3. How We Use Your Personal Data

We use your data to: provide and operate the Service (contract), process your subscription payments (contract), send essential service communications (contract), improve the platform (legitimate interests), prevent fraud (legitimate interests), comply with legal obligations, and send marketing communications with opt-out (legitimate interests).

4. What We Do Not Do With Your Data

We will never sell your personal data, use your identifiable data for third-party advertising, or share your data with third parties for their own marketing.

5. Where We Store Your Data

Your data is processed in full compliance with UK GDPR and the UK Data Protection Act 2018. All data at rest is encrypted. All data in transit is encrypted using TLS.

6. How Long We Keep Your Data

Active account data is retained while your account is active. Data following cancellation is retained for 30 days, then permanently deleted. Accounts suspended for non-payment that do not resolve are retained for 6 months, then permanently deleted. Billing records are retained for 7 years as required by UK tax law. Security and audit logs are retained for 12 months.

7. Your Rights Under UK GDPR

You have the right to: access the personal data we hold about you, correct inaccurate data, request erasure of your data, restrict how we process your data, receive your data in a portable format, object to processing based on legitimate interests, and rights in relation to automated decision-making.

To exercise any of these rights, contact privacy@lawnhq.co.uk. We will respond within one month.

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Requesting Data Deletion

To request deletion of your account and all associated data, email privacy@lawnhq.co.uk with the subject line "Data Deletion Request". Include your account email and business name. We will complete deletion within 30 days and confirm in writing.

9. End Customer Data

When you use LawnHQ to manage your customers data, you are the Data Controller and we are your Data Processor. You are responsible for having a lawful basis to process your customers data, providing them with appropriate privacy notices, and honouring their data subject rights.

We process End Customer data only on your instructions, maintain appropriate security measures, notify you of any security incidents, and assist you with data subject rights requests.

10. Third-Party Service Providers

We work with the following trusted providers:

Stripe: payment processing
Supabase: database hosting
Resend: transactional email delivery

All providers are bound by data processing agreements and are not permitted to use your data for their own purposes.

11. Cookies

Our website uses strictly necessary cookies required for the platform to function, and privacy-first analytics cookies to understand how visitors use the site. We do not use third-party advertising cookies. You can manage cookie preferences through our cookie settings banner.

12. Security

Our security measures include: TLS 1.2 or higher for all data in transit, encryption at rest, access controls restricting production data to authorised personnel, regular security reviews, and incident response procedures.

To report a security vulnerability: security@lawnhq.co.uk

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email and by a notice within the Service.

14. Contact

For privacy questions: privacy@lawnhq.co.uk

ICO: ico.org.uk | 0303 123 1113