Privacy Policy - Gardeners Collier Row

Gardeners Collier Row is committed to protecting the privacy and personal data of all customers in the area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when providing gardening services to customers in Collier Row and surrounding local areas. It applies to all Gardeners Collier Row customers in area, whether the service is a one-off appointment, recurring maintenance, or a bespoke gardening project.

1. Who We Are

For the purposes of data protection law, Gardeners Collier Row acts as the data controller for the personal data we process in connection with our services. This means we decide how and why your personal information is used. We process data in accordance with the UK GDPR, the Data Protection Act 2018, and other applicable privacy laws.

This policy is designed to give clear information about our privacy practices in plain language.

2. Information We Collect

We only collect personal data that is relevant and necessary for providing gardening services and managing our relationship with customers. The types of information we may collect include:

Identity details such as your name and title.
Contact details such as address, phone number, and email address.
Service details such as the type of gardening work requested, property access notes, preferences, and scheduling information.
Billing and payment information such as invoice records and payment status.
Communication records such as emails, messages, quotations, feedback, and service-related correspondence.
Technical data in limited cases, such as IP-related information if you interact with our digital systems, where applicable.
Special category data only if you voluntarily provide it and only where it is necessary, for example information about access needs or health-related considerations that affect service delivery.

We do not intentionally collect more information than we need. We also do not seek to gather unnecessary personal details about you.

How We Collect Information

We may collect personal data directly from you when you request a quote, book a service, make an enquiry, pay for services, or communicate with us. In some cases, we may receive data from third parties such as payment providers, subcontracted processors, or referral sources where you have agreed or where it is lawful to do so.

3. How We Use Your Data

Gardeners Collier Row uses personal data for the following purposes:

To provide gardening services and manage appointments.
To issue quotations, invoices, and receipts.
To communicate with you about bookings, service updates, or queries.
To maintain internal records and service history.
To improve the quality and reliability of our services.
To comply with legal and tax obligations.
To handle complaints, disputes, or insurance matters.
To protect our business, customers, and staff from fraud or misuse.

We do not use your data for unrelated purposes unless we have a lawful basis to do so and it is compatible with the original reason for collection.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Gardeners Collier Row relies on the following bases where appropriate:

Contract – processing is necessary to provide the gardening services you have requested, including quotes, bookings, and payment administration.
Legal obligation – processing is necessary to comply with laws relating to tax, accounting, record keeping, and business regulation.
Legitimate interests – processing is necessary for our legitimate business interests, such as managing customer relationships, improving services, preventing fraud, and maintaining secure operations, provided these interests do not override your rights.
Consent – in limited cases, we may rely on your consent, particularly where special category data is involved or where consent is required by law. You may withdraw consent at any time where it is the lawful basis for processing.

Where we process special category data, we only do so when permitted under data protection law and when a specific condition applies, such as your explicit consent or another legal basis allowed by law.

5. Sharing Your Data and Processors

We may share your personal data with trusted third parties where necessary to run our business and deliver services. These third parties act either as independent controllers or as processors acting on our instructions. Examples may include:

Payment processors who handle card or transfer payments securely.
Accounting or bookkeeping processors who support invoicing and financial records.
IT and cloud service providers who store data, manage email, or support secure business systems.
Customer management or scheduling processors who help organise bookings and service records.
Professional advisers such as legal, tax, or insurance advisers where necessary.
Public authorities where disclosure is required by law or to protect rights, safety, or property.

We require processors to handle personal data securely, to use it only for the agreed purpose, and to apply appropriate confidentiality and data protection safeguards. We do not sell personal data.

6. Data Retention

Gardeners Collier Row keeps personal data only for as long as necessary for the purpose for which it was collected, and no longer than required by law or business need. Retention periods depend on the nature of the information and the reason for processing.

Customer and service records may be kept for the duration of the service relationship and for a reasonable period afterwards.
Financial and tax records are kept for the period required by law.
Communication records may be retained for a period needed to manage enquiries, disputes, or ongoing service history.
Consent-based records are kept until consent is withdrawn or the data is no longer needed.

When personal data is no longer needed, it is securely deleted, anonymised, or destroyed. Retention periods may vary depending on legal, contractual, or operational requirements.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include restricted access, secure storage, password controls, and staff confidentiality obligations. While no system can be guaranteed completely secure, we work to maintain a high standard of protection.

We regularly review our privacy and security practices to keep them appropriate and proportionate.

8. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. Subject to legal limits and exemptions, you may have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data in certain circumstances.
Restrict how we process your data in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability for data you have provided to us where processing is based on consent or contract and carried out by automated means.
Withdraw consent where processing is based on consent.

You also have the right to be informed about how your data is used and, where relevant, to lodge a complaint with the Information Commissioner’s Office if you believe your data protection rights have been infringed.

Exercising Your Rights

To exercise your rights, you may make a request and we will respond within the time limits required by law. We may need to verify your identity before fulfilling certain requests. In some cases, your rights may be limited where the law permits us to retain or continue processing the data.

9. Cookies and Digital Data

If any digital tools are used in connection with our services, limited technical data may be collected to support functionality, security, and service improvement. Where cookies or similar technologies are used, they will only be used in line with applicable law. Any non-essential cookies would require appropriate consent where required.

10. International Transfers

If personal data is transferred outside the UK, we will ensure appropriate safeguards are in place to protect it in accordance with data protection law. This may include approved contractual protections or transfers to countries recognised as providing an adequate level of protection.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. The latest version will apply to all Gardeners Collier Row customers in area from the date it is published or otherwise communicated.

12. Summary of Our Privacy Commitments

We collect only the information needed to provide gardening services.
We use personal data fairly, lawfully, and transparently.
We rely on lawful bases such as contract, legal obligation, legitimate interests, and consent where appropriate.
We share data only with trusted processors or where required by law.
We keep data only for as long as necessary and dispose of it securely.
We respect your rights and take privacy seriously in all customer interactions.

Gardeners Collier Row values trust, confidentiality, and responsible data handling. By using our services, you acknowledge that we may process personal data as described in this Privacy Policy and in accordance with applicable data protection laws.