Privacy Policy - Gardeners Golders Green

Gardeners Golders Green is committed to protecting the privacy of every customer, client, and website visitor who interacts with our services. This Privacy Policy explains how personal data is collected, used, stored, shared, and protected when you use our gardening services. It applies to all Gardeners Golders Green customers in the area, including private households, landlords, tenants, businesses, and anyone who requests or receives our gardening services.

We aim to handle personal data lawfully, fairly, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy also explains your rights and the choices available to you regarding your information.

1. Information We Collect

We may collect and process different types of personal data depending on how you interact with us and which services you request. The information we collect may include:

Identity details such as your name and title.
Contact details such as your address, email address, and phone number.
Service information including details about the gardens or outdoor spaces we are asked to maintain, your preferences, service history, and instructions.
Payment and billing details where necessary for invoicing and payment processing.
Communication records such as emails, notes from calls, messages, and feedback.
Technical data if you interact with digital services, including device information, browser type, and usage information.

We do not seek to collect special category data unless it is necessary and you have provided it voluntarily, or unless a lawful reason permits us to do so. If such information is ever provided accidentally, we will handle it carefully and only for a legitimate purpose.

2. How We Use Personal Data

Gardeners Golders Green uses personal data to provide and manage services effectively. We may use your information for the following purposes:

To respond to enquiries and provide quotations.
To deliver gardening services and manage appointments.
To communicate service updates, scheduling changes, and customer instructions.
To issue invoices, process payments, and keep financial records.
To maintain service quality, handle complaints, and resolve disputes.
To meet legal, tax, accounting, and regulatory obligations.
To improve our services, training, planning, and internal record-keeping.

We will only use your personal data in ways that are compatible with the original purpose for which it was collected or where we have another lawful basis to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a valid lawful basis to process personal data. Gardeners Golders Green relies on the following lawful bases:

Contract

We process your information when it is necessary to enter into or perform a contract with you. This includes arranging services, carrying out garden work, managing bookings, and handling payments.

Legal Obligation

We process certain data to comply with legal obligations, including record-keeping for tax, accounting, business, and regulatory purposes.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided your rights do not override those interests. This can include improving our services, managing operations, preventing fraud, and keeping secure business records.

Consent

Where required, we may rely on your consent, for example for certain optional communications. If processing is based on consent, you may withdraw it at any time.

4. Data Sharing and Processors

We do not sell personal data. However, we may share information with trusted third parties when necessary to provide our services or run our business responsibly.

These third parties may act as processors or independent controllers depending on the service they provide. Processors may include:

Payment providers who handle card or online payments.
Accounting and bookkeeping services that support financial administration.
IT and cloud storage providers that help us securely store and manage records.
Communication service providers that assist with email, phone, or messaging systems.
Waste disposal or specialist contractors where a job requires additional support and your details are necessary to complete the work.

Whenever we use processors, we take steps to ensure they process personal data securely, confidentially, and only on our instructions where applicable. We require appropriate data protection commitments and security measures from those providers.

We may also disclose information if required by law, a court order, or a lawful request from a public authority.

5. International Transfers

Some processors or service providers may store or access data outside the United Kingdom. If this happens, we will ensure appropriate safeguards are in place so that your information remains protected to a standard consistent with UK data protection law.

6. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods may vary depending on the type of data and the reason for holding it.

Customer and service records are generally kept for the period needed to manage the relationship and any follow-up work.
Financial and tax records are retained for the period required by law and accounting standards.
Communication records may be kept for a reasonable time to handle queries, disputes, or service history.
Technical and security records are retained only as long as necessary for operational and protection purposes.

When personal data is no longer needed, we will delete it or anonymise it securely.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and staff confidentiality practices.

While no system can be guaranteed completely secure, we take reasonable and proportionate steps to safeguard the information we hold.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply in different circumstances and may be subject to legal limits. Your rights include:

Right of access – you can ask for a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – you can ask us to delete your data where it is no longer needed or where deletion is otherwise appropriate.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can ask for certain data in a structured, commonly used format.
Right to withdraw consent – where consent is the basis for processing, you may withdraw it at any time.

You also have the right to raise a concern with the Information Commissioner's Office (ICO) if you believe your data has been mishandled.

9. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children unless it is provided by an adult customer as part of a service arrangement and only where necessary.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or internal practices. The most current version will apply to all Gardeners Golders Green customers in the area. We encourage customers to review this policy periodically so they remain informed about how personal data is handled.

Gardeners Golders Green values trust, confidentiality, and responsible data handling. We process personal information only where necessary, keep it secure, and respect your rights at every stage of our service relationship.