Privacy Policy - Gardeners Woodford

Effective date: This Privacy Policy applies to all Gardeners Woodford customers in the area and explains how personal data is collected, used, stored, shared, and protected when services are requested or provided.

We are committed to handling personal information in a lawful, fair, and transparent way. This policy is written to reflect the requirements of the UK GDPR and the Data Protection Act 2018. It applies to anyone who contacts us, requests a quotation, books a service, receives a service, or otherwise engages with Gardeners Woodford in the area.

1. Who We Are

Gardeners Woodford provides gardening and related outdoor maintenance services. In the context of data protection law, we act as a data controller for the personal information we collect and use in connection with our services. This means we determine the purposes and means of processing personal data.

This policy covers the personal information of customers, prospective customers, service recipients, and other individuals whose data we may collect in the course of providing our services.

2. Personal Data We Collect

We only collect personal data that is necessary for delivering our services, managing customer relationships, and meeting legal obligations. Depending on how you interact with us, we may collect:

Identity information such as your name and, where relevant, business name.
Contact details such as address, email address, and telephone number.
Service information such as details about your garden, requested work, preferences, instructions, and scheduling requirements.
Payment information such as billing records and transaction references.
Communication records such as enquiries, feedback, complaints, and messages exchanged with us.
Technical information where relevant, such as limited device or usage data generated when you interact with electronic communications.

We do not seek to collect special category data unless it is strictly necessary and you have provided it voluntarily or another lawful condition applies. If such information is ever provided, it will be handled with extra care and only for the specific purpose for which it was shared.

3. How We Collect Data

We may collect personal information directly from you when you:

request a quotation or service;
book or rearrange appointments;
contact us by phone, email, or message;
provide instructions relating to your property or gardening needs;
make a payment or request an invoice;
submit feedback or raise a concern.

We may also receive information from third parties where necessary for service delivery, such as a property owner, tenant, agent, or another person authorised to act on your behalf. In limited cases, we may also obtain information from publicly available sources when required to verify details or manage our business operations.

4. Lawful Basis for Processing

We only process personal data when we have a lawful basis under data protection law. The main lawful bases we rely on are:

Contract

We process personal data where it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes arranging visits, carrying out gardening work, managing bookings, and handling billing.

Legitimate Interests

We may process data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. This may include improving our services, responding to enquiries, keeping appropriate business records, preventing misuse, and managing service quality.

Legal Obligation

We may process personal data where required to comply with legal obligations, such as accounting, tax, record-keeping, or responding to lawful requests from authorities.

Consent

In some situations, we may rely on your consent, for example where you choose to receive certain optional communications or where we need permission for a specific use of your information. Where consent is used, you can withdraw it at any time.

We do not rely on consent where another lawful basis is more appropriate. Any processing is limited to what is necessary for the stated purpose.

5. How We Use Your Data

We use personal information for the following purposes:

to provide quotes and assess service requirements;
to deliver gardening and related services;
to manage appointments and customer administration;
to communicate with you about service updates or changes;
to process payments and issue invoices;
to keep accurate business and financial records;
to handle queries, complaints, and service-related issues;
to maintain the security, quality, and efficiency of our operations;
to meet legal, regulatory, and tax obligations.

We aim to keep processing limited, relevant, and proportionate at all times.

6. Data Sharing and Processors

We may share personal data with trusted third parties where necessary for the running of our services or where required by law. When a third party processes personal data on our behalf, they act as a processor and may only use the data according to our instructions.

Examples of processors or service providers may include:

IT and cloud service providers used for storing business records, emails, or administrative files;
payment service providers used to manage transactions;
accounting or bookkeeping providers used for financial administration;
communication providers used for sending messages or managing customer correspondence;
professional advisers such as accountants or legal advisers where necessary.

We require processors to implement appropriate security measures and to handle personal data only for specified purposes. We do not sell personal data.

In limited circumstances, we may also disclose personal data to public authorities, regulators, or law enforcement if legally required.

7. International Transfers

Where personal data is stored or processed outside the UK, we take steps to ensure it is protected to a standard that is consistent with UK data protection law. This may include using approved transfer mechanisms and assessing the safeguards used by service providers.

8. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including for legal, accounting, and reporting requirements. Retention periods depend on the nature of the data and the reason it was collected.

As a general approach:

customer and service records are kept for the duration of the customer relationship and for a reasonable period afterwards;
financial and tax records are retained for the period required by law;
communications and enquiry records are kept only as long as needed to deal with the matter and maintain appropriate records;
unused or unnecessary information is securely deleted or anonymised when it is no longer needed.

Where data is no longer required, we take reasonable steps to securely dispose of it.

9. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and limiting access to data to those who need it for legitimate business purposes.

While no system can be guaranteed completely secure, we take data security seriously and review our practices to help protect your information.

10. Your Rights

Under UK GDPR, you may have a number of rights in relation to your personal data. These may include:

The right of access to request a copy of the personal data we hold about you;
The right to rectification to ask us to correct inaccurate or incomplete data;
The right to erasure to ask us to delete your data in certain circumstances;
The right to restrict processing to limit how we use your data in certain situations;
The right to object to processing based on legitimate interests or direct marketing;
The right to data portability in some cases, allowing you to receive data you provided to us in a usable format;
The right to withdraw consent where we rely on consent as a lawful basis.

If you exercise any of these rights, we may need to verify your identity before responding. Some rights may be subject to legal or operational limits, and we will explain if that applies.

11. Complaints and Concerns

If you have concerns about how your personal data is handled, we encourage you to raise the issue so it can be reviewed. We aim to deal with data protection matters fairly and promptly.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed. We recommend contacting us first so we can try to resolve the matter.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulation, business practice, or the way we provide services. The latest version will apply from the date it is published or otherwise communicated.

Summary: Gardeners Woodford is committed to protecting your personal data, using it lawfully, keeping it secure, and respecting your rights under UK GDPR.

This policy is intended to be clear, fair, and transparent for all customers in the area.