Privacy Policy - Gardeners Barkingside

Gardeners Barkingside is committed to protecting the privacy and personal data of all customers in the Barkingside area. This Privacy Policy explains how personal information is collected, used, stored, shared, and protected when you use our gardening services. It applies to all Gardeners Barkingside customers in the area, whether you contact us for a one-off garden job, recurring maintenance, landscaping support, or related services.

We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We aim to process personal data fairly, lawfully, and transparently. This policy is written to help you understand what data we handle, why we handle it, and what rights you have over it.

1. Information We Collect

We collect only the information needed to provide gardening services efficiently and to manage our business responsibly. The types of data we may collect include:

Identity details such as your name;
Contact details such as address, email address, and phone number;
Service details such as the type of gardening work requested, property access notes, preferred schedules, and service history;
Payment information where required for invoicing and payment processing;
Communication records including messages, enquiries, complaints, and feedback;
Technical information if you use digital forms or online enquiry channels, such as basic device or browser details;
Photographs of gardens or outdoor spaces when needed to assess work, document progress, or confirm completed services.

We do not intentionally collect special category data unless it is strictly necessary and you choose to provide it. If such information is ever shared with us, we will handle it with additional care and only where a lawful basis applies.

2. How We Use Your Data

We use personal data for clear and limited purposes connected to our gardening services. These purposes include:

Responding to enquiries and providing quotes;
Arranging and carrying out gardening services;
Managing bookings, scheduling, and service follow-up;
Issuing invoices and processing payments;
Maintaining service records and customer preferences;
Handling complaints, disputes, and customer support matters;
Improving our services and business operations;
Meeting legal, tax, and accounting obligations.

We will only use your data for purposes that are compatible with the reason it was originally collected. If we need to use it for a new purpose, we will ensure that we have a valid lawful basis.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each use of personal data. Gardeners Barkingside relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. For example, this includes preparing a quote, arranging a visit, completing the service, or sending an invoice.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms. This may include managing customer relationships, improving service quality, keeping secure records, and preventing fraud or misuse.

Legal Obligation

Some records must be kept to meet tax, accounting, insurance, or other legal obligations. In these cases, processing is necessary for compliance with the law.

Consent

Where required, we may rely on your consent, for example for certain optional communications or where you voluntarily provide information that is not necessary for the service. If processing is based on consent, you may withdraw it at any time.

4. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes described in this policy and to comply with legal requirements. Retention periods vary depending on the type of data and the reason for holding it.

In general:

Customer service records are kept while the relationship is active and for a reasonable period afterwards;
Financial and tax records are retained for the period required by law;
Communications and enquiry records are kept for as long as needed to manage the query or resolve any issue;
Photographs and site notes are kept only while relevant to the service or record-keeping purpose.

When personal data is no longer needed, we will securely delete it or anonymise it so that it can no longer identify you.

5. Processors and Data Sharing

We may use trusted third-party service providers, known as processors, to help us run our business. These processors act on our instructions and are required to protect your data. They may include:

Payment service providers;
Accounting and bookkeeping services;
IT support, data storage, and software providers;
Communication or scheduling platforms;
Professional advisers such as legal or financial consultants where necessary.

We share personal data only when necessary and only with parties who need it for a valid business or legal purpose. We do not sell personal data. If data is transferred outside the UK or the European Economic Area, appropriate safeguards will be used to protect it.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and limiting access to data to authorised personnel only.

While no system can be guaranteed to be completely secure, we regularly review our practices to reduce risk and maintain a high standard of protection.

7. Your Rights

As a data subject under UK GDPR, you have important rights over your personal data. Subject to legal conditions and exemptions, you may have the right to:

Access the personal data we hold about you;
Rectification of inaccurate or incomplete data;
Erasure of your data in certain situations;
Restriction of processing in certain circumstances;
Object to processing based on legitimate interests;
Data portability in some cases;
Withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your data has not been handled properly. We encourage customers to raise concerns directly so that we can address them promptly and fairly.

8. Children’s Data

Our gardening services are intended for adults. We do not knowingly collect personal data from children except where it is necessary and authorised by a parent, guardian, or another responsible adult. If we become aware that we have collected data from a child without appropriate permission, we will take steps to remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or the way we process personal data. Any updates will take effect when published in the revised version. We encourage customers to review this policy periodically.

10. Summary of Our Privacy Commitments

Gardeners Barkingside respects your privacy and is committed to responsible data handling. We collect only the data we need, use it for clear and lawful purposes, keep it only as long as necessary, and share it only with trusted processors or where required by law. We also recognise and support your rights over your personal information.

In short, we aim to process data in a way that is lawful, fair, transparent, and secure for all Gardeners Barkingside customers in the area.