Gardeners Barkingside Privacy Policy

This Privacy Policy explains how Gardeners Barkingside collects, uses, stores and protects personal data relating to our customers in the Barkingside area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018.

This Privacy Policy applies to all Gardeners Barkingside customers and prospective customers within our service area, including individuals making enquiries, booking services, or otherwise interacting with us in relation to our gardening services.

Data Controller

Gardeners Barkingside acts as the data controller in relation to the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection law.

Personal Data We Collect

We only collect personal data that is necessary for the provision and management of our gardening services. The types of personal data we may collect include:

Identification and contact details, such as name and preferred contact method. Service and property details, such as service address, garden layout notes, access instructions for the property, and details regarding requested services. Booking and transaction information, such as dates and times of appointments, records of services provided, and payment-related information, excluding full payment card details which are handled by our payment processors. Communication records, such as enquiries, feedback, complaints, and any other correspondence you have with us by any communication channel. Marketing preferences, such as your choices regarding receiving service updates or promotional information.

We may collect this information directly from you when you contact us, book a service, or communicate with us, and indirectly through our service providers where this is necessary to process payments or manage bookings.

Lawful Basis for Processing

We rely on the following lawful bases under the UK GDPR for processing your personal data:

Contract: We process personal data where it is necessary to enter into and perform a contract with you for gardening services, including taking pre-contractual steps at your request, arranging visits, and delivering the agreed services.

Legal obligation: We may process certain information where necessary to comply with legal and regulatory obligations, such as record-keeping and tax requirements.

Legitimate interests: We may process personal data where it is necessary for our legitimate interests and these are not overridden by your interests or fundamental rights and freedoms. This may include managing and improving our services, handling queries and complaints, ensuring the security of our staff and equipment at your property, and maintaining business records.

Consent: In some circumstances, we may rely on your consent, for example for certain types of marketing communications where consent is required. Where we rely on consent, you are free to withdraw it at any time, and we will explain how to do so at the time we obtain your consent.

How We Use Your Personal Data

We may use your personal data for the following purposes:

To respond to enquiries and provide quotations for our services. To schedule, manage, and deliver gardening services at your property. To take and manage payments, issue invoices, and keep financial records. To communicate with you regarding appointments, changes to services, and important service-related information. To improve our services, for example by analysing feedback or reviewing complaints. To send you service updates and, where permitted, marketing information about our services and offers. To comply with legal requirements, resolve disputes, and enforce our contractual terms.

Data Retention

We keep personal data only for as long as is necessary for the purposes for which it was collected, or as required by law.

In general, we apply the following retention guidelines:

Customer and service records are typically kept for the duration of our relationship with you and for a reasonable period afterwards to handle queries, disputes, or potential legal claims. Financial and transaction records are kept for the period required by tax and accounting laws. Marketing-related information is kept for as long as you remain subscribed or until you opt out or withdraw your consent, after which we retain only minimal information needed to respect your preferences.

When personal data is no longer required, we will delete it or anonymise it so that it can no longer be associated with you.

Data Processors and Third Parties

We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are only permitted to process your data based on our written instructions and in compliance with data protection law. They are not allowed to use your data for their own purposes.

Categories of processors and third parties may include:

Payment processing providers that securely handle payments for our services. IT and cloud service providers that support our booking, scheduling, and data storage systems. Administrative support providers that assist us with record-keeping and communication services. Professional advisers such as accountants or legal advisers where necessary for our business operations and compliance.

Whenever we use processors, we put in place appropriate contracts and safeguards to ensure that your personal data is protected.

We do not sell your personal data to third parties. We only disclose personal data to other third parties where required or permitted by law, such as to law enforcement authorities, regulatory bodies, or courts, if necessary to comply with legal obligations or to protect our rights.

International Transfers

Where our service providers are located outside the United Kingdom or the European Economic Area, or where they use facilities located in other countries, your personal data may be transferred internationally. In such cases, we ensure that appropriate safeguards are in place to protect your personal data, such as using standard contractual clauses or equivalent legal mechanisms recognised under data protection law.

Data Security

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

These measures may include access controls, secure storage methods, regular review of our procedures, and limiting access to personal data to those staff and processors who need it for the performance of their duties. While we take reasonable steps to protect your data, no system can be guaranteed to be completely secure.

Your Data Protection Rights

As a data subject, you have several rights regarding your personal data under the UK GDPR and related data protection laws. These include:

Right of access: You have the right to request confirmation as to whether we process your personal data and, if so, to receive a copy of that data and certain additional information.

Right to rectification: You have the right to ask us to correct inaccurate personal data about you and to complete incomplete data.

Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.

Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in specific situations, for example while we investigate a concern you have raised about its accuracy.

Right to data portability: In some situations, you may have the right to receive the personal data you provided to us in a structured, commonly used and machine-readable format, and to request that we transmit that data to another controller where technically feasible.

Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including for direct marketing. If you object to direct marketing, we will stop processing your data for that purpose.

Right to withdraw consent: Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

You also have the right to lodge a complaint with the Information Commissioner's Office if you are concerned about how we handle your personal data. We encourage you to contact us first so that we can address any concerns directly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any updates will take effect from the date of publication. We recommend that you review this Privacy Policy periodically to stay informed about how we process personal data.

By continuing to use Gardeners Barkingside services after any changes to this Privacy Policy, you acknowledge that you have read and understood the updated terms.