Privacy Policy - Gardeners Hadley Wood

This Privacy Policy explains how Gardeners Hadley Wood collects, uses, stores, and protects personal data in connection with our gardening services. It applies to all Gardeners Hadley Wood customers in the area, including current, former, and prospective customers, as well as individuals who contact us on behalf of a household, property, business, or managing agent. We are committed to handling personal information in a fair, transparent, and lawful manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We aim to keep this policy clear and accessible. Please read it carefully to understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your personal data.

1. Who We Are

Gardeners Hadley Wood provides gardening and outdoor maintenance services to customers in Hadley Wood and the surrounding area. In the context of data protection law, we act as the data controller for the personal data we collect and determine how and why it is used.

We only collect and process personal information that is necessary for operating our services, managing customer relationships, meeting legal obligations, and improving service quality. We do not sell personal data.

2. Personal Data We Collect

We may collect different types of personal data depending on how you interact with us and the services you request. This may include:

Identity details such as your name and, where relevant, the name of a property owner, tenant, or representative.
Contact details such as telephone number, email address, billing address, and service address.
Service information including details about requested gardening work, property preferences, access notes, scheduling information, and service history.
Payment and transaction data such as payment status, invoices, receipts, and records of services purchased. We do not keep unnecessary financial information.
Communication records including enquiries, messages, feedback, complaints, and correspondence relating to quotes or bookings.
Technical data if you contact us electronically, which may include basic device or usage information required to operate our systems securely.
Special instructions relating to safety, access, pets, or working conditions at a property, where needed to carry out the service properly.

We generally do not seek to collect sensitive special category data. If such information is provided to us incidentally, we will only process it where necessary and in accordance with applicable law.

3. How We Collect Data

We may collect personal data in several ways:

Directly from you when you request a service, ask for a quote, make a booking, or communicate with us.
From a person acting on your behalf, such as a family member, landlord, tenant, property manager, or business contact.
Through records generated during the provision of our gardening services, such as job notes, invoice records, and service updates.
From limited third-party sources where necessary to complete a service, verify details, or manage an account relationship.

We collect only what is relevant and necessary for the service we provide.

4. Lawful Basis for Processing

We process personal data only where we have a lawful basis under data protection law. Depending on the situation, we may rely on one or more of the following:

Contract — where processing is necessary to provide a quote, arrange services, fulfil an agreement, manage appointments, or handle billing.
Legitimate interests — where processing is necessary for the effective running of our business, improving customer service, managing enquiries, keeping appropriate records, and protecting against misuse, provided these interests are not overridden by your rights.
Legal obligation — where we need to retain or disclose data to comply with tax, accounting, insurance, or other legal requirements.
Consent — where we ask for your consent for specific optional uses of data. If consent is used, you may withdraw it at any time.

When we rely on legitimate interests, we consider the impact on your privacy and take steps to ensure your interests are protected.

5. How We Use Personal Data

We may use personal information to:

respond to enquiries and provide quotes;
arrange and deliver gardening services;
manage appointments, visits, and service updates;
issue invoices and record payments;
keep service records and maintain quality standards;
handle complaints, disputes, and customer support matters;
meet legal, accounting, and regulatory obligations;
protect against fraud, misuse, and security incidents;
improve our services, administration, and customer experience.

We will not use your data for purposes that are incompatible with the original reason it was collected unless we have a lawful basis to do so.

6. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors or, in some cases, as separate controllers. These parties only process data on our instructions or where required by law. Typical processors may include:

IT and hosting providers that support our communications, data storage, or business systems.
Accounting or bookkeeping providers that help manage invoices, records, and financial administration.
Payment service providers where payments are processed securely through external systems.
Scheduling or customer management tools used to organise work and maintain service records.
Professional advisers such as lawyers, insurers, or accountants where necessary for advice or compliance.
Public authorities where disclosure is required by law or to protect our legal rights.

We require processors to handle personal data securely, confidentially, and only for the purposes we specify. Where data is transferred outside the UK, we will take appropriate safeguards to protect it.

7. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, including for legal, accounting, insurance, and reporting requirements. Retention periods vary depending on the type of record and the reason for holding it.

Enquiry records are kept for a reasonable period to manage customer requests and follow-up communication.
Service and account records are retained for the duration of the relationship and for an appropriate period afterwards.
Invoice and tax records are retained for the period required by law.
Complaint or dispute records may be kept longer where needed to resolve issues or defend legal claims.

When data is no longer needed, we will delete it securely or anonymise it where appropriate.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and limiting access to personal information to those who need it for legitimate business purposes.

Although no system can be guaranteed completely secure, we take reasonable steps to protect the information we hold.

9. Your Rights

Under data protection law, you have certain rights in relation to your personal data. These rights may apply in full or in part depending on the circumstances.

Right of access — you may request a copy of the personal data we hold about you.
Right to rectification — you may ask us to correct inaccurate or incomplete data.
Right to erasure — you may request deletion of your data in certain cases.
Right to restriction — you may ask us to limit how we use your data in specific situations.
Right to object — you may object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability — you may request that certain information be provided in a structured, commonly used format.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with data protection law. We may need to verify your identity before acting on your request.

10. Children’s Data

Our services are generally intended for adult customers and property contacts. We do not knowingly collect personal data from children unless it is incidentally provided in the course of a service request and is necessary for safety, access, or household administration.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is made available. We encourage customers to review the policy periodically to stay informed about how we process personal data.

Summary of Our Commitment

Gardeners Hadley Wood is committed to using personal data responsibly, transparently, and only where necessary. We collect only the information needed to provide and manage our gardening services, retain it for appropriate periods, share it only with trusted processors or where required by law, and respect the rights of every customer in the area. Our approach is designed to support reliable service while protecting privacy at every stage.

This Privacy Policy applies to all Gardeners Hadley Wood customers in the area and is intended to meet GDPR standards for lawful, fair, and transparent processing.