Privacy Policy - Gardeners South Tottenham

Gardeners South Tottenham is committed to protecting the privacy and personal data of all customers in the South Tottenham area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when we provide gardening services to residential and commercial customers. It applies to all Gardeners South Tottenham customers in the area, including people who enquire about our services, request a quote, book a visit, or receive ongoing garden maintenance.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is designed to be clear, transparent, and easy to understand, while setting out the rights available to you as a data subject.

1. Information We Collect

We only collect personal data that is necessary to provide our gardening services, manage bookings, communicate with customers, and meet legal or business obligations. The information we may collect includes:

Identity information such as your name or business name.
Contact details including address, email address, and telephone number.
Service information such as your gardening requirements, property access details, and preferred appointment times.
Billing and payment data where needed to issue invoices, record payments, or manage outstanding balances.
Communication records including enquiries, service updates, complaints, feedback, and correspondence.
Site and access notes that help us carry out work safely and efficiently.
Technical data in limited cases, such as basic device or browser information if you contact us through an online form or digital communication system.

We generally collect data directly from you when you request a quote, make a booking, communicate with us, or enter into a service agreement. In some cases, we may receive information from third parties such as property managers, landlords, estate agents, or payment providers where this is necessary for service delivery.

2. How We Use Your Personal Data

We use personal data only for legitimate business and service purposes. These may include:

responding to enquiries and providing quotes;
setting up and managing customer bookings;
delivering gardening services at the correct property;
handling invoices, receipts, and payment processing;
maintaining service records and scheduling repeat visits;
contacting you about changes, delays, or service-related issues;
addressing complaints and resolving disputes;
meeting legal, accounting, and tax obligations;
protecting our business, staff, and customers from misuse, fraud, or unlawful activity.

We do not sell personal data. We also do not use customer information for unrelated purposes that would be unexpected or incompatible with the reason it was collected.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Gardeners South Tottenham relies on the following lawful bases where appropriate:

Performance of a Contract

We process personal data when it is necessary to provide a service you have requested, prepare a quote, carry out garden work, manage scheduling, or handle payment for services. This includes using your name, address, and contact details to deliver the agreed service.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and interests do not override those interests. Examples include maintaining service records, improving customer service, preventing fraud, managing operational efficiency, and protecting our business against claims.

Legal Obligation

Some information must be retained or processed to comply with legal duties, including tax, accounting, insurance, and record-keeping requirements.

Consent

Where consent is the most appropriate basis, for example for certain optional communications, we will ask for it clearly. You may withdraw consent at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

4. Sharing Your Data and Processors

We may share personal data with trusted third parties, but only where necessary and only to the extent required to deliver our services or manage our business. These parties act as processors or independent data controllers depending on the situation.

Examples of processors and service providers may include:

Accounting and bookkeeping providers used for invoicing, payment records, and financial administration.
IT and cloud storage providers that support data storage, communication systems, and document management.
Payment service providers that process card or bank-related transactions.
Customer management tools used for booking, scheduling, and service notes.
Professional advisers such as accountants, insurers, or legal advisers where required.

We require processors to protect personal data, to use it only on our instructions, and to maintain appropriate security measures. Where data is shared with independent third parties, such as tax authorities, banks, or insurers, they are responsible for their own privacy practices.

We do not intentionally transfer personal data outside the UK unless a service provider requires it and suitable safeguards are in place. If such a transfer occurs, we ensure it complies with applicable data protection law.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, and to meet legal, accounting, or operational requirements. Retention periods depend on the type of data and the reason for holding it.

Customer service records are kept for the duration of the relationship and for a reasonable period afterwards in case of follow-up queries or disputes.
Invoice and payment records are retained for the period required by tax and accounting laws.
Communication records may be stored for customer service, complaint handling, and business protection purposes.
Job-related site notes are retained only as long as they remain useful for service delivery and safety.

When data is no longer needed, it will be deleted, anonymised, or securely destroyed. We review retention practices regularly to ensure that information is not held longer than necessary.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, limited staff access, and careful handling of records.

Although no system can be guaranteed completely secure, we work to keep personal information safe and to reduce risks wherever possible. If a personal data breach occurs and we are legally required to do so, we will take appropriate action, which may include notifying affected individuals and reporting the matter to the relevant authority.

7. Your Rights

As a customer or data subject, you have a number of rights under data protection law. These include:

Right of access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete data.
Right to erasure - in some situations, you can ask us to delete your data.
Right to restrict processing - you can ask us to limit how your data is used in certain circumstances.
Right to object - you can object to processing based on legitimate interests or direct marketing.
Right to data portability - where applicable, you can request a copy of your data in a structured, commonly used format.
Right to withdraw consent - if processing is based on consent, you can withdraw it at any time.

Please note that these rights are not absolute, and some requests may be limited by legal obligations, contractual needs, or our legitimate reasons for retaining data.

8. How to Exercise Your Rights

If you wish to exercise any of your rights, you should provide enough information for us to identify you and understand your request. We will respond within the timeframe required by law, unless your request is complex or we need more information.

You are not required to provide a reason for most rights requests. However, helping us understand your concern can make it easier to respond accurately and efficiently.

9. Children’s Data

Our gardening services are not directed at children, and we do not knowingly collect personal data from children unless it is provided by a parent, guardian, or authorised adult in connection with a property or service arrangement. If we become aware that we have collected such data inappropriately, we will take steps to delete it where required.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal changes, business changes, or improvements in how we handle personal data. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review it periodically so they remain informed about how their data is used.

11. Our Commitment to Transparency

We believe privacy should be handled in a straightforward and respectful way. Gardeners South Tottenham only uses personal information where it is necessary, fair, and lawful. Our aim is to provide reliable garden services while keeping customer information secure, limited, and properly managed.

By using our services, requesting a quote, or continuing a customer relationship with Gardeners South Tottenham, you acknowledge that your personal data may be processed as described in this Privacy Policy.