Privacy Policy
Gardeners South Tottenham Privacy Policy
This Privacy Policy explains how Gardeners South Tottenham collects, uses, stores and protects personal data relating to customers and prospective customers in the South Tottenham area. It also sets out the lawful bases we rely on under the UK General Data Protection Regulation and your rights in relation to your personal data.
This Privacy Policy applies to all Gardeners South Tottenham customers, past, present and prospective, whose personal data we process in connection with our gardening, maintenance and related services within the South Tottenham area.
Who we are and scope of this policy
Gardeners South Tottenham is a local gardening service provider offering garden maintenance, landscaping and related services to customers in the South Tottenham area. For the purposes of data protection law, Gardeners South Tottenham is the controller of the personal data described in this Privacy Policy, meaning we decide how and why your data is processed.
This Privacy Policy covers personal data collected through direct contact with you, whether in person, by post, or through remote communication channels, as well as information generated when we deliver our services at your property.
Personal data we collect
We may collect and process the following categories of personal data about you:
Identification and contact details, such as your name, postal address, service address, and any other details you choose to provide so that we can identify and communicate with you.
Service and contract details, such as records of the gardening or maintenance services you request, quotes and estimates issued to you, bookings and appointments, notes about your garden or property relevant to providing our services, and any associated instructions or preferences.
Financial and payment information, such as transaction records and payment history related to services you receive from us. We do not store full card details if you pay by card through third party payment processors.
Communication records, such as inquiries, complaints, feedback and any correspondence you have with us. This includes the content of messages we receive and any responses or follow up actions we record.
Technical and usage data, where applicable, such as basic technical information generated by your use of any online tools or digital communication channels we operate, for example basic device or browser details, date and time of contact and interaction logs.
How we use your personal data and lawful basis
We use your personal data only where we have a lawful basis under data protection law. Depending on the circumstances, we may rely on the following lawful bases:
Contract: We process personal data to enter into and perform a contract with you, or to take steps at your request before entering into a contract. This includes providing quotes, booking services, arranging site visits, delivering gardening services, issuing invoices and managing ongoing maintenance arrangements.
Legal obligation: We may process certain information where we need to comply with legal or regulatory obligations, such as maintaining appropriate business records for tax and accounting purposes.
Legitimate interests: We may process personal data where it is necessary for our legitimate business interests and these interests are not overridden by your rights and freedoms. This can include managing and improving our services, responding to inquiries and complaints, maintaining security and preventing fraud, keeping limited records of past work for reference, and operating our internal administration and business management.
Consent: In limited cases, we may rely on your consent, for example where you choose to receive direct marketing updates about our services by specific communication channels. You can withdraw your consent at any time by contacting us using your usual contact route.
Data retention and storage
We keep personal data only for as long as is reasonably necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.
In general, we will retain customer and contract records for a period that reflects the statutory limitation periods and our legitimate business needs. This usually means keeping core contract and invoice information for a number of years after the end of your relationship with us, to allow us to respond to queries and meet our legal obligations.
Where personal data is collected for marketing purposes based on your consent, we will retain that data until you opt out or withdraw consent, or until we determine that it is no longer needed for the purpose for which it was collected.
When personal data is no longer required, we will take reasonable steps to delete, anonymise or securely destroy it.
Data processors and third party recipients
We may share your personal data with selected third parties who process data on our behalf. These organisations act as processors and are only permitted to use your personal data in accordance with our instructions and for the purposes we specify.
Examples of such processors may include providers of business administration tools, accounting and invoicing services, payment processing services, cloud storage and backup services, and information technology support. Where we use such processors, we take reasonable steps to ensure they provide appropriate safeguards and that your personal data is protected.
We may also share certain personal data with other third parties where required by law, such as regulatory or government authorities, or where necessary to establish, exercise or defend legal claims.
We do not sell your personal data to third parties.
International transfers
Where we use service providers located outside the United Kingdom or where data may be stored or accessed in other countries, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection law. This may include using standard contractual clauses or ensuring that the destination country has an adequate level of data protection as determined by relevant authorities.
Your rights under data protection law
Under the UK General Data Protection Regulation and related data protection laws, you have a number of rights in relation to your personal data. These rights are subject to certain conditions and exemptions, but in general include the following:
Right of access: You have the right to obtain confirmation as to whether or not we process your personal data and, if we do, to receive a copy of that data together with certain related information.
Right to rectification: You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or updated.
Right to erasure: In certain circumstances, you may have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you have withdrawn consent and there is no other legal basis for processing.
Right to restriction of processing: You may have the right to request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of the data or consider an objection you have raised.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a commonly used, machine readable format and to transmit it to another controller, where this is technically feasible.
Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling based on those interests. You also have an absolute right to object at any time to processing of your personal data for direct marketing purposes.
Right to withdraw consent: Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew consent.
How to exercise your rights and contact us
If you wish to exercise any of your rights or have questions about how we handle personal data, you can contact us through your usual Gardeners South Tottenham contact route or using any contact details we have provided to you as part of our service relationship.
When you contact us, we may ask you for additional information to confirm your identity and to help us locate the personal data that relates to you. We aim to respond to all valid requests within the time limits set by data protection law.
Complaints and supervisory authority
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom if you believe that your rights have been infringed or that your personal data has not been handled in accordance with the law.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data or changes in legal or regulatory requirements. Any updated version will apply from the date it is made available. We recommend that you review this Privacy Policy periodically so that you remain informed about how Gardeners South Tottenham protects your personal data and your associated rights.