Privacy Policy - Gardeners Ponders End

Gardeners Ponders End is committed to protecting the privacy and personal data of all customers in the area. This Privacy Policy explains how personal information is collected, used, stored, shared, and protected when you use our gardening services, request a quote, make an enquiry, or otherwise interact with us. It applies to all Gardeners Ponders End customers in the area, including prospective customers, current customers, and former customers whose information we retain for lawful business purposes.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is designed to be clear, fair, and transparent so that you understand what happens to your information and the rights available to you.

1. Information We Collect

We collect only the information necessary to provide gardening services, manage business operations, and meet legal obligations. The types of data we may collect include:

Identity details such as your name or the name of a business or property manager.
Contact details such as postal address, email address, and telephone number.
Service details including property access instructions, service preferences, requested work, and appointment notes.
Billing and payment information such as invoice details, payment status, and transaction records.
Communication records including emails, messages, and notes from phone calls or service discussions.
Site and property information such as garden size, layout, condition, and access requirements.
Technical information if you communicate with us electronically, such as basic device or message metadata where relevant to service administration.

We do not intentionally collect special category data unless it is strictly necessary and you choose to provide it, for example if a particular access or service arrangement requires us to be aware of a health-related issue. In such cases, we will only process the minimum information needed and with appropriate safeguards.

2. How We Use Personal Data

We use personal information for the following purposes:

To respond to enquiries and provide quotations.
To arrange, deliver, and manage gardening services.
To maintain records of appointments, work carried out, and customer preferences.
To issue invoices, manage payments, and keep financial records.
To communicate about changes, service updates, or follow-up arrangements.
To improve customer service and maintain service quality.
To comply with legal, tax, accounting, and regulatory obligations.
To protect our business against fraud, misuse, or disputes.

We will never use personal data for purposes that are incompatible with the reasons it was collected unless we have a valid lawful basis and, where required, your consent.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the circumstances, we rely on one or more of the following:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes taking enquiries, arranging services, carrying out work, and handling invoices or payments.

Legitimate Interests

We may process information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes managing customer relationships, maintaining service records, preventing fraud, and improving operational efficiency.

Legal Obligation

We process and retain certain data where we are required to do so by law, including tax, accounting, and record-keeping obligations.

Consent

In limited situations, we may rely on your consent, for example where you agree to receive certain types of communications or where special category data is involved and consent is the appropriate basis. Where consent is used, you may withdraw it at any time.

4. Sharing and Processors

We may share personal data with trusted third-party service providers who act as processors on our behalf. These processors only handle data according to our instructions and are required to protect it appropriately. Examples may include:

Payment processors for handling card or electronic payments.
Accounting and bookkeeping providers for invoicing and financial administration.
Scheduling or administrative software providers used to manage bookings and records.
IT and cloud storage providers that support secure data storage and communication.
Professional advisers such as legal or insurance advisers where necessary.

We may also disclose personal information if required to comply with the law, respond to a lawful request, protect our rights, or resolve a dispute. We do not sell personal data.

Where processors are used, we take steps to ensure suitable contractual protections, confidentiality obligations, and security measures are in place.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, and to meet legal, accounting, or reporting requirements. Retention periods depend on the type of information and the reason for processing.

Customer enquiry records may be kept for a reasonable period to manage follow-up and service continuity.
Service and job records may be retained to support future work, handle complaints, or evidence what was provided.
Invoice and payment records are generally retained for statutory accounting and tax periods.
Communication records may be retained where needed for business administration or dispute resolution.

When data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a safe manner. In some cases, we may keep information for longer if required by law or to establish, exercise, or defend legal claims.

6. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures may include access controls, secure storage, limiting data access to authorised personnel, and reviewing data handling practices.

While no system can be guaranteed to be completely secure, we take data protection seriously and work to reduce risks wherever possible.

7. Your Rights

As a data subject under UK GDPR, you have several rights regarding your personal data. These rights may be subject to legal exceptions and conditions:

Right of access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete information.
Right to erasure - in certain circumstances, you can ask us to delete your data.
Right to restrict processing - you can ask us to limit how your data is used in specific situations.
Right to object - you can object to processing based on legitimate interests or direct marketing.
Right to data portability - you can request certain data in a structured, commonly used format.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with data protection law. You may need to provide enough information to help us verify your identity and locate the relevant records.

8. International Transfers

If any service providers store or process data outside the UK, we will ensure that appropriate safeguards are used so that your personal information remains protected to a standard consistent with UK data protection requirements.

9. Children’s Data

Our services are generally intended for adults or for property-related service arrangements made by adults. We do not knowingly collect personal data from children unless it is necessary in connection with a lawful service arrangement and appropriate safeguards are applied.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our business practices, or service operations. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their information is handled.

11. Summary of Key Points

This policy explains how Gardeners Ponders End collects and uses personal data, the lawful bases relied upon, the retention periods applied, and the categories of processors that may be involved. It also sets out your rights and the protections we use to handle information responsibly. Our aim is to process data fairly, lawfully, and transparently for all customers in the area.

By using our services or making an enquiry, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.