Privacy Policy - Gardeners Norwood Green

This Privacy Policy explains how Gardeners Norwood Green collects, uses, stores, and protects personal data belonging to customers in the Norwood Green area. It applies to all Gardeners Norwood Green customers in the area, including people who request quotations, book services, make enquiries, or otherwise interact with our gardening services.

We are committed to handling personal information in a lawful, fair, and transparent manner. This policy is written in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It sets out what data we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your information.

1. Data We Collect

We only collect personal data that is necessary for providing gardening services, managing customer relationships, and meeting legal obligations. The types of information we may collect include:

Identity details such as your name and title.
Contact details such as your address, telephone number, and email address.
Service information including details of the gardening work requested, service preferences, job notes, and site instructions.
Payment-related information such as billing records, transaction references, and invoice details. We do not store full payment card details unless strictly necessary and only where secure payment processing is used.
Communication records including emails, messages, quotations, complaints, and feedback.
Technical data such as basic website or device information if you contact us through digital systems, where applicable.

We do not intentionally collect special category data unless it is necessary and you have chosen to share it with us, for example if it is relevant to access arrangements, safety requirements, or another legitimate service need.

2. How We Use Your Data

Your information is used only for clearly defined purposes connected with our gardening services. These purposes may include:

Responding to enquiries and providing quotations.
Booking, delivering, and managing services.
Preparing invoices and maintaining accounting records.
Recording service preferences and property access notes.
Handling complaints, follow-up requests, and customer support.
Meeting legal, tax, and regulatory obligations.
Improving service quality and maintaining accurate business records.

We do not sell personal data. We also do not use your data for unrelated purposes without a lawful reason and, where required, your consent.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Depending on the situation, we rely on the following bases:

Contract

We process personal data when it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes providing quotes, arranging appointments, carrying out gardening work, and issuing invoices.

Legal Obligation

We may process and retain certain information to comply with legal obligations, such as tax rules, accounting requirements, insurance obligations, or record-keeping duties.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Examples include managing customer records, preventing fraud, improving service delivery, and handling business administration.

Consent

In some cases, we may rely on your consent, for example if we wish to send optional marketing messages or collect information not required for the service. Where consent is used, you can withdraw it at any time.

Important: if you choose not to provide certain information, we may be unable to offer some services or respond fully to your request.

4. Data Sharing and Processors

We may share personal data with trusted third parties known as processors who help us operate our business. These processors only act on our instructions and must protect your data appropriately.

Examples of processors may include:

Accounting and bookkeeping service providers.
Payment processing providers.
IT and cloud storage providers.
Administrative or scheduling tools used to manage appointments and records.
Professional advisers, such as insurers or accountants, where necessary.

We may also disclose data where required by law, such as to courts, regulators, or law enforcement authorities. Any sharing is limited to what is necessary and proportionate.

Where a processor is used, we ensure that appropriate contracts and safeguards are in place so your information is handled securely and only for the agreed purpose.

5. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, including service delivery, record-keeping, and legal compliance. The retention period depends on the type of information and the reason it is held.

In general:

Customer enquiry records are retained for a reasonable period to allow follow-up and service continuity.
Contract, invoice, and payment records are retained for the period required by accounting and tax law.
Communication records may be retained where needed to resolve disputes or maintain service history.
Unused or outdated records are securely deleted or anonymised when they are no longer needed.

When deciding retention periods, we consider legal requirements, business needs, and the principle of data minimisation. We do not keep information indefinitely without a valid reason.

6. Data Security

We take reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and careful handling of paper or digital records.

Although no system can be guaranteed to be completely secure, we work to maintain a level of protection appropriate to the nature of the data we hold.

7. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These may include:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete information.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restrict processing - to ask us to limit how your data is used in certain situations.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to request certain information in a structured, commonly used format where applicable.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.

These rights are not absolute and may be subject to legal exceptions. We will respond to requests in accordance with applicable law.

8. Children’s Data

Our services are intended for adult customers and property holders. We do not knowingly collect personal data from children unless it is necessary and lawful in a specific context. If we become aware that data has been collected incorrectly, we will take appropriate steps to delete or protect it.

9. International Transfers

Where personal data is stored or processed outside the UK, we ensure appropriate safeguards are in place to protect it. These may include contractual protections or transfer mechanisms recognised under data protection law.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. The most current version will always apply to the personal data we process.

In summary: Gardeners Norwood Green collects only the information needed to provide gardening services, operates under a clear lawful basis, retains data only as long as necessary, uses trusted processors where appropriate, and respects your rights under data protection law. This policy applies to all Gardeners Norwood Green customers in the area.