Privacy Policy - Gardeners Elmers End

Gardeners Elmers End is committed to protecting the privacy and personal data of all customers in the area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when we provide gardening services to households and businesses in Elmers End and the surrounding area. It also explains your rights under the UK GDPR and the Data Protection Act 2018.

This policy applies to all Gardeners Elmers End customers in area, including anyone who makes an enquiry, requests a quote, books a service, or receives gardening work from us. By using our services, you acknowledge that your data may be processed in line with this policy.

1. Personal Data We Collect

We collect only the information needed to manage our services properly, communicate with customers, and meet legal or contractual obligations. The data we may collect includes:

Identity details such as your name and, where relevant, the name of your business or organisation.
Contact details such as your address, email address, and telephone number.
Service information such as job requests, garden preferences, instructions, and service history.
Payment information such as records of invoices, payments made, and payment status.
Communication records such as emails, messages, notes from phone calls, and complaints or feedback.
Technical information if you interact with digital systems used to manage enquiries, including basic device and usage data where relevant.

We do not intentionally collect special category data unless it is necessary and you have provided it yourself, for example if you share information that affects access arrangements or service delivery. In such cases, we will only use it where permitted by data protection law and with appropriate safeguards.

2. How We Use Your Data

We use personal data for legitimate business purposes connected with providing gardening services. These uses may include:

responding to enquiries and providing quotations;
arranging appointments and delivering services;
managing customer accounts and service records;
issuing invoices and recording payments;
handling complaints, queries, and service updates;
maintaining internal records for quality, safety, and operational purposes;
meeting legal, tax, insurance, and regulatory requirements.

We only use your personal data where we have a valid lawful basis to do so. We do not use your information for unrelated purposes without informing you and, where required, obtaining your consent.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis before processing personal data. Gardeners Elmers End relies on the following lawful bases:

Performance of a contract

We process data when it is necessary to provide a quotation, deliver gardening services, manage bookings, and carry out our agreement with you. This includes using your contact details, address, and service instructions.

Legitimate interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This includes keeping records, improving services, preventing fraud, and managing customer communications.

Legal obligation

We may process and retain certain information to comply with legal obligations, including tax law, accounting requirements, health and safety duties, and insurance-related record keeping.

Consent

Where we rely on your consent, such as for optional marketing communications or the use of certain non-essential data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

4. Sharing Your Information and Processors

We may share personal data with trusted third parties where necessary to operate our business effectively and lawfully. These third parties act either as independent controllers or as processors acting on our behalf.

Processors may include:

bookkeeping or accounting service providers;
payment processing providers;
IT, email, and cloud storage providers;
customer management or scheduling system providers;
professional advisers such as insurers, solicitors, or accountants where needed.

Where a third party acts as a processor, they are only permitted to process your data on our instructions and must keep it secure. We require appropriate data protection terms and safeguards in place before sharing any personal data.

We will not sell your personal data. We will not share it with unrelated third parties unless required by law, necessary for service delivery, or permitted by data protection rules.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods depend on the type of information and the reason for holding it.

In general:

customer enquiry records may be retained for a limited period if no service is booked;
service and transaction records may be retained for several years to support accounting, tax, and warranty or complaint handling needs;
communication records may be retained for as long as needed to manage service history and resolve disputes;
where consent is the basis for processing, we keep the data until you withdraw consent or it is no longer needed.

When data is no longer required, we will securely delete, destroy, or anonymise it.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limiting access to data on a need-to-know basis.

Although we work to protect your information, no method of transmission or storage is completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will take appropriate action in line with applicable law.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the legal basis for processing.

Right of access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete data.
Right to erasure - in some cases, you can ask us to delete your data.
Right to restriction - you can ask us to limit how we use your data in certain situations.
Right to data portability - where applicable, you can request your data in a structured, commonly used format.
Right to object - you can object to processing based on legitimate interests or to direct marketing.
Right to withdraw consent - where we rely on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to raise concerns with us first so we can try to resolve them quickly and fairly.

8. Children’s Data

Our services are directed at adults and property owners or occupiers. We do not intentionally collect personal data from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it where appropriate.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our business practices, or the way we process personal data. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically.

10. Summary of Our Commitment

Gardeners Elmers End respects privacy and handles personal information responsibly. We collect only what we need, use it fairly, keep it secure, and retain it only for as long as necessary. We process data on valid lawful bases, work with trusted processors under proper safeguards, and respect your legal rights at every stage.

This Privacy Policy applies to all Gardeners Elmers End customers in area.