Gardeners Elmers End Privacy Policy

This Privacy Policy explains how Gardeners Elmers End collects, uses, stores, and protects personal data relating to customers in the Elmers End area and surrounding neighbourhoods. It is intended to comply with the UK General Data Protection Regulation and related data protection laws. By using our gardening and related services, you acknowledge that you have read and understood this Privacy Policy.

Scope and who this policy applies to

This Privacy Policy applies to all Gardeners Elmers End customers in the area who engage our services, make enquiries, or otherwise interact with us as a private individual or on behalf of a business. It covers personal data that we collect directly from you and personal data that we may receive from third parties in connection with our services.

Types of personal data we collect

We only collect personal data that is necessary for the purposes set out in this Privacy Policy. Depending on how you interact with us, we may collect the following categories of information:

Identification and contact details such as your name, property address, correspondence address if different, and any other contact details you choose to share, such as a preferred method of contact.

Service and contract information such as details about your garden or outdoor space, access instructions that you provide, service preferences, records of work carried out, quotations, invoices, and any related communications.

Payment and billing information such as details necessary to process payments, issue invoices, confirm that payments have been made, and manage refunds where applicable.

Communication records including enquiries, complaints, feedback, and any correspondence relating to our services, whether written or verbal notes of telephone conversations.

Technical and usage information where relevant, such as basic device and interaction data when you visit our online pages or use digital tools we provide, to the extent that it identifies or can identify you.

How and why we collect personal data

We collect personal data directly from you when you contact us to request a quotation, book a service, ask for advice, or otherwise communicate with us in relation to our gardening services. We may also collect information when you provide feedback, respond to surveys or special offers, or engage with us through any published online presence.

In some cases, we may receive personal data about you from third parties, such as recommendations or referrals from existing customers, or through business partners that help us deliver or promote our services. We only use this information where it is necessary for the purposes described in this Privacy Policy and where we have a lawful basis to do so.

Lawful bases for processing personal data

We process your personal data only where we have a valid lawful basis under data protection law. These include:

Performance of a contract: We use your personal data to provide gardening and related services you have requested, to prepare quotations, to schedule visits, to invoice you, and to manage our ongoing relationship.

Legitimate interests: We may process your personal data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include managing our business operations, improving our services, maintaining accurate records, and protecting our property and legal rights.

Legal obligations: We may process and retain certain personal data to comply with legal and regulatory obligations, including tax, accounting, and reporting requirements, as well as to respond to lawful requests from public authorities.

Consent: In limited situations, we may rely on your explicit consent, for example if we wish to send you certain types of marketing communications. Where we rely on consent, you can withdraw it at any time, and we will explain how to do so at the time we obtain your consent.

How we use your personal data

We use your personal data for the following purposes:

To provide gardening and related services, including site visits, maintenance, and one-off projects.

To prepare quotations, schedule appointments, organise access, and confirm bookings.

To manage payments, issue invoices, and maintain financial records.

To respond to enquiries, handle complaints, and provide customer support.

To keep internal records of works completed, materials used, and site-specific details necessary to deliver ongoing or future services safely and efficiently.

To manage our business operations, including planning, quality control, and staff training.

To comply with our legal obligations and to establish, exercise, or defend legal claims if necessary.

Data processors and third party service providers

From time to time, we may share your personal data with third parties who act as data processors on our behalf. These organisations only process your data in accordance with our instructions and for the purposes described in this Privacy Policy.

Examples of such processors include providers of accounting or invoicing software, cloud storage or backup services, and providers of communication tools that help us manage our customer contacts and bookings. We only engage processors who can demonstrate that they take appropriate technical and organisational measures to protect your personal data.

We may also need to share certain personal data with professional advisers such as accountants or legal advisers, and with public bodies or law enforcement agencies where we are legally required to do so. We do not sell your personal data to third parties.

Data retention and storage

We retain your personal data only for as long as is necessary for the purposes for which it was collected, including to provide services, meet legal and accounting requirements, and resolve any disputes.

In general, customer and service records are kept for the duration of our relationship with you and for a reasonable period thereafter, typically up to six years after the end of the tax year in which our last service to you was provided, in line with standard legal and accounting practices. In some cases, we may keep specific information for longer where this is required by law or is necessary in connection with potential legal proceedings.

When personal data is no longer needed, we will take steps to delete or anonymise it securely. Where data is stored in backup systems, it may remain in those systems until it is overwritten in accordance with our backup and retention procedures.

International transfers

Where we use service providers that store or access personal data from outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your data, in line with data protection law. This may include reliance on adequacy regulations, standard contractual clauses, or other approved mechanisms. Further information about specific safeguards can be provided upon request.

Security of your personal data

We are committed to protecting the security of your personal data. We use appropriate technical and organisational measures to prevent unauthorised access, loss, misuse, or disclosure. These may include restricted access to records, secure storage, use of passwords, and staff awareness of data protection responsibilities.

While we take reasonable steps to safeguard your information, no system can be completely secure. You should contact us promptly if you suspect any misuse or unauthorised access to your personal data in connection with our services.

Your data protection rights

Under the UK General Data Protection Regulation, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions in the law.

Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data, along with certain information about how it is used.

Right to rectification: You can ask us to correct or complete personal data that you believe is inaccurate or incomplete.

Right to erasure: In some circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.

Right to restriction: You can ask us to restrict the processing of your personal data in certain situations, such as while we are investigating a concern you have raised about its accuracy.

Right to object: You can object to processing based on our legitimate interests, including certain forms of direct marketing. We will stop such processing unless we can demonstrate compelling legitimate grounds to continue.

Right to data portability: Where our processing is based on your consent or on a contract and is carried out by automated means, you may request to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and have it transmitted to another controller where technically feasible.

You also have the right to lodge a complaint with the relevant data protection authority if you are unhappy with how we handle your personal data. We encourage you to contact us first so we can try to resolve your concerns.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, our practices, or applicable laws. The updated version will apply from the date it is published. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.