Privacy Policy - Gardeners Hainault

Gardeners Hainault is committed to protecting the privacy and personal data of all customers in the Hainault area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our gardening services. It applies to all Gardeners Hainault customers in the area, including prospective clients, current customers, and anyone who contacts us to request information, quotations, or services.

We follow the principles of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This means we process personal data lawfully, fairly, and transparently, and we only collect information that is necessary for the provision and administration of our services.

1. Information We Collect

We may collect and process different types of personal data depending on how you interact with us. The information we collect may include:

Identity details such as your name and title.
Contact details such as your address, telephone number, and email address.
Service details including your property information, service preferences, garden requirements, and appointment notes.
Payment and billing information where relevant for invoicing and account management.
Communication records including messages, enquiries, feedback, complaints, and correspondence history.
Technical data such as basic website usage information if you contact us digitally, including device, browser, or IP-related information where applicable.
Contract and service history including quotations, bookings, completed work, and customer account records.

We do not intentionally collect special category data unless it is necessary and you have provided it voluntarily, or unless there is a lawful reason for processing it. If such information is shared with us, we will handle it with additional care and only use it where permitted by law.

2. How We Use Your Data

We use your personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange, deliver, and manage gardening services.
To communicate with you about bookings, changes, or updates.
To issue invoices, process payments, and manage accounts.
To maintain service records and customer preferences.
To handle complaints, feedback, and service improvements.
To meet legal, tax, and accounting obligations.
To protect our business from fraud, misuse, or security issues.

We only use your data for purposes that are compatible with the reason it was originally collected. We will not sell your personal information to third parties.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Gardeners Hainault may rely on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes managing quotations, bookings, service delivery, billing, and customer support.

Legal Obligation

We may process certain data to comply with legal requirements, including tax rules, accounting obligations, insurance matters, or record-keeping duties.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include service management, internal administration, quality control, and safeguarding our business operations.

Consent

In limited cases, we may ask for your consent before using your data for a specific purpose. Where consent is relied upon, you can withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

We always assess the appropriate lawful basis before processing personal data and apply the most suitable basis depending on the nature of the activity.

4. Who We Share Data With

We may share personal information with trusted third parties, but only where necessary and with appropriate safeguards. These parties may include:

Service providers and processors who support our business operations, such as scheduling, administration, invoicing, or IT support.
Payment service providers where required to process transactions.
Professional advisers such as accountants, insurers, or legal advisers.
Public authorities where we are required to disclose information by law.

Where a third party acts as a data processor, they are only permitted to use your data on our instructions and must keep it secure. We require processors to implement appropriate technical and organisational measures to protect personal data.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations. Retention periods may vary depending on the type of data and why it is held.

Customer service and contract records are generally retained for the duration of the working relationship and for a reasonable period afterwards.
Financial records may be kept for the period required by tax and accounting laws.
Enquiry records may be retained for a limited time to manage follow-up, service continuity, or business administration.
Complaint and dispute records may be held longer where needed to resolve issues or defend legal claims.

When personal data is no longer required, we will securely delete, anonymise, or archive it in line with our retention practices. We do not keep personal data indefinitely.

6. Data Security

Gardeners Hainault takes reasonable and appropriate steps to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include secure storage, access controls, staff confidentiality obligations, and routine review of data handling practices.

While no system can be guaranteed to be completely secure, we work to maintain a level of protection that is suitable for the nature of the data we process. We also expect any processors or partners we use to apply comparable safeguards.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These may include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can request deletion of your data in certain circumstances.
Right to restriction – you can ask us to limit how we use your data in specific situations.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you may request your data in a structured, commonly used format where applicable.
Right to withdraw consent – where consent is used, you may withdraw it at any time.

You also have the right to raise concerns with the relevant data protection authority if you believe your rights have not been respected. We encourage you to contact us first so we can address your concern promptly and fairly.

8. Third-Party Processors

We may appoint processors to assist with legitimate business functions. These processors may handle data such as contact details, service records, invoices, or administrative communications on our behalf. Examples of processor functions can include:

Booking and scheduling support
Accounting and invoicing services
IT hosting or software maintenance
Secure document storage or backup services

All processors are required to act under a contract and only process data according to our instructions. They must not use your data for their own independent purposes. We aim to work only with providers that demonstrate appropriate privacy and security standards.

9. International Transfers

If personal data is transferred outside the United Kingdom, we will ensure that suitable safeguards are in place to protect it. Such safeguards may include approved contractual terms or other lawful transfer mechanisms required by data protection law.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, service practices, or operational requirements. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

11. Our Commitment

Gardeners Hainault respects the trust placed in us by customers in the Hainault area. We are committed to using personal information responsibly, keeping it secure, and only processing it where we have a valid legal basis. Our approach is grounded in fairness, necessity, and transparency.

If you provide us with personal information, we will handle it in line with this policy and applicable data protection law. By using our services, you acknowledge that your personal data may be processed as described above for the purposes of delivering and managing those services.

This Privacy Policy applies to all Gardeners Hainault customers in area.