Privacy Policy - Gardeners Harrow Weald

Gardeners Harrow Weald is committed to protecting the privacy and personal data of all customers in the Harrow Weald area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in connection with our gardening services. It also explains the rights available to individuals under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Gardeners Harrow Weald customers in the area, including current, former, and prospective customers who enquire about, receive, or have received our services. By using our services, you acknowledge that your personal information will be handled in accordance with this policy and applicable data protection law.

1. Information We Collect

We only collect personal information that is necessary for operating our gardening services, managing customer relationships, and meeting legal or operational requirements. The information we may collect includes:

Identity details such as your name and title.
Contact information such as address, telephone number, and email address.
Service details including property access information, service preferences, gardening instructions, and appointment notes.
Billing and transaction information where relevant, such as payment status, invoices, and records of services provided.
Communication records including emails, messages, quotations, complaints, and feedback.
Technical information if you interact with digital services, including basic usage data and device-related information where necessary for security and functionality.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, or we are required to record it for a lawful reason. Special category data includes information such as health details, religious beliefs, or other sensitive information.

2. How We Use Personal Data

We use personal data for legitimate business and service-related purposes. These may include:

Responding to enquiries and providing quotations.
Delivering gardening services, maintenance visits, and related customer support.
Managing bookings, scheduling work, and confirming appointments.
Processing payments, issuing invoices, and keeping financial records.
Handling complaints, resolving disputes, and improving customer experience.
Maintaining security, preventing fraud, and ensuring safe access to properties.
Meeting legal, tax, accounting, and regulatory obligations.

We will only use your personal data for purposes that are compatible with the reason it was collected. If we need to use it for a new purpose, we will ensure that this is permitted by law.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing personal data. Gardeners Harrow Weald relies on the following lawful bases where appropriate:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging services, sending quotes, carrying out work, and managing ongoing customer arrangements.

Legal Obligation

We may process and retain personal information where needed to comply with legal requirements, including tax, accounting, insurance, and business record obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. This may include service administration, record-keeping, customer support, security, and service improvement.

Consent

Where consent is required by law, such as for optional marketing communications or certain categories of sensitive data, we will ask for it clearly. You may withdraw consent at any time, and doing so will not affect processing already carried out lawfully before withdrawal.

4. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the reason it is held.

In general:

Customer and service records are kept for the duration of the working relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law.
Communication records are retained as needed to manage queries, complaints, and service history.
Marketing data, where applicable, is retained until you object or withdraw consent, or until it is no longer needed.

When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention practices.

5. Sharing Data and Processors

We may share personal data with trusted third parties only where necessary for business operations, legal compliance, or service delivery. These third parties may act as processors or independent controllers depending on the circumstances.

Examples of processors and service providers may include:

Accounting and bookkeeping providers.
Payment processing services.
IT support, data storage, and security providers.
Communication and administrative service providers.
Professional advisers such as insurers, legal advisers, or auditors.

Where we use processors, they are only permitted to handle personal data on our instructions and must implement appropriate security measures. We do not sell personal data. We also do not share personal data with third parties for their own marketing purposes without a proper legal basis.

In limited circumstances, we may disclose personal information if required by law, court order, regulatory authority, or to protect our rights, customers, or property.

6. Data Security

We take the security of personal data seriously and use appropriate technical and organisational measures to protect it against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include restricted access, secure storage, password protection, and staff awareness procedures.

However, no system can be guaranteed to be completely secure. We therefore encourage customers to take care when sharing information and to notify us promptly if they believe their personal data has been compromised.

7. Your Rights

As a data subject under UK GDPR, you may have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in some situations.
Right to data portability – to request transfer of certain data to you or another controller, where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You may also have the right to lodge a complaint with the relevant data protection authority if you believe your personal data has been handled unlawfully. We encourage customers to raise concerns so we can address them promptly and fairly.

8. Cookies and Online Data

If we use digital platforms or online forms, basic technical data may be collected to ensure functionality, security, and performance. This may include browser type, device information, and usage patterns. Any use of cookies or similar technologies will be limited to what is necessary or otherwise lawful under applicable rules.

Where consent is required for non-essential cookies, it will be requested before those cookies are placed. You can manage cookie preferences through your browser settings where applicable.

9. Children’s Data

Our services are directed to adult customers and property-related service arrangements. We do not knowingly collect personal data from children unless it is incidentally provided and necessary for service administration. If we become aware that we have collected data unlawfully from a child, we will take appropriate steps to delete it.

10. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place so that it remains protected to an equivalent standard required by law. These safeguards may include approved transfer mechanisms and contractual protections with service providers.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data-handling practices. Any updated version will apply from the date it is published or otherwise communicated. We recommend reviewing this policy periodically to stay informed about how we protect your information.

12. Summary of Our Commitment

Gardeners Harrow Weald will always aim to process personal data fairly, lawfully, and transparently. We collect only what we need, keep it for no longer than necessary, and use suitable safeguards to protect it. Our approach is designed to respect privacy while allowing us to provide reliable gardening services to customers across Harrow Weald.

If you are a customer in the area, this policy applies to your information whenever you engage our services, make an enquiry, or otherwise interact with Gardeners Harrow Weald.