Privacy Policy - Gardeners Harefield

Gardeners Harefield is committed to protecting the privacy of all customers in the Harefield area. This Privacy Policy explains how personal data is collected, used, stored, shared, and protected when we provide gardening services to local customers. It also explains the lawful basis on which we process data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Gardeners Harefield customers in the area, including anyone who enquires about our services, receives a quotation, books a job, or uses our gardening services. By engaging with us, you acknowledge that your information may be handled as described in this policy.

1. Personal Data We Collect

We collect only the personal data that is necessary for running our gardening services, responding to requests, and meeting legal obligations. The type of information we may collect includes:

Identity details, such as your name.
Contact details, such as address, email address, and telephone number.
Service information, including details of the garden work requested, preferred service dates, and property access notes.
Communication records, such as messages, calls, complaint notes, and service updates.
Payment and billing information, where needed for invoicing, account records, and payment processing.
Technical information, where you contact us online, such as IP address or device information if relevant to security or fraud prevention.
Marketing preferences, if you choose to receive service updates or promotional messages.

We do not intentionally collect special category data unless it is necessary and you have provided it in a lawful way, for example where a customer voluntarily shares information relevant to access arrangements or safety planning. We always aim to minimise the information held and only keep what is needed for a valid purpose.

2. How We Use Personal Data

We use personal data to provide reliable gardening services and to manage our relationship with customers. This may include:

Responding to enquiries and providing quotations.
Scheduling and delivering garden maintenance, landscaping, and related services.
Managing customer accounts and service records.
Processing payments, invoices, and refunds where applicable.
Communicating about appointments, changes, or service issues.
Handling complaints, feedback, and service follow-up.
Maintaining business records for accounting, insurance, and compliance.
Preventing misuse, fraud, or security issues.
Sending marketing messages only where permitted and where consent or legitimate interest applies.

Gardeners Harefield will never use your personal data in a way that is unfair, unexpected, or incompatible with the reason it was collected.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis before processing personal data. Depending on the situation, we may rely on one or more of the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing a quote, arranging a service visit, completing gardening work, and issuing invoices.

Legal obligation

We may process data to comply with legal obligations, including tax records, accounting requirements, and record keeping required by law.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include managing customer communications, improving services, keeping business records, and ensuring site security.

Consent

In some cases, we rely on your consent, such as for certain types of marketing communication. Where consent is used, you may withdraw it at any time.

We assess each type of processing carefully to ensure the correct lawful basis is used and that processing remains proportionate.

4. How Long We Keep Data

We retain personal data only for as long as necessary for the purpose for which it was collected. Retention periods depend on the type of information and the legal or business reasons for keeping it.

Customer service records are usually kept for the duration of the customer relationship and for a reasonable period afterwards.
Financial and tax records are kept for the period required by law.
Correspondence and complaint records may be retained for a period needed to manage the matter and protect our legal position.
Marketing preferences are kept until you withdraw consent or opt out.

When data is no longer needed, it is securely deleted or anonymised so it cannot be linked back to you. We regularly review what we hold to make sure retention is appropriate and not excessive.

5. Data Processors and Sharing

We may share personal data with trusted processors who help us run our business and provide services. These may include:

Payment service providers for taking and processing payments.
Accounting software providers for bookkeeping and financial record management.
IT and cloud storage providers for secure data storage and business administration.
Scheduling or communication tools used to manage bookings and customer updates.
Professional advisers, such as accountants or legal advisers, where needed.

All processors are chosen carefully and are required to handle personal data securely, only according to our instructions, and in compliance with data protection law. Where data is shared, we ensure appropriate contractual safeguards are in place.

We may also share information where required by law, such as in response to a lawful request from a public authority or to protect our rights, staff, customers, or property.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or destruction. These measures may include password protection, access controls, secure storage, and limiting data access to people who need it for legitimate business purposes.

However, no system is completely secure. While we do our best to protect your information, we cannot guarantee absolute security. If a data breach occurs that is likely to affect your rights or freedoms, we will respond in accordance with applicable legal requirements.

7. Your Rights

As a customer in the Harefield area, you have rights under data protection law. Subject to legal limits, these may include:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete data.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restriction - to request that we limit how we use your data in certain situations.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to request transfer of certain data where legally applicable.
Right to withdraw consent - where processing is based on consent.

You also have the right to lodge a complaint with the UK Information Commissioner's Office if you believe your data protection rights have not been respected. We encourage customers to raise concerns directly so we can try to resolve any issue quickly and fairly.

8. Children’s Data

Our services are intended for adult customers and property owners or occupiers arranging gardening work. We do not knowingly collect personal data from children unless it is necessary and lawful in a specific situation. If we become aware that we have collected such information without proper basis, we will take steps to delete it safely.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we process data. Any updates will apply from the date they are published or otherwise communicated. We recommend reviewing this policy periodically to stay informed about how your information is handled.

Gardeners Harefield remains committed to responsible data protection practices and to treating every customer’s personal information with care, fairness, and respect.