Gardeners Harefield Privacy Policy

This Privacy Policy explains how Gardeners Harefield collects, uses, stores, and protects personal data relating to our customers. It applies to all Gardeners Harefield customers within our service area and to anyone who contacts us to enquire about or use our gardening and related services.

We are committed to respecting your privacy and handling your personal data in compliance with the UK General Data Protection Regulation and applicable data protection laws. This Privacy Policy is intended to provide clear and transparent information about our data processing activities and your rights.

Scope and Data Controller

This Privacy Policy applies to all personal data processed by Gardeners Harefield in connection with our services, including enquiries, quotations, bookings, and the ongoing delivery of gardening and maintenance work for residential and commercial properties in our service area.

Gardeners Harefield is the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with data protection law.

Personal Data We Collect

We collect and process different categories of personal data depending on your relationship with us and the services you use. The types of data we may collect include:

Identification and contact details, such as your name, postal address, property address where services are provided, and any other contact details you choose to share, such as messaging or contact identifiers.

Service and contract information, such as details of your enquiries, quotations, accepted services, service schedules, notes relating to your garden or property, access instructions you choose to provide, and records of work completed.

Billing and payment details, such as information needed to issue invoices, records of payments and amounts due, and information required for basic financial record keeping. We do not store full payment card details; where electronic payment services are used, these are processed through third party providers.

Communication records, such as messages, correspondence, and notes from telephone or in-person conversations relating to our services, feedback, and any complaints handling.

Technical and usage data, where applicable, such as basic information about how you interact with our online content or digital tools, including dates and times of contact or form submissions, and basic device or browser data where this is collected.

How We Collect Personal Data

We collect personal data directly from you when you contact us to request a quotation, make a booking, ask a question, or otherwise communicate with us.

We may also collect data during site visits or when we provide services at your property, for example when assessing your garden, planning work, or carrying out ongoing maintenance.

In some cases, we may receive your details from a third party who refers you to us, such as a friend, family member, neighbour, or business partner. In these cases, we will inform you of the source of your data where appropriate.

Lawful Bases for Processing

We process your personal data only where we have a lawful basis under data protection law. Depending on the purpose, our lawful bases may include:

Contract. We process your personal data where it is necessary to enter into or perform a contract with you, for example to provide a quotation, schedule and deliver gardening services, manage payments, and respond to your requests relating to agreed work.

Legal obligation. We process certain data to comply with legal and regulatory requirements, such as maintaining appropriate financial and tax records or responding to lawful requests from public authorities.

Legitimate interests. We process personal data where this is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This may include managing and improving our services, maintaining business records, handling queries or complaints, and protecting our rights and property.

Consent. In limited cases, we may rely on your consent, for example where we wish to send you certain types of marketing communications that require consent. Where we rely on consent, you have the right to withdraw it at any time.

How We Use Personal Data

We use the personal data we collect for the following purposes:

To provide and manage our services, including assessing your requirements, preparing quotations, scheduling work, delivering gardening and maintenance services, and communicating with you about the status of your services.

To manage our relationship with you, including responding to your questions, handling feedback or complaints, and providing customer support.

To administer our business operations, including record keeping, invoicing, accounting, internal reporting, and seeking to improve our services.

To comply with legal obligations, such as maintaining records for tax purposes or responding to legal processes and requests from public authorities where required by law.

To protect our rights and interests, including the prevention, investigation, and detection of fraud or misuse of our services, and the establishment, exercise, or defence of legal claims.

Data Processors and Third Parties

We may share your personal data with carefully selected third parties who act as data processors on our behalf. These service providers only process your data in accordance with our instructions and for the purposes described in this Privacy Policy. Examples of such processors may include:

Information technology and cloud service providers who host our digital systems or provide data storage and backup services.

Billing, accounting, or bookkeeping service providers who assist us with financial record keeping and invoicing.

Communication service providers who help us manage and send messages or notifications to customers.

Where necessary, we may also share your personal data with professional advisers, such as lawyers or accountants, or with public authorities where we are legally obliged to do so.

We do not sell your personal data to third parties. Any third party that processes your data on our behalf is required to implement appropriate security measures and to process your data only in accordance with applicable data protection laws.

Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected and in accordance with legal, regulatory, and operational requirements.

Data relating to quotes, contracts, and delivery of services is generally retained for the duration of our relationship with you and for a reasonable period thereafter, to allow us to respond to queries, maintain accurate business records, and comply with legal obligations.

Financial and invoicing information is retained for the period required by tax and accounting laws.

Where we rely on your consent for certain processing, we will retain the relevant data until you withdraw your consent or until the data is no longer needed for the purpose for which it was collected.

When personal data is no longer required, we will take reasonable steps to delete it or anonymise it securely.

Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures include controlling access to records, using secure storage solutions, and limiting access to personal data to those employees, contractors, and processors who need it to perform their duties and who are subject to confidentiality obligations.

While we take reasonable steps to protect your personal data, no system can be completely secure. You are encouraged to share only the information that is necessary in order for us to provide our services.

Your Data Protection Rights

As a data subject, you have a number of rights under data protection law in relation to the personal data that we hold about you. Subject to certain conditions and exemptions, these rights may include:

The right of access. You have the right to request confirmation of whether we process your personal data and to receive a copy of that data, along with certain information about how we use it.

The right to rectification. You have the right to request that inaccurate or incomplete personal data is corrected or updated without undue delay.

The right to erasure. In certain circumstances, you may have the right to request the deletion of your personal data, for example where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.

The right to restriction of processing. You may have the right to request that we restrict the processing of your personal data in certain situations, such as while we verify the accuracy of the data or respond to an objection.

The right to data portability. Where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive the personal data you have provided to us in a structured, commonly used, and machine readable format and to transmit that data to another controller where technically feasible.

The right to object. You have the right to object to the processing of your personal data that is based on our legitimate interests, on grounds relating to your particular situation. We will stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims.

The right to withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your rights have been infringed.

International Data Transfers

Where we use service providers located outside the United Kingdom or the European Economic Area, your personal data may be transferred to countries that do not have the same level of data protection as in the United Kingdom. In such cases, we take steps to ensure that appropriate safeguards are in place, such as using standard contractual clauses or other lawful transfer mechanisms, to protect your personal data in accordance with applicable data protection law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or how we process personal data. Any changes will take effect when the updated Privacy Policy is made available. We encourage you to review this Policy periodically to stay informed about how we process and protect your personal data.

By continuing to use our services after any changes to this Privacy Policy, you acknowledge that you have read and understood the updated terms.