Privacy Policy - Gardeners Harmondsworth

This Privacy Policy applies to all Gardeners Harmondsworth customers in the area. It explains how personal data is collected, used, stored, shared, and protected when you use our gardening services. We are committed to handling your information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Gardeners Harmondsworth provides gardening and related outdoor property services to residential and commercial customers in the local area. For the purposes of data protection law, we act as the data controller for the personal information we collect and use about our customers, prospective customers, and website or enquiry users where applicable.

We only collect and process personal data where there is a valid legal reason to do so. We aim to keep all information accurate, relevant, and limited to what is necessary for service delivery, record keeping, legal compliance, and operational management.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, and any preferred form of address.
Contact data: address, phone number, email address, and service location details.
Service data: details of requested gardening work, quotations, appointments, instructions, and service history.
Payment and billing data: invoicing details, payment status, and transaction records.
Communication data: messages, call notes, complaints, feedback, and correspondence.
Technical data: limited information such as IP address or device data if submitted through digital forms or related systems.
Marketing preferences: your preferences regarding optional updates or service-related information.

We do not intentionally collect special category data unless it is clearly necessary and you have provided it voluntarily, or it is otherwise lawful to process. Special category data includes information about health, religion, ethnicity, political opinions, or similar sensitive matters.

3. How We Collect Your Data

We may collect personal data directly from you when you:

request a quotation or make an enquiry;
book or receive a service;
provide feedback or make a complaint;
communicate with us by phone, email, form, or message;
enter into a contract or service agreement;
make a payment or request an invoice.

We may also receive data from third parties where appropriate, such as property managers, household representatives, payment processors, or professional advisers acting on your behalf.

4. Lawful Basis for Processing

We process personal data only when permitted by law. Depending on the circumstances, our lawful bases include:

Contract: to provide gardening services, manage bookings, issue invoices, and perform our obligations to you.
Legal obligation: to comply with accounting, tax, record keeping, and other statutory requirements.
Legitimate interests: to manage our business effectively, respond to enquiries, improve service quality, prevent fraud, and maintain internal records, provided those interests do not override your rights and freedoms.
Consent: where required, for example for certain marketing communications or the processing of optional sensitive information.

Where we rely on consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

5. How We Use Personal Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to deliver, schedule, and manage gardening services;
to maintain records of work completed;
to communicate about appointments, changes, or service matters;
to manage billing, payments, and administration;
to handle complaints, disputes, and customer requests;
to comply with legal and regulatory obligations;
to improve our services, operations, and customer experience;
to send relevant updates where permitted by law.

We will only use your information in ways that are compatible with the purposes described above. If we need to use your data for a new purpose, we will ensure there is a valid legal basis before doing so.

6. Sharing and Processors

We may share personal data with trusted third parties who act as processors on our behalf. These parties only process data according to our instructions and are required to protect it appropriately. Processors may include:

IT and cloud storage providers;
accounting and bookkeeping services;
payment processing providers;
customer communication tools;
professional advisers such as legal or tax advisers;
contracted service partners who help deliver specific tasks.

We may also disclose information where required by law, to public authorities, or to protect our rights, property, staff, customers, or others. We do not sell personal data.

7. International Transfers

Where data is stored or processed outside the United Kingdom, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms that protect your personal data to an appropriate standard.

8. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason for holding it.

Customer and service records: retained for the period needed to manage the relationship and any reasonable follow-up.
Financial records: kept for the period required by tax and accounting law.
Complaints and dispute records: retained for as long as needed to resolve the matter and support legal defence.
Marketing preference data: kept until you withdraw consent or object where applicable.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

9. Data Security

We use reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful selection of processors.

While no system can be guaranteed completely secure, we work to reduce risks and handle any incidents in line with applicable legal obligations.

10. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to legal limits and exemptions. They include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data where there is a valid legal basis.
Right to restrict processing: to ask us to limit how we use your data in certain situations.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to request transfer of data you provided to us in a structured, commonly used format where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the timeframe required by law. We may need to verify your identity before acting on a request.

11. Complaints and Further Rights

If you believe your data has been handled unlawfully or your rights have not been respected, you have the right to raise a complaint with the relevant supervisory authority in the UK. We encourage you to raise concerns with us first so that we can try to resolve the matter promptly and fairly.

We are committed to handling all personal data with care, respect, and accountability.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our internal practices. Any updated version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically so they remain informed about how their information is used.

Gardeners Harmondsworth is committed to protecting the privacy of all customers in the area and ensuring that personal data is processed fairly, securely, and in line with applicable data protection law.