Privacy Policy - Gardeners Chadwell Heath

Gardeners Chadwell Heath is committed to protecting personal data and respecting privacy. This Privacy Policy explains how we collect, use, store, share, and protect information relating to customers, prospective customers, and other individuals who interact with our gardening services. It applies to all Gardeners Chadwell Heath customers in the area, including anyone requesting quotes, booking services, or communicating with us in relation to garden maintenance, landscaping, or related work.

1. Who We Are

For the purposes of data protection law, Gardeners Chadwell Heath acts as the data controller for the personal data we process in connection with our services. This means we decide why and how personal information is used. We are responsible for ensuring that personal data is handled lawfully, fairly, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.

This policy explains the categories of information we may collect, the reasons we process it, the lawful bases we rely on, how long we keep it, and the rights available to individuals whose data we hold.

2. Information We Collect

We only collect personal data that is relevant and necessary for delivering our services and managing our business. The information we may collect includes:

Identity details such as name and title.
Contact details such as address, email address, and phone number.
Service information including property details, garden preferences, service requirements, and appointment notes.
Payment and billing information where needed to process invoices and payments.
Communication records including messages, enquiries, feedback, and complaint details.
Technical data such as basic device or browser information if you interact with our digital systems.
Operational notes related to job scheduling, access arrangements, and site instructions.

We generally do not intentionally collect special category data, such as information about health, religion, or ethnicity. If such information is ever provided to us by mistake or is necessary for a specific reason, we will process it only where permitted by law and with appropriate safeguards.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange and deliver gardening services.
To manage bookings, visits, and service schedules.
To prepare invoices, process payments, and maintain accounting records.
To communicate about ongoing work, changes, and service updates.
To handle complaints, disputes, and customer support requests.
To improve our services, processes, and customer experience.
To comply with legal, tax, and regulatory obligations.

We will not use personal data for purposes that are incompatible with the reasons it was originally collected unless we have a lawful basis to do so and have informed you where required.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Gardeners Chadwell Heath relies on the following legal grounds:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes handling your details to provide quotes, book services, complete gardening work, and issue invoices.

Legitimate Interests

We may process data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. This can include managing customer relationships, improving service quality, preventing fraud, keeping business records, and maintaining internal administration. When relying on legitimate interests, we consider whether the processing is proportionate and appropriate.

Legal Obligation

We may process and retain certain data where required to comply with laws and regulations, including accounting, tax, insurance, and record-keeping duties.

Consent

In some situations, we may ask for your consent, particularly where the law requires it. If consent is used as the basis for processing, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

5. Data Sharing and Processors

We may share personal data with trusted third parties where necessary for business operations and service delivery. These third parties may act as processors or independent controllers. When a third party processes data on our behalf, we ensure appropriate contractual and security safeguards are in place.

Examples of processors or service providers may include:

Payment providers that help process transactions securely.
Accounting and bookkeeping providers that assist with financial records.
IT and cloud storage providers that support data storage, communications, or business systems.
Scheduling or administration tools used to organise appointments and service records.
Professional advisers such as accountants or legal advisers, where necessary.

We may also disclose personal data if required by law, regulation, court order, or to protect our rights, customers, staff, or property. We do not sell personal data.

6. International Transfers

Where data is transferred outside the United Kingdom, we will ensure suitable safeguards are in place to protect personal information. These may include approved contractual clauses or other lawful transfer mechanisms. We take steps to ensure that any overseas processing meets the standards required by applicable data protection laws.

7. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, or as required by law. Retention periods may vary depending on the type of information and the legal or business need for keeping it.

Customer and service records are usually kept for the duration of the service relationship and for a reasonable period afterwards.
Invoices, payment records, and tax documents are generally retained for the period required by accounting and tax law.
Enquiry records may be retained for a shorter period if no service is arranged.
Complaint and dispute records may be retained longer where needed to resolve issues or defend legal claims.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

8. Security of Personal Data

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures are reviewed regularly and may include access controls, secure storage, staff awareness, and restricted sharing of information on a need-to-know basis.

While no system is completely secure, we take reasonable and proportionate steps to safeguard personal information and to reduce the risk of security incidents.

9. Your Rights

Individuals whose personal data we process have rights under data protection law. Subject to certain conditions and exceptions, these rights may include:

Right of access to obtain a copy of the personal data we hold about you.
Right to rectification to correct inaccurate or incomplete information.
Right to erasure in certain circumstances, also known as the right to be forgotten.
Right to restriction of processing in certain situations.
Right to data portability for information processed by automated means and based on consent or contract.
Right to object to processing based on legitimate interests or used for direct marketing.
Right to withdraw consent where consent is the lawful basis.

If you wish to exercise any of these rights, we may need to verify your identity before responding. We will respond within the time limits required by law unless an extension is permitted due to complexity or volume.

10. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children unless it is necessary in a lawful context, such as where a customer provides a household contact detail that includes a child’s name for a service-related reason. If we become aware that we have collected data from a child without appropriate lawful basis, we will take steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or the way we operate. The latest version will apply to personal data we hold at that time. We encourage customers in Chadwell Heath and the surrounding area to review this policy periodically so they remain informed about how their data is handled.

12. Summary of Our Commitment

Gardeners Chadwell Heath processes personal data only when it is necessary, lawful, and relevant to the services we provide. We keep information secure, retain it only for as long as required, and use trusted processors under appropriate safeguards. Most importantly, we respect your rights and will handle your personal data in a fair and transparent way.

This Privacy Policy applies to all Gardeners Chadwell Heath customers in area.