Privacy Policy - Gardeners Barnehurst

Gardeners Barnehurst is committed to protecting personal data and respecting privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal information when providing gardening services to customers in the Barnehurst area. It applies to all Gardeners Barnehurst customers in area, including prospective customers, active customers, and individuals who have previously requested information or services.

1. Scope of this Privacy Policy

This policy applies to personal data processed by Gardeners Barnehurst in connection with quotations, bookings, service delivery, customer support, invoicing, and related business administration. It covers data collected through direct communication, service requests, online or offline enquiries, and interactions that arise during the provision of gardening services.

We are committed to handling personal data in accordance with the UK GDPR and the Data Protection Act 2018. We aim to keep information accurate, secure, and used only for legitimate and specified purposes.

2. What Data We Collect

We may collect and process the following categories of personal data:

Identity details such as name and title.
Contact details such as address, email address, and telephone number.
Service information such as gardening preferences, requested work, property access notes, and appointment details.
Payment and billing data such as payment records, invoice details, and transaction references.
Communication records including emails, call notes, messages, and complaint correspondence.
Technical or usage data if we receive it through digital systems, such as basic website interaction logs or device information.
Special category data only where strictly necessary and where you have provided it or it is required for legal reasons, for example, information relating to access needs or health-related considerations affecting service delivery.

We do not collect more information than we need. Where possible, we keep data collection limited to what is necessary to provide a professional and reliable gardening service.

3. How We Use Personal Data

Gardeners Barnehurst uses personal data for the following purposes:

To provide quotations and assess service requests.
To arrange and deliver gardening services.
To manage customer accounts and service records.
To send invoices, process payments, and maintain financial records.
To communicate about appointments, changes, updates, or issues related to services.
To handle enquiries, feedback, or complaints.
To meet legal, tax, accounting, and insurance obligations.
To improve our services, operations, and customer experience.

We only use personal data for stated and lawful purposes. If we need to use data for a new purpose that is incompatible with the original one, we will assess whether a new lawful basis is required.

4. Lawful Basis for Processing

Under data protection law, we must have a valid lawful basis for each use of personal data. Gardeners Barnehurst relies on the following bases where appropriate:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes responding to requests, arranging services, carrying out gardening work, invoicing, and managing customer relationships connected to the service agreement.

Legal Obligation

We may process data to comply with legal requirements, including tax, accounting, record-keeping, and regulatory obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include maintaining service records, preventing fraud, improving business operations, and responding to customer queries. We always consider whether the processing is proportionate and limited to what is necessary.

Consent

In limited cases, we may rely on your consent, for example if we need to process optional information that is not required for the service. Where consent is used, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the reason for processing.

Typical retention practices may include keeping customer and invoicing records for several years after the end of the service relationship to meet tax and legal obligations. Communication records may be retained for a shorter or similar period depending on their relevance, while information no longer needed is securely deleted or anonymised.

Where data is no longer required, we take reasonable steps to ensure it is disposed of securely. We do not retain personal data indefinitely.

6. Processors and Sharing of Data

We may share personal data with trusted third-party service providers who act as data processors on our behalf. These processors only process data according to our instructions and are required to protect it appropriately.

Examples of processors may include:

Payment service providers used to process transactions.
Accounting or bookkeeping providers used to manage financial records.
IT and data storage providers used for secure record keeping and communications.
Administrative service providers that help manage bookings or customer correspondence.

We may also disclose data where necessary to comply with legal obligations, enforce our rights, protect the safety of our staff or customers, or respond to lawful requests from public authorities. We do not sell personal data.

7. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, destruction, or misuse. These measures may include access controls, secure storage, restricted permissions, and procedures designed to reduce the risk of unauthorised disclosure.

Although we take security seriously, no system can be guaranteed completely secure. If a data incident occurs that affects your rights and freedoms, we will respond in line with our legal obligations.

8. Your Rights Under GDPR

You have important rights over your personal data. Subject to legal conditions and exemptions, these include the following:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to request transfer of certain data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your data rights have not been respected. We encourage customers to raise concerns so we can review and address them promptly.

9. Children’s Data

Our services are aimed at adults and property-related customers. We do not knowingly collect personal data from children unless it is unavoidable and lawful in the context of a service request. If we become aware that data has been collected incorrectly, we will take appropriate steps to delete or safeguard it.

10. International Transfers

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place so that the data continues to receive a level of protection consistent with applicable law. Any such transfers will be limited to what is necessary and subject to suitable contractual or legal protections.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, service practices, or operational needs. The most current version will apply to the processing of personal data. We encourage customers to review it periodically so they remain informed about how their data is handled.

12. Summary of Our Commitment

Gardeners Barnehurst respects your privacy and treats your personal data with care. We collect only the information needed to provide gardening services, rely on lawful bases for every processing activity, keep data only as long as necessary, and work with processors that meet appropriate privacy standards. We also recognise and support your rights under data protection law.

This Privacy Policy applies to all Gardeners Barnehurst customers in area.