Privacy Policy - Gardeners Chislehurst

This Privacy Policy explains how Gardeners Chislehurst collects, uses, stores, shares, and protects personal data relating to our customers and enquiries. It applies to all Gardeners Chislehurst customers in the area, including anyone who uses our gardening services, requests a quotation, makes an enquiry, or otherwise interacts with us in connection with our services.

We are committed to handling personal data lawfully, fairly, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to give clear information about what data we process, why we process it, how long we keep it, who may process it on our behalf, and what rights individuals have in relation to their personal information.

1. Who We Are

Gardeners Chislehurst provides gardening and related outdoor maintenance services to residential and commercial customers in the local area. For the purposes of data protection law, we act as the data controller for the personal data we collect and use in the course of providing our services. This means we determine the purposes and methods of processing personal data.

This policy applies where we collect personal data from customers, prospective customers, suppliers, site visitors, and anyone else whose information is processed in connection with our business activities.

2. Personal Data We Collect

We only collect personal data that is necessary for legitimate business and service purposes. Depending on your interaction with us, we may collect the following categories of information:

Identity details such as name and title.
Contact details such as address, email address, and telephone number.
Service details relating to your gardening requirements, preferences, property type, and instructions.
Billing and payment information where needed to process invoices and payments.
Communication records including correspondence, notes from calls, and messages exchanged.
Technical data such as basic website or device information if you submit an enquiry online, where applicable.
Contract and service history including bookings, visits, quotes, completed work, and customer feedback.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, or we are required to process it for legal reasons. Special category data may include information about health, religion, or other sensitive personal details. Where such information is received accidentally in communications, we will handle it carefully and only use it where lawful and necessary.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange and deliver gardening services.
To manage customer accounts, bookings, and service records.
To process payments, invoices, and accounting records.
To communicate about appointments, changes, or service-related matters.
To maintain internal administration and business operations.
To comply with legal obligations, tax requirements, and record-keeping duties.
To improve the quality, safety, and efficiency of our services.

We will only use personal data for the purposes for which it was collected unless we reasonably consider that we need to use it for another compatible purpose. If we need to use it for an unrelated purpose, we will explain the legal basis for doing so.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Gardeners Chislehurst relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotations, arranging services, delivering gardening work, and managing payment arrangements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include handling customer communications, maintaining service records, preventing fraud, improving operations, and ensuring effective business administration.

Legal Obligation

We may process personal data where necessary to comply with legal obligations, such as tax, accounting, insurance, or regulatory requirements.

Consent

In limited situations, we may rely on your consent, for example where we ask to use optional information in a particular way. If we rely on consent, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before it was withdrawn.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. Retention periods depend on the type of data and the reason for processing.

Customer and contract records are typically retained for the duration of the service relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law.
Enquiry records may be retained for a limited period if no service is taken up, to manage follow-up, administration, or internal reporting.
Communication records are kept where needed to evidence instructions, service history, or dispute resolution.

When personal data is no longer needed, we will securely delete, anonymise, or archive it as appropriate. We review retention practices periodically to ensure we do not keep information longer than necessary.

6. Processors and Third Parties

We may use trusted third parties to process personal data on our behalf. These parties act as processors and only handle data according to our instructions and applicable legal safeguards. Processors may include:

Payment service providers.
Accounting and bookkeeping service providers.
IT and cloud storage providers.
Communication and scheduling tools.
Professional advisers such as insurers or legal advisers where necessary.

We may also disclose personal data to public authorities, regulators, or law enforcement where required by law. Any third party with access to personal data is expected to protect it appropriately and use it only for the specified purpose.

Gardeners Chislehurst does not sell personal data.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures are designed to reflect the nature of the data and the risks associated with processing. While no system can be guaranteed completely secure, we take reasonable steps to keep personal information safe and confidential.

8. Your Rights

You have a number of rights under data protection law in relation to your personal data. These rights may be subject to certain conditions and exemptions:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete information.
Right to erasure – to request deletion of your personal data in certain circumstances.
Right to restrict processing – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests, including direct marketing where relevant.
Right to data portability – to request transfer of certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent.

If you wish to exercise any of these rights, we will respond in accordance with data protection law. We may need to verify your identity before fulfilling a request.

9. International Transfers

Where personal data is transferred outside the United Kingdom, we will take steps to ensure appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other legally recognised transfer mechanisms. We will only transfer data where necessary and lawful.

10. Complaints

If you are concerned about how we handle your personal data, you have the right to raise a complaint with the relevant data protection authority. We encourage you to contact us first so that we can address your concerns promptly and fairly. We aim to resolve issues in a professional and transparent manner.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updates will take effect when published. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

12. Summary

Gardeners Chislehurst processes personal data only when necessary, lawfully, and with respect for individual rights. We collect limited information to provide services, manage enquiries, fulfil contracts, and meet legal obligations. We retain data only for as long as needed, use trusted processors under appropriate safeguards, and support the rights of all customers in the area.