Privacy Policy - Gardeners Highams Park

This Privacy Policy explains how Gardeners Highams Park collects, uses, stores, shares, and protects personal data for all customers in the Highams Park area. It applies to every individual who enquires about, books, receives, or manages gardening services provided by Gardeners Highams Park in the area. We are committed to handling personal information in a lawful, fair, and transparent way in line with the UK GDPR and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to all Gardeners Highams Park customers in the area, including prospective customers, current customers, and former customers. It also applies to individuals who communicate with us on behalf of a customer, such as property managers, tenants, landlords, or family members arranging services.

2. Information we collect

We collect only the personal data needed to respond to enquiries, deliver gardening services, manage appointments, and maintain our business records. The types of information we may collect include:

Identity details such as your name or the name of your household or business.
Contact details such as address, phone number, and email address.
Service details such as the type of gardening work requested, site access needs, preferred timings, and service history.
Billing and transaction information such as payment status, invoicing notes, and records of amounts paid or due.
Communication records such as emails, messages, call notes, complaint details, and service feedback.
Technical information if you visit any online form connected to our services, such as basic device or usage data collected through cookies or similar technologies, where used.

We do not intentionally collect special category data unless you provide it to us for a specific reason, and only where we have a lawful basis to do so. Please avoid sharing sensitive information unless it is necessary for your request.

3. How we use personal data

Gardeners Highams Park uses personal data for the following purposes:

to respond to enquiries and provide quotes;
to arrange, deliver, and manage gardening services;
to communicate about appointments, changes, and service updates;
to issue invoices and manage payments;
to keep internal records of work completed and customer preferences;
to handle complaints, disputes, or service concerns;
to meet legal, tax, insurance, and accounting obligations;
to improve our services and customer experience;
to protect the security and integrity of our business operations.

We only use your information where the use is necessary and proportionate. Where possible, we use the minimum amount of data needed to complete each task.

4. Lawful basis for processing

Under data protection law, we must have a lawful basis to process personal data. Gardeners Highams Park relies on the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotes, arranging gardening services, carrying out work, and managing payment.

Legitimate interests

We may process data where it is in our legitimate business interests and your interests and rights do not override those interests. This may include keeping business records, improving service quality, dealing with customer queries, or maintaining security. We always consider whether the processing is necessary and whether it could reasonably affect your privacy.

Legal obligation

We process certain information when required to meet legal obligations, including tax, accounting, insurance, and record-keeping requirements.

Consent

In limited cases, we may rely on your consent, for example where you voluntarily provide optional information or agree to specific communications. Where consent is used, you may withdraw it at any time.

5. Sharing and processors

We may share personal data with trusted third parties who help us run our services. These organisations act as processors or, in some cases, independent controllers. They are only permitted to use personal data for the agreed purpose and must keep it secure.

Examples of processors may include:

IT and hosting providers who support data storage or email systems;
payment service providers who handle transactions securely;
accounting or bookkeeping services that assist with financial records;
job management or scheduling tools used to organise appointments;
professional advisers such as insurers, lawyers, or accountants where necessary.

We may also disclose data if required by law, court order, or a public authority with lawful powers. We do not sell your personal data.

6. International transfers

If any processor stores or accesses data outside the UK, we take appropriate steps to protect that data. These steps may include using approved legal safeguards, such as standard contractual clauses or equivalent transfer mechanisms, to ensure your information remains protected to an appropriate standard.

7. Retention of personal data

We retain personal data only for as long as necessary for the purpose it was collected and to satisfy any legal, accounting, or reporting requirements. Retention periods can vary depending on the type of information and the reason it is held.

Typical retention approach:

Customer enquiry records are usually kept for a limited period after the enquiry ends, unless a longer period is needed.
Service and job records may be retained for the duration of the customer relationship and for a reasonable period afterwards.
Financial records are retained for the period required under tax and accounting law.
Complaint or dispute records may be kept longer where needed to resolve issues or defend legal claims.

When personal data is no longer needed, it is securely deleted or anonymised.

8. Data security

We use appropriate technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and limiting access to those who need the information to perform their work. While no system can be guaranteed completely secure, we work to keep your data protected and handled responsibly.

9. Your rights

Under data protection law, you have rights over your personal data. These may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to ask us to delete your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain information in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

These rights are not absolute and may be subject to legal conditions or exemptions. If you make a request, we may need to verify your identity before responding.

10. Children’s data

Our services are intended for adults arranging gardening work. We do not knowingly collect personal data from children, and we do not intentionally market services to them. If we become aware that we have inadvertently collected a child’s data without a valid reason, we will take appropriate steps to remove it.

11. Cookies and similar technologies

If we use online tools that rely on cookies or similar technologies, they are used only where necessary for basic functionality, analytics, or to improve usability. Where required, we will provide appropriate notice and obtain consent before placing non-essential cookies. You can usually control cookies through your browser settings.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we handle data. Any updated version will apply from the date it is published. We encourage customers to review it periodically so they remain informed about how their information is used.

13. Contact and complaints

If you want to exercise your rights, raise a concern, or ask a question about this Privacy Policy, you can do so through the normal customer communication channels used for our services. If you remain dissatisfied, you also have the right to complain to the UK Information Commissioner’s Office (ICO).

Summary: Gardeners Highams Park processes customer data lawfully, transparently, and securely, using it only for service delivery, administration, and legal compliance.