Privacy Policy - Gardeners Southall

This Privacy Policy explains how Gardeners Southall collects, uses, stores, shares, and protects personal data belonging to our customers in the Southall area. It applies to all Gardeners Southall customers in the area, including individuals who request gardening services, receive quotations, book appointments, or otherwise interact with our business. We are committed to handling personal information in a lawful, fair, and transparent way, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We respect your privacy and recognise that personal data must be managed carefully. This policy sets out what information we collect, why we collect it, the lawful basis we rely on, how long we keep it, who may process it on our behalf, and the rights available to you. It is written to be clear and accessible, while still reflecting the responsibilities that apply to a business providing local gardening services.

1. Information We Collect

Gardeners Southall only collects data that is necessary for us to provide services, manage our business, and meet legal obligations. The type of information we may collect includes:

Identity details such as your name, and where applicable the name of your household, business, or property manager.
Contact information such as your address, email address, and telephone number.
Service information including details about the gardening work requested, property access notes, preferences, and service history.
Payment information such as billing records, invoices, and payment confirmation. We do not store card details unless a secure third-party payment provider does so on our behalf.
Communication records including messages, enquiries, quotations, service updates, complaints, and feedback.
Technical data if you communicate with us electronically, which may include basic information such as device or browser data collected by email systems or website tools.

We do not intentionally collect special category data unless it is absolutely necessary and you have chosen to provide it, or unless a legal requirement applies. Special category data includes information such as health details, religious beliefs, or biometric data. If such information is ever shared with us unintentionally, we will treat it with extra care and restrict access where appropriate.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotations, carry out gardening services, and manage customer bookings.
To communicate with you about appointments, service updates, and any issues relating to your request.
To keep accurate records of work completed and payments made.
To respond to questions, complaints, or follow-up requests.
To improve our services, customer experience, and business operations.
To comply with legal, accounting, tax, and insurance obligations.
To protect against fraud, misuse, or security incidents.

We only use data in ways that are compatible with the original purpose for which it was collected. Gardeners Southall will never sell your personal information.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis before processing personal data. Depending on the context, Gardeners Southall relies on one or more of the following lawful bases:

Contract

We process your data when it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. For example, we need your contact details and address to provide a quote or complete gardening work at your property.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining service records, improving our operations, and ensuring the safe delivery of services.

Legal Obligation

Some information must be retained or processed to meet legal requirements, such as tax records, accounting obligations, health and safety duties, or insurance-related record keeping.

Consent

In limited cases, we may rely on your consent, for example where you voluntarily provide information that is not necessary for the service itself. When consent is used, you can withdraw it at any time.

We choose the lawful basis carefully depending on the task involved. If we ever need to rely on another lawful basis, we will assess it before processing begins.

4. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose it was collected, unless a longer period is required by law. Retention periods depend on the type of record and the reason it is held.

Customer service records are typically retained for the duration of the business relationship and for a reasonable period afterwards.
Financial and tax records are kept in line with legal and accounting requirements.
Communication records may be kept for a limited period to support customer service, dispute resolution, and quality control.
Marketing-related records, where applicable, are retained until you object or withdraw consent.

When data is no longer needed, it is securely deleted, anonymised, or destroyed. We regularly review records to ensure we are not keeping data for longer than necessary. We only retain information for a proportionate time and apply the principle of data minimisation wherever possible.

5. Processors and Sharing of Data

Gardeners Southall may use third-party service providers, sometimes known as data processors, to help us operate efficiently. These processors may handle data on our instructions only and are required to protect it appropriately.

Examples of processors may include:

Accounting or bookkeeping software providers.
Email, scheduling, and communication service providers.
Cloud storage or document management services.
Secure payment processing providers.
IT support or system maintenance providers.

We do not allow processors to use personal data for their own purposes. They may only process information in accordance with our instructions and under appropriate contractual safeguards. Where necessary, data may also be shared with:

Professional advisers such as accountants, insurers, or legal advisers.
Public authorities, regulators, or law enforcement where required by law.
Other parties where you have given permission or where disclosure is otherwise lawful.

Any transfer or sharing of personal data is handled with care and only when there is a valid reason to do so.

6. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the legal basis for processing.

Right of access

You can request confirmation of whether we hold your data and ask for a copy of that information.

Right to rectification

You can ask us to correct inaccurate or incomplete personal data.

Right to erasure

You may request deletion of your data in certain situations, such as where the data is no longer needed for the original purpose and there is no legal reason to keep it.

Right to restrict processing

You may ask us to limit how we use your data in specific circumstances.

Right to object

You may object to processing based on legitimate interests, including any direct marketing activity where applicable.

Right to data portability

In some cases, you can request that your data be provided in a structured, commonly used format or transferred to another controller.

Right to withdraw consent

If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

You also have the right to raise concerns with the UK Information Commissioner’s Office if you believe your data has not been handled properly. We encourage you to contact us first so we can try to resolve any issue promptly and fairly.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, limited permissions, and careful management of records. While no system can be guaranteed as completely secure, we take reasonable steps to safeguard the information entrusted to us.

Access to personal data is limited to those who need it for legitimate business purposes. Where third parties are used, we expect them to maintain similar standards of security and confidentiality.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our data handling practices. Any updated version will replace the previous one once it becomes effective. We encourage customers to review this policy periodically so they remain informed about how their information is used.

9. Our Commitment to Privacy

Gardeners Southall is committed to treating personal information with respect, responsibility, and care. We aim to keep our data practices simple, lawful, and transparent. If you are a customer in the Southall area, you can be assured that we will use your information only where it is needed to provide our services, manage our business, and meet our obligations.

In summary, this policy is designed to protect your privacy while allowing us to deliver reliable gardening services in a professional manner. We will continue to review and improve our procedures so that your data remains handled in a lawful and secure way.