Privacy Policy - Gardeners Yiewsley

Gardeners Yiewsley is committed to protecting the privacy and personal data of all customers in the Yiewsley area. This Privacy Policy explains how personal information is collected, used, stored, shared, and protected when we provide gardening and related services. It applies to all Gardeners Yiewsley customers in the area, including prospective customers, current customers, and people who have previously enquired about our services.

We handle personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our aim is to process information fairly, lawfully, and transparently, while only collecting what is necessary for the services we provide.

1. Information We Collect

We collect only the information needed to manage enquiries, deliver services, and maintain proper business records. The types of data we may collect include:

Identity details such as your name and title.
Contact details such as phone number, email address, and service address.
Service information such as garden preferences, requested work, appointment notes, and instructions.
Payment and invoicing information such as billing details and transaction records.
Communication records such as emails, messages, or notes from telephone conversations.
Technical data such as IP address or browser information if you contact us through an online form or digital service channel.

We do not intentionally collect special category data unless it is required in a specific situation and we have an appropriate lawful basis to do so. Where such data is not necessary, we ask that you do not share it.

2. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To schedule and deliver gardening services.
To manage customer accounts and service records.
To issue invoices, process payments, and maintain financial records.
To communicate about appointments, service changes, and customer requests.
To improve our service quality and customer experience.
To meet legal, accounting, and regulatory obligations.

We only use personal information for the purposes for which it was collected, unless we reasonably determine that it is needed for a compatible purpose or required by law.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Gardeners Yiewsley relies on the following lawful bases depending on the context:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotes, arranging services, carrying out gardening work, and managing invoices or payment records.

Legal Obligation

We process certain information to comply with legal requirements, including tax, accounting, record-keeping, and other statutory duties.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include maintaining service records, preventing fraud, improving operations, or handling customer communications.

Consent

In limited situations, we may rely on your consent, for example where you choose to receive certain optional communications. Where consent is used, you may withdraw it at any time.

4. Sharing and Processors

We may share personal data with trusted third parties that help us operate our business. These third parties act as data processors or independent controllers depending on the service they provide. Processors may include:

Payment providers that handle secure payment processing.
Accounting and bookkeeping providers that assist with invoicing and financial record management.
IT and cloud storage providers that support data storage, email, and secure system operation.
Administrative service providers that help manage business communications or customer scheduling.
Professional advisers such as accountants or legal advisers where required.

We ensure that processors only act on our instructions and are required to protect your data appropriately. They must use suitable technical and organisational measures to safeguard information. We do not sell personal data.

We may also disclose information if required by law, court order, regulatory request, or to protect our legal rights, customers, staff, or business operations.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and to meet legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the nature of the service.

In general:

Customer enquiry records are kept for a limited period if no service is booked.
Service and contract records are retained while the customer relationship remains active and for a reasonable period afterwards.
Financial and tax-related records are retained for the period required by law.
Communication records are kept only as long as needed to manage the service or resolve a query.

When data is no longer needed, we securely delete, anonymise, or destroy it.

6. Data Security

We take appropriate steps to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, password protection, secure storage, and limiting access to those who need it for business purposes.

While no method of transmission or storage can be guaranteed to be completely secure, we work to reduce risk and maintain reasonable safeguards suitable to the nature of the information held.

7. Your Rights

As a data subject, you have rights under data protection law. These rights may apply in different circumstances and may be subject to legal exceptions. You may have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete information.
Erase your data in certain situations.
Restrict processing in certain circumstances.
Object to processing based on legitimate interests.
Data portability where processing is based on consent or contract and carried out by automated means.
Withdraw consent where processing is based on consent.

You also have the right to raise concerns with the Information Commissioner's Office if you believe your data has not been handled in line with data protection law.

8. Children’s Data

Our services are directed at adult customers. We do not knowingly collect personal data from children unless it is necessary in connection with a service request and we have a lawful reason to process it. If we become aware that we have collected data that is not appropriate to retain, we will take steps to delete it.

9. International Transfers

Where any processor or service provider stores or accesses data outside the UK, we ensure suitable safeguards are in place. These may include approved contractual protections or other lawful transfer mechanisms designed to keep your information protected.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. Any revised version will apply from the date it is issued. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

11. Summary of Our Approach

Gardeners Yiewsley processes personal information carefully, proportionately, and only where there is a clear lawful basis. We collect limited data to provide gardening services, maintain records, and meet legal obligations. We use trusted processors, retain data only as long as needed, and respect your rights under data protection law.

Privacy matters to us. We aim to ensure that every customer in Yiewsley receives a service that is not only reliable and professional, but also respectful of personal information and privacy expectations.