Privacy Policy - Gardeners North End

This Privacy Policy explains how Gardeners North End collects, uses, stores, shares, and protects personal data for all customers in the North End area. It applies to every customer, enquiry, and service interaction handled by Gardeners North End in this area. We are committed to handling personal information fairly, lawfully, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We recognise that privacy is important. This policy sets out what information we may collect, why we collect it, the lawful basis we rely on, how long we keep data, who may process data on our behalf, and what rights individuals have regarding their personal information.

1. Scope of This Policy

This policy applies to all personal data processed by Gardeners North End in connection with garden services, site visits, quotations, bookings, customer communication, invoicing, and related administration. It covers current customers, prospective customers, and people who have previously used our services in the North End area.

Personal data means any information that can identify a living individual either directly or indirectly. This may include names, contact details, service addresses, payment information, and records of communications.

2. Information We Collect

Gardeners North End may collect and process the following categories of personal data:

Identity details: name and, where needed, title.
Contact details: phone number, email address, and service address.
Service information: details about garden maintenance requests, landscaping preferences, booking history, and property access notes.
Billing and payment data: invoice records, payment confirmations, and transaction references.
Communication records: emails, messages, notes from calls, and written instructions.
Technical data: limited information such as IP address or device details if collected through online forms or digital systems used for administration.
Operational records: job schedules, service notes, complaint records, and customer feedback.

We only collect data that is necessary and relevant for providing our services, managing our relationship with customers, and complying with legal obligations.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide quotations and assess service requests;
to arrange and deliver gardening services;
to manage appointments and customer communication;
to prepare invoices and process payments;
to record service preferences and site-specific instructions;
to deal with complaints, queries, and service follow-up;
to maintain business records and internal administration;
to meet legal, accounting, tax, and insurance requirements;
to improve service quality and operational planning.

We do not use personal data for unrelated purposes unless we have a lawful basis to do so and, where required, appropriate notice has been given.

4. Lawful Basis for Processing

Under data protection law, Gardeners North End must have a lawful basis for processing personal data. Depending on the circumstances, we rely on one or more of the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with a customer. This includes preparing quotes, confirming bookings, carrying out garden work, and managing payment arrangements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining customer records, improving service delivery, preventing fraud, and managing day-to-day business operations.

Legal Obligation

Some data must be retained or processed because we are required to do so by law, including accounting, tax, insurance, and record-keeping requirements.

Consent

In limited cases, we may rely on consent, for example where it is needed for optional communications or certain types of data use. When consent is used, it will be freely given, specific, informed, and easy to withdraw.

5. Sharing Data and Processors

Gardeners North End may share personal data with trusted third parties when necessary to provide services or operate the business. These parties act as processors or independent controllers depending on the situation.

Examples of processors may include:

IT and cloud service providers that store emails, files, or administrative records;
accounting and invoicing systems used to manage payments and bookkeeping;
payment service providers that process card or transfer transactions;
communication tools used for scheduling and customer messages;
professional advisers such as accountants, insurers, or legal advisers where necessary;
subcontractors or service partners who need limited information to complete work at a property.

We require processors to handle data securely, only use it for authorised purposes, and take appropriate technical and organisational measures to protect it. We do not sell personal data.

Where data is shared with another organisation acting as an independent controller, that organisation is responsible for its own privacy practices. We only share data where necessary and lawful.

6. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required by law. Retention periods depend on the type of information and our legal and operational needs.

Typical retention periods may include:

customer records and service history: retained for the duration of the relationship and for a reasonable period afterwards;
financial and tax records: retained in line with statutory accounting requirements;
communications and complaints: retained long enough to resolve the issue and for business reference;
consent-based data: kept until consent is withdrawn or the data is no longer needed.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify an individual.

7. Data Security

We take the security of personal data seriously and use reasonable measures to prevent unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and careful record handling.

Although no method of transmission or storage is completely risk-free, we aim to use appropriate safeguards that reflect the nature of the data and the risks involved.

8. User Rights

Individuals whose data we process have a number of rights under data protection law. These rights may apply in full or in part depending on the circumstances and any legal exemptions.

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain situations.
Right to restriction: to ask us to limit how we use your data in certain cases.
Right to data portability: to receive certain data in a structured, commonly used format.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

We will respond to valid requests within the time limits set by law. To protect privacy, we may need to verify identity before acting on a request.

9. Children’s Data

Gardeners North End does not knowingly collect personal data from children for marketing or unrelated purposes. Where services involve properties occupied by families, we only process information that is necessary for arranging and completing work.

10. International Transfers

If any processor stores or accesses data outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that adequate protections are in place.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or the way we process data. The most current version will apply to all Gardeners North End customers in the area.

By using our services, you acknowledge that you have read this policy and understand how your personal data is handled.

Gardeners North End is committed to respecting privacy, keeping personal information secure, and using data only where there is a valid and lawful reason to do so.