Privacy Policy - Gardeners Sydenham Hill

This Privacy Policy explains how Gardeners Sydenham Hill collects, uses, stores, shares, and protects personal data. It applies to all Gardeners Sydenham Hill customers in the local area, including individuals who enquire about, book, receive, or pay for gardening services. We are committed to handling personal information in a lawful, fair, and transparent way, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, making an enquiry, or otherwise providing information to us, you acknowledge that your data may be processed as described in this policy. We aim to keep all personal data accurate, secure, and only retained for as long as necessary.

1. Information We Collect

We collect only the data needed to provide and manage our services effectively. Depending on your interaction with us, this may include:

Identity details such as your name and, where relevant, business name.
Contact details such as phone number, email address, and service address.
Service information including the type of gardening work requested, appointment preferences, property access notes, and any special instructions.
Payment-related information such as invoicing details and records of payments made.
Communication records including emails, messages, call notes, and customer feedback.
Website or device data if you visit our online pages, which may include basic technical information such as browser type or IP address where applicable.

We do not intentionally collect special category data unless it is provided voluntarily and is necessary for a specific service request, and even then only where a lawful basis applies.

2. How We Use Your Data

We use personal data for clearly defined purposes connected to our services. These purposes include:

Responding to enquiries and providing quotes.
Planning, delivering, and managing gardening services.
Scheduling appointments and managing customer records.
Issuing invoices, processing payments, and maintaining accounting records.
Sending service updates or important administrative messages.
Handling complaints, disputes, or follow-up requests.
Meeting legal, tax, accounting, and insurance obligations.
Improving our customer service and operational efficiency.

We will only use your data for the purpose for which it was collected unless we reasonably consider that another compatible purpose applies.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Gardeners Sydenham Hill relies on the following lawful bases depending on the activity:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, providing services, managing bookings, and handling payments.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include managing customer relationships, improving service quality, preventing fraud, or maintaining internal records.

Legal Obligation

We may process and retain certain information where required to comply with legal duties, such as tax reporting, accounting requirements, and regulatory obligations.

Consent

In limited situations, we may rely on your consent, for example if you agree to receive certain optional communications. Where consent is used, you may withdraw it at any time.

4. Data Sharing and Processors

We do not sell personal data. However, we may share limited information with trusted third parties who help us run our services. These third parties act as data processors or, in some cases, independent controllers. We only share the minimum information required.

Processors or service providers may include:

Payment processors that handle card or electronic payments securely.
Accounting and bookkeeping providers that help manage invoices and financial records.
IT and cloud service providers that store data or support business systems.
Communication service providers that assist with emails, messages, or customer administration.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

All processors are expected to protect personal data, use it only on our instructions, and apply appropriate security measures. We may also disclose data where required by law, court order, or lawful request from public authorities.

5. Data Retention

We keep personal data only for as long as needed for the purpose it was collected, including for legal, accounting, and reporting requirements. Retention periods vary depending on the type of record and the reason for holding it.

Customer and service records are generally retained for the duration of the working relationship and for a reasonable period afterward to manage follow-up queries or disputes.
Financial and transaction records may be retained for the period required by tax and accounting laws.
Communication records are retained only as long as needed to resolve service matters or maintain business records.

When data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include restricted access controls, secure storage, password protection, and staff awareness procedures.

Although we work to protect your information, no method of transmission or storage is completely secure. If a personal data breach occurs, we will act promptly and in accordance with legal requirements.

7. Your Rights

As a data subject, you have rights under UK GDPR. These rights may apply depending on the circumstances and any legal exemptions. They include:

The right to be informed about how your data is used.
The right of access to request a copy of your personal data.
The right to rectification to correct inaccurate or incomplete information.
The right to erasure in certain circumstances, sometimes called the right to be forgotten.
The right to restrict processing in certain situations.
The right to data portability where processing is based on consent or contract and is carried out by automated means.
The right to object to processing based on legitimate interests or direct marketing.
Rights related to automated decision-making, where applicable.

If you wish to exercise any of these rights, we will review your request and respond within the timeframe required by law. We may need to confirm your identity before acting on a request.

8. Cookies and Similar Technologies

If you interact with our digital services, cookies or similar technologies may be used for basic functionality, analytics, or performance purposes. Where required, we will provide appropriate notice and choice regarding non-essential cookies. Any such tools are used only to support service operation and improve user experience.

9. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under applicable data protection law.

10. Children’s Data

Our services are directed to adults and property owners, occupiers, or authorised representatives. We do not knowingly collect personal data from children unless it is incidental to a lawful service arrangement and is necessary for the requested work. If we become aware that data has been collected improperly, we will take appropriate steps to remove or protect it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. The latest version will apply to your use of our services. We encourage customers to review this policy periodically to stay informed about how their data is handled.

12. Summary of Our Approach

Gardeners Sydenham Hill is committed to processing personal data with care, integrity, and accountability. We collect only what we need, use it for legitimate service-related purposes, retain it only as long as necessary, and share it only with trusted processors or where legally required. We respect your rights and strive to maintain a high standard of privacy protection for every customer in the area.

Effective for all Gardeners Sydenham Hill customers in the area.