Privacy Policy - Gardeners Upminster

Effective for all Gardeners Upminster customers in the area. This Privacy Policy explains how personal data is collected, used, stored, shared, and protected when you use our gardening services. It is written to meet the principles of the UK GDPR and the Data Protection Act 2018. We are committed to handling personal information fairly, transparently, and securely.

1. Scope of this Privacy Policy

This policy applies to all Gardeners Upminster customers in area, including anyone who requests a quote, books a service, receives ongoing maintenance, or communicates with us about gardening work. It also applies to site visitors, prospective customers, and anyone whose information is provided to us in connection with a service request.

We only collect information that is relevant to providing, managing, and improving our gardening services. We do not collect more data than we need, and we use personal information only for legitimate service-related purposes.

2. Data We Collect

We may collect the following categories of personal data:

Identity details such as name and title.
Contact details such as address, phone number, and email address.
Service information such as property access notes, garden preferences, requested services, and appointment history.
Billing and payment information such as invoice details, payment status, and transaction records.
Communication records including messages, notes from consultations, and records of customer service interactions.
Technical data where relevant, such as basic website usage information or device-related identifiers if you submit an enquiry online.

We may also collect limited information about properties to help us deliver services safely and efficiently, such as access arrangements, garden layout details, or specific instructions about plant care. Where you provide information about another person, you must ensure you have the right to do so.

3. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange, deliver, and manage gardening services.
To maintain service records and customer preferences.
To issue invoices, process payments, and manage accounts.
To communicate about appointments, changes, or service updates.
To handle complaints, disputes, and follow-up requests.
To improve our services, internal processes, and customer experience.
To meet legal, tax, accounting, and insurance obligations.

We may also use data for security, fraud prevention, and administration. Any marketing communication, where permitted, will be limited and respectful. You can object to direct marketing at any time.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing your data. Depending on the situation, we rely on one or more of the following:

Contract

We process your personal data when it is necessary to enter into or perform a contract. This includes booking services, carrying out gardening work, managing ongoing maintenance, and handling payment or invoicing.

Legal Obligation

We may process data to comply with tax, accounting, insurance, recordkeeping, and other legal requirements. This can include retaining invoices and transaction records for statutory periods.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights. This may include service administration, business planning, quality improvement, fraud prevention, and keeping accurate records. We balance our interests against your privacy rights before relying on this basis.

Consent

Where required, we will ask for your consent, for example for certain types of marketing or optional communications. If we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We do not sell personal data. We may share information only when necessary and in a controlled manner. In some cases, we use trusted third-party processors who handle data on our behalf under written agreements and appropriate security safeguards.

Processors may include:

Payment providers for processing card or electronic payments.
Accounting and bookkeeping providers for invoice management and financial records.
IT and cloud service providers for data storage, email, and business administration systems.
Scheduling or customer management tools used to organise appointments and service records.
Professional advisers such as accountants, insurers, or legal advisers, where necessary.

We may also disclose information where required by law, to respond to a lawful request, to protect our rights, or to prevent harm. Any processor we use must only process data according to our instructions and must implement suitable technical and organisational measures.

6. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected and for any legal or operational requirements. Retention periods depend on the type of information and the reason it is held.

Customer service records are kept while services are ongoing and for a reasonable period after completion.
Financial and tax records are retained for the period required by law.
Communication records may be kept to resolve queries, maintain service history, or support future bookings.
Marketing data is kept until you withdraw consent or object, where applicable.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. We regularly review stored records to ensure we are not holding information for longer than necessary.

7. Data Security

We take appropriate security measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, password protection, staff confidentiality practices, and restricted use of third-party systems.

Although no system can be guaranteed completely secure, we work to maintain an appropriate level of protection based on the nature of the data and the risks involved. We also expect any processors to maintain equivalent safeguards.

8. Your Rights Under GDPR

You have the following rights in relation to your personal data, subject to conditions and exemptions under data protection law:

Right of access – you can ask for a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in certain circumstances, you can ask us to delete your data.
Right to restriction – you can ask us to limit how we use your data in some situations.
Right to data portability – you can request certain data in a commonly used, machine-readable format.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed. We encourage you to raise any concerns directly so we can review and resolve them where possible.

9. Children’s Data

Our services are intended for adult customers or those authorised to arrange gardening work on behalf of a property. We do not knowingly collect data from children in a way that would require special handling, and we do not intentionally market our services to children.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or the way we handle personal data. Any updates will take effect when published. We encourage customers to review this policy periodically to stay informed about how we protect privacy.

11. Summary of Our Commitment

We are committed to processing personal information responsibly and in line with data protection principles. For Gardeners Upminster customers in area, this means we collect only what is needed, use it for clear and lawful purposes, keep it no longer than necessary, and protect it with appropriate safeguards. We aim to be transparent, fair, and respectful in every stage of data handling.

Your privacy matters to us, and we will continue to treat your information with care.