Privacy Policy - Gardeners East Barnet

Gardeners East Barnet is committed to protecting the privacy and personal data of all customers in the East Barnet area. This Privacy Policy explains how we collect, use, store, share, and safeguard personal information when providing gardening services. It applies to all Gardeners East Barnet customers in the area, including prospective customers, existing customers, and anyone who contacts us about our services.

1. Who We Are

For the purposes of the UK GDPR and the Data Protection Act 2018, Gardeners East Barnet acts as the data controller for the personal data we collect in connection with our gardening services. This means we decide how and why your data is used, and we are responsible for ensuring that it is handled lawfully, fairly, and transparently.

2. Personal Data We Collect

We only collect data that is necessary to provide and manage our services. The types of personal data we may collect include:

Identity details such as your name or business name.
Contact details such as address, telephone number, and email address.
Service information such as the type of gardening work requested, property access details, and service preferences.
Billing information such as payment records, invoices, and transaction history.
Communication records such as messages, notes about appointments, and customer instructions.
Technical data such as IP address or browser details if you interact with our digital systems, where applicable.

We do not intentionally collect special category personal data unless it is strictly necessary and you choose to provide it. If you do provide such information, we will only process it where a lawful basis applies and additional safeguards are in place.

3. How We Collect Your Data

We may collect personal data directly from you when you request a quote, book a service, make an enquiry, communicate with us, or provide feedback. We may also collect information from:

Records of our correspondence.
Payment processors and accounting systems.
Third-party service providers who help us deliver or support our services.

We keep data collection limited to what is needed for legitimate business purposes and to meet legal obligations.

4. Why We Use Your Personal Data

We use personal data only for specific and lawful purposes, including:

Providing gardening services and managing bookings.
Preparing quotes, invoices, and payment records.
Responding to enquiries, complaints, or service-related requests.
Maintaining customer records and scheduling work.
Improving service quality and customer experience.
Meeting legal, tax, insurance, and regulatory requirements.
Protecting our business against fraud, misuse, or security incidents.

We will not use your personal data for purposes that are incompatible with the reasons it was originally collected, unless we notify you and have a valid legal basis to do so.

5. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing your personal data. Gardeners East Barnet relies on the following lawful bases, depending on the context:

Contract

We process your personal data where it is necessary to enter into or perform a contract with you. This includes arranging services, confirming appointments, carrying out gardening work, and handling invoices or payments.

Legal Obligation

We may process and retain certain information where required by law, including tax, accounting, insurance, and record-keeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate interests and where your rights do not override those interests. This may include managing customer relationships, maintaining service records, improving operations, and protecting against fraud or misuse.

Consent

Where we rely on your consent, we will ask for it clearly and you may withdraw it at any time. If you withdraw consent, this will not affect the lawfulness of processing carried out before withdrawal.

6. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors on our behalf. These processors only handle data according to our instructions and are required to protect it appropriately.

Examples of processors may include:

Payment service providers who process card or online payments.
Accounting and bookkeeping providers who help manage financial records.
IT and cloud storage providers who support secure data storage and communication systems.
Customer management or scheduling tools used to organise jobs and appointments.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

We may also disclose personal data if required by law, court order, or other legal process, or where disclosure is necessary to protect our rights, property, customers, or staff.

We do not sell personal data. Any sharing is limited, purpose-based, and subject to appropriate contractual and security safeguards.

7. International Transfers

Where a processor or service provider stores or accesses data outside the United Kingdom, we ensure that appropriate safeguards are in place. These may include adequacy regulations, approved contractual clauses, or other lawful transfer mechanisms designed to protect your personal information.

8. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. The length of time may vary depending on the type of information and the purpose for which it is used.

Customer and service records are retained for as long as needed to manage the relationship and provide aftercare.
Financial and tax records are retained for the period required by law.
Communication records are kept for a reasonable period to handle queries, disputes, or service follow-up.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. Retention is reviewed regularly to ensure we do not keep personal data for longer than necessary.

9. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limited data access on a need-to-know basis.

Although we take reasonable precautions, no system can be guaranteed to be completely secure. If a personal data incident occurs, we will respond in accordance with applicable law and any required notification procedures.

10. Your Data Protection Rights

You have a number of rights under data protection law. These rights may apply depending on the circumstances and the legal basis for processing your data.

Right of access – you can ask for a copy of the personal data we hold about you.
Right to rectification – you can request correction of inaccurate or incomplete data.
Right to erasure – you can ask us to delete your data in certain circumstances.
Right to restriction – you can ask us to limit the way we use your data in certain cases.
Right to object – you can object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – you can request your data in a structured, commonly used format where processing is based on consent or contract and carried out by automated means.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to raise concerns directly so we can try to resolve them promptly and fairly.

11. Children’s Data

Our services are aimed at adult customers and property-related gardening arrangements. We do not knowingly collect personal data from children unless it is necessary in a lawful context and with suitable safeguards. If you believe we have collected such information inappropriately, please let us know so it can be reviewed.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or how we handle personal data. Any revised version will apply from the date it is made available. We recommend reviewing this policy periodically so you remain informed about how your information is used.

13. Summary of Our Commitment

Gardeners East Barnet respects your privacy and handles personal data with care, transparency, and responsibility. We only collect what we need, use it for clearly defined purposes, share it only with trusted processors where necessary, and keep it only for as long as needed. We also recognise and support your rights as a data subject.

This Privacy Policy applies to all Gardeners East Barnet customers in the area. By using our services, you acknowledge that your personal data may be processed in accordance with this policy and applicable data protection law.