Privacy Policy - Gardeners Childs Hill

Last updated: This Privacy Policy explains how Gardeners Childs Hill collects, uses, stores, and protects personal data relating to all customers in the Childs Hill area. It applies to every individual who uses our gardening services, requests a quote, makes an enquiry, books an appointment, or otherwise engages with us in connection with our work. We are committed to handling personal information lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to all Gardeners Childs Hill customers in the area, including private household clients, landlords, tenants, property managers, and commercial clients where applicable. It covers personal data collected before, during, and after our services are provided. By interacting with our business, you acknowledge that some of your information may be processed for service delivery, administration, safety, and legal compliance.

2. Personal data we collect

We only collect information that is relevant and necessary for our operations. Depending on how you contact us and the services requested, we may collect the following categories of personal data:

Identity details: name, title, and any relevant business or household contact details.
Contact details: address, phone number, and email address.
Service information: details about your property, garden layout, requested work, service preferences, and appointment notes.
Billing and payment information: invoices, payment status, and transaction records.
Communication records: messages, call notes, complaints, feedback, and service updates.
Technical information: limited data such as device or browser details where you submit forms digitally, if applicable.
Special category data: we do not intentionally collect sensitive personal data. If such information is disclosed to us accidentally, we will handle it only where necessary and with appropriate safeguards.

We do not collect more data than we need. Where possible, we use information in aggregated or minimal form to reduce privacy risks.

3. How we collect data

We may collect personal data directly from you when you:

request a quotation or consultation;
book a gardening service;
contact us by phone, email, or message;
provide instructions at your property;
make a payment or receive an invoice;
submit feedback or a complaint.

We may also receive data from third parties where necessary, such as landlords, managing agents, or payment providers, but only when it is relevant to arranging or delivering our services.

4. Lawful basis for processing

We process personal data only where there is a lawful basis under data protection law. The lawful bases we rely on are:

Contract

We process data when it is necessary to enter into or perform a contract with you, such as arranging gardening work, scheduling visits, preparing quotes, or issuing invoices.

Legal obligation

We may retain and process certain records to comply with tax, accounting, insurance, and other legal requirements.

Legitimate interests

We may process data for our legitimate business interests, such as managing customer relationships, improving service quality, preventing fraud, responding to enquiries, and maintaining internal records. We always balance our interests against your rights and freedoms.

Consent

In limited cases, we may rely on your consent, for example where you have agreed to receive specific optional communications. You may withdraw consent at any time if processing is based on consent.

We do not use personal data for purposes that are incompatible with the reasons it was collected unless we are legally permitted to do so.

5. How we use personal data

We use personal data to:

provide gardening services and customer support;
prepare estimates and manage bookings;
communicate service-related information;
process payments and manage accounts;
maintain records of completed work;
address queries, disputes, or complaints;
meet legal, tax, and insurance obligations;
protect the safety of our staff, customers, and property.

We do not sell personal data. We also do not use personal data for automated decision-making that produces legal or similarly significant effects.

6. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected. Retention periods vary depending on the nature of the information and the legal requirements that apply.

Customer service records: retained for a reasonable period to manage ongoing relationships, service history, and follow-up matters.
Financial and tax records: retained for the period required by law.
Communication records: retained for as long as needed to resolve queries or maintain business records.
Quotes and enquiries not leading to a contract: retained only for a limited period unless further retention is justified.

When personal data is no longer needed, we securely delete, anonymise, or dispose of it in line with our internal retention practices. We review retention periodically to ensure unnecessary data is not kept.

7. Data sharing and processors

We may share personal data with trusted third-party service providers, also known as processors, where they help us operate our business. These processors only process data on our instructions and must protect it appropriately.

Examples of processors or categories of processors may include:

accounting and bookkeeping providers;
payment processing services;
IT and cloud storage providers;
customer communication tools;
professional advisers such as insurers or legal advisers where necessary.

We may also disclose personal data if required by law, regulation, court order, or to prevent fraud or serious harm. Where processors are used, we seek appropriate contractual safeguards to ensure data protection obligations are met.

8. Security of personal data

We use reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and limiting access to data on a need-to-know basis.

Although no system can be guaranteed to be completely secure, we take privacy protection seriously and continuously aim to reduce risks. If a personal data breach were to occur and it posed a risk to your rights and freedoms, we would act in accordance with applicable legal requirements.

9. Your rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to conditions or limitations depending on the circumstances.

Right of access: you can ask for a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you can ask us to delete your data in certain situations.
Right to restriction: you can ask us to limit the way we use your data in certain cases.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you can request certain information in a structured, commonly used format where applicable.
Right to withdraw consent: if we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the time limits required by law. To protect privacy, we may need to verify your identity before taking action.

10. International transfers

Where service providers store or process data outside the United Kingdom, we will take appropriate steps to ensure that your information remains protected to a standard consistent with UK data protection law. Any such transfers will be supported by suitable safeguards where required.

11. Children’s data

Our services are intended for adult customers or adult decision-makers arranging gardening work. We do not knowingly collect personal data from children except where it is incidentally included in household or property records and is necessary for service delivery. Where children’s data is inadvertently provided, we will handle it with care and only to the extent required for the relevant purpose.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

13. How we handle complaints

If you have concerns about how your personal data is used, we encourage you to raise them promptly so we can review the matter and take appropriate action. You also have the right to complain to the relevant data protection authority if you believe your information has been mishandled. We will always aim to deal with privacy concerns fairly, promptly, and respectfully.

Gardeners Childs Hill is committed to protecting your privacy and using personal data responsibly. We process information only where we have a lawful basis, retain it only as long as necessary, and work with processors that support our compliance obligations. Your trust matters, and we treat your personal information with care and accountability.