Privacy Policy for Gardeners Edgware
This Privacy Policy explains how Gardeners Edgware collects, uses, stores, shares, and protects personal data when providing gardening and related services. It applies to all Gardeners Edgware customers in the area, including anyone who enquires about, books, receives, or pays for our services. We are committed to handling personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
What Information We Collect
We may collect personal data that you provide directly to us when you request a quotation, make a booking, give us instructions, or contact us about our services. This may include your name, address, service location, billing details, service preferences, and any information needed to complete the work safely and effectively. If you communicate with us by form, message, or written correspondence, we may also keep the content of those communications.
We may also collect limited technical information when you visit our website or interact with our online content, such as device information, browser type, and general usage data. This information is used to help us improve our website, manage security, and understand how visitors use our services. We do not seek to collect sensitive personal data unless it is necessary for a specific service or you choose to provide it, and we will only process such information where permitted by law.
How We Use Personal Data
We use personal data to respond to enquiries, provide quotations, schedule appointments, deliver gardening services, manage payments, and maintain records of the services we have provided. We may also use your information to communicate about changes to bookings, service updates, complaints, or other matters connected with our work.
In addition, we may use personal data for internal administration, such as accounting, invoicing, quality control, staff training, and service improvement. Where necessary, we may use data to comply with legal obligations, resolve disputes, or establish, exercise, or defend legal claims. We do not use your personal data for purposes that are incompatible with the reasons for which it was collected.
Lawful Basis for Processing
We process personal data only where we have a lawful basis to do so. The main lawful bases we rely on are contract, legitimate interests, legal obligation, and consent where appropriate.
We process your data on the basis of contract when it is needed to take steps at your request before entering into a contract or to perform the services you have booked. We rely on legitimate interests where processing is necessary to run and improve our business, manage customer relationships, keep appropriate records, and protect the security of our operations, provided your interests and rights do not override those interests. We rely on legal obligation when we must keep or disclose information to meet legal or regulatory requirements. Where consent is required, such as for certain optional communications or specific uses of data, you may withdraw that consent at any time.
Data Sharing and Processors
We may share personal data with trusted third parties who act as processors on our behalf. These may include providers of accounting software, payment services, IT support, website hosting, data storage, email or messaging systems, and administrative tools used to manage our business. These processors are only permitted to handle personal data on our instructions and are required to protect it using appropriate technical and organisational measures.
We may also disclose personal data to professional advisers, insurers, public authorities, or law enforcement bodies where required by law or where necessary to protect our legal rights. If a third party receives personal data as an independent controller, we will only do so where there is a lawful basis for the transfer and, where required, appropriate contractual or legal safeguards will be in place.
International Transfers
If any of our processors store or access personal data outside the United Kingdom, we will take steps to ensure that appropriate safeguards are in place before any transfer occurs. These safeguards may include adequacy regulations or approved contractual protections designed to keep your information secure and protected to UK standards.
How Long We Keep Personal Data
We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, tax, and reporting requirements. The retention period may vary depending on the type of record, the nature of the service provided, and any legal duties that apply.
For example, customer and transaction records may be retained for a period needed to support tax, accounting, and contractual obligations, while general enquiry records may be kept for a shorter period if no service is booked. When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.
Your Rights Under GDPR
You have a number of rights in relation to your personal data. These include the right to be informed about how your data is used, the right of access to a copy of the information we hold about you, the right to request correction of inaccurate or incomplete data, and the right to request deletion in certain circumstances.
You may also have the right to restrict processing, the right to object to processing based on legitimate interests, the right to data portability in certain cases, and the right to withdraw consent where processing is based on consent. If you believe a decision affecting you has been made solely by automated means, you may have rights relating to that processing, although we do not normally use automated decision-making in providing our services. You also have the right to lodge a complaint with the Information Commissioner's Office if you are unhappy with how your data has been handled.
Keeping Your Information Secure
We take the security of personal data seriously and use measures intended to protect it from unauthorised access, misuse, loss, alteration, or disclosure. These measures may include access controls, secure storage, limited access on a need-to-know basis, and careful selection of service providers. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is published. We encourage customers and visitors to review this policy periodically so they remain informed about how their personal data is handled by Gardeners Edgware.
Contact and Further Information
If you have any questions about this Privacy Policy, your personal data, or the way Gardeners Edgware uses information, you can contact us using the details provided through our usual service communication channels. We will take reasonable steps to respond to your request and to help you exercise your rights under data protection law.
