Privacy Policy - Gardeners Walthamstow

Gardeners Walthamstow is committed to protecting the privacy and personal data of all customers in the Walthamstow area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Gardeners Walthamstow customers in the area, including current, former, and prospective customers.

1. Who This Policy Applies To

This policy applies to individuals who use, enquire about, or receive services from Gardeners Walthamstow in the local area. It covers personal data collected when you request a quotation, book a service, make an enquiry, communicate with us, or otherwise interact with our team. By engaging with our services, you acknowledge that your information may be handled in the ways described in this policy.

2. Personal Data We Collect

We collect only the information necessary to provide our services effectively, manage customer relationships, and meet our legal obligations. The data we may collect includes:

Identity information such as your name and title.
Contact details such as address, email address, and telephone number.
Service information including details about the gardening work requested, property access notes, scheduling preferences, and customer instructions.
Payment-related information where relevant, such as billing records and transaction references.
Communication records including emails, messages, call notes, and service correspondence.
Technical data such as basic website or device usage information if you contact us through digital channels.
Feedback and complaint details where you share comments about our services.

We do not intentionally collect special category personal data unless it is necessary and you choose to provide it. If such data is shared with us, it will be handled with extra care and only where there is a lawful basis to do so.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To deliver gardening services and manage appointments.
To maintain service records and customer preferences.
To process payments and keep financial records.
To communicate about service changes, job updates, or follow-up matters.
To handle complaints, disputes, and warranty or service issues.
To comply with tax, accounting, and legal obligations.
To improve our services, customer experience, and internal operations.

We only use your data for specified and legitimate purposes. We will not use your information in ways that are incompatible with those purposes without informing you and, where needed, obtaining a valid lawful basis.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Gardeners Walthamstow relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing a quotation, arranging a service, carrying out gardening work, and managing customer communications connected to that service.

Legal Obligation

We may process and retain data when required to comply with legal obligations, including accounting, tax, and business record-keeping requirements.

Legitimate Interests

We may use data where it is necessary for our legitimate business interests and where these interests are not overridden by your rights and freedoms. This may include service administration, operational planning, fraud prevention, and improving customer service. We always consider the impact on your privacy before relying on this basis.

Consent

In limited situations, we may rely on your consent, for example where it is needed for certain optional communications or uses. If we rely on consent, you may withdraw it at any time, and this will not affect the lawfulness of any processing carried out before withdrawal.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as processors when they handle data on our behalf and only under our instructions. Processors may include:

Accounting and bookkeeping providers for financial administration.
IT and cloud service providers for secure storage, communications, and business systems.
Payment service providers for handling transactions.
Customer management or scheduling tools used to organise appointments and service records.
Professional advisers such as legal or tax advisers where necessary.

Where we engage processors, we require appropriate contracts and safeguards to ensure your personal data is handled securely and in accordance with data protection law. We do not sell your personal data.

We may also disclose personal information if required by law, by a court order, or to protect our legal rights, property, staff, or customers.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, and to meet legal, accounting, or reporting obligations. Retention periods depend on the type of information and the reason we hold it.

Customer and service records are generally kept for the period needed to manage the service relationship and to resolve any follow-up issues.
Financial and invoice records are typically retained for the length required under tax and accounting laws.
Communication records may be kept for a reasonable period to maintain service history and support continuity.
Enquiry records may be deleted after they are no longer needed, unless they lead to a customer relationship or legal obligation.

When data is no longer required, we will securely delete, anonymise, or archive it as appropriate. We do not keep personal data indefinitely.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and staff confidentiality obligations. While no system can be guaranteed completely secure, we take reasonable steps to reduce risk and protect customer information.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to legal conditions and exemptions. Your rights include:

The right of access – to request a copy of the personal data we hold about you.
The right to rectification – to ask us to correct inaccurate or incomplete information.
The right to erasure – to request deletion of your data in certain circumstances.
The right to restriction – to ask us to limit how we use your data in certain cases.
The right to object – to object to processing based on legitimate interests or direct marketing where applicable.
The right to data portability – to request transfer of certain data to you or another provider where technically feasible.
The right to withdraw consent – where processing is based on consent.

If you make a request, we will respond within the time limits set by law and may need to verify your identity before taking action.

9. Children’s Data

Our services are intended for adults and property owners, tenants, or authorised representatives who request gardening services. We do not knowingly collect personal data from children as part of our normal business activities. If we become aware that data has been collected from a child without appropriate authority, we will take steps to delete it where legally permitted.

10. International Transfers

Where service providers or systems involve processing outside the UK, we will ensure suitable safeguards are in place to protect your data. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent lawful transfer mechanisms.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their information is used.

12. Summary of Our Commitment

Gardeners Walthamstow respects your privacy and handles your data lawfully, fairly, and transparently. We collect only the information needed to provide gardening services, operate responsibly, and meet legal obligations. We share data only with trusted processors or where required by law, retain it only as long as necessary, and support your rights under UK data protection law. This Privacy Policy applies to all Gardeners Walthamstow customers in the area and is designed to ensure your personal information is treated with care and respect.