Privacy Policy - Gardeners Woodford Green

Gardeners Woodford Green is committed to protecting personal data and respecting privacy. This Privacy Policy explains how we collect, use, share, store, and protect information relating to our customers, prospective customers, and website or service users in the Woodford Green area. It applies to all Gardeners Woodford Green customers in the area, including anyone who enquires about, books, receives, or pays for our gardening services.

1. Who we are

For the purposes of the UK GDPR and the Data Protection Act 2018, Gardeners Woodford Green is the data controller for the personal data we collect in connection with our services. This means we decide why and how your personal information is used. We only process personal data where we have a lawful basis to do so, and we take care to ensure that information is handled securely and fairly.

2. Information we collect

We collect only the information necessary to provide our gardening services, manage customer relationships, and meet legal and business obligations. The categories of personal data we may collect include:

Identity details such as your name and, where relevant, business name.
Contact details such as address, email address, and telephone number.
Service information including the type of gardening work requested, property access notes, preferred service times, and instructions relating to the job.
Billing and payment records such as invoices, transaction references, and payment status.
Communication records including emails, call notes, message history, and written correspondence.
Technical data if you interact with any digital services, including basic device or usage information collected through logs or cookies, where applicable.
Feedback and complaint information if you share reviews, comments, or concerns about our work.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily in a relevant context. If such information is ever received, it is treated with extra care and only used where the law allows.

3. How we use personal data

We use personal data for clear and limited purposes. These may include:

providing quotations, arranging appointments, and delivering gardening services;
managing customer accounts and service records;
processing payments and issuing invoices;
responding to enquiries, requests, and complaints;
maintaining service quality, training, and record keeping;
meeting legal, accounting, tax, and insurance obligations;
preventing fraud, misuse, or security incidents;
sending important service updates or administrative messages.

We will only use your data in ways that are compatible with the original purpose for which it was collected.

4. Lawful basis for processing

Under data protection law, we must identify a lawful basis for every use of personal data. Gardeners Woodford Green relies on the following lawful bases:

Contract

We process personal data where it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes arranging services, carrying out gardening work, and managing payments.

Legal obligation

We may process data when required to comply with legal duties, such as tax reporting, accounting rules, record retention requirements, and other regulatory obligations.

Legitimate interests

We may use data where it is necessary for our legitimate business interests and where your rights do not override those interests. Examples include maintaining service records, improving operations, managing customer relationships, and protecting our business from fraud or misuse. We always consider whether our interests are reasonable and balanced against your privacy rights.

Consent

In some situations, we may rely on your consent, for example where it is required for certain types of optional communication or data use. When we rely on consent, you may withdraw it at any time.

5. Sharing and processors

We may share personal data with trusted third parties who support our business operations. These organisations act as processors when they handle data on our behalf and according to our instructions. They may include:

IT and cloud storage providers;
accounting and bookkeeping services;
payment processing services;
customer management and communications tools;
professional advisers such as solicitors, insurers, or auditors;
subcontractors or specialist suppliers involved in service delivery, where necessary.

We only appoint processors that provide sufficient guarantees regarding data security and compliance. Where a third party acts as an independent controller, such as a tax authority or insurer, they are responsible for their own processing under applicable law.

We do not sell personal data. We will only disclose information where necessary, lawful, and proportionate, or where required by law or a court order.

6. Data retention

We keep personal data only for as long as necessary for the purpose it was collected. Retention periods vary depending on the type of information and the reason for holding it. In general:

Customer service and contract records are retained for the period needed to manage the relationship and address any follow-up issues.
Financial and tax records are kept for the length of time required by accounting and tax law.
Communication records may be retained for a reasonable period to help resolve queries, monitor service quality, or protect our legal position.
Marketing-related consent records are retained until you withdraw consent or they are no longer needed.

When data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

7. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and careful management of third-party access. While no system can be guaranteed completely secure, we work to reduce risks and respond promptly to any issues.

8. Your rights

As a data subject under GDPR, you have a number of rights in relation to your personal data. These include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to ask us to limit how your data is used in specific cases.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to request transfer of certain data in a structured, commonly used format, where applicable.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will consider your request in line with the law and respond within the required timeframe. In some cases, we may need to retain certain data to comply with legal obligations or defend a legal claim.

9. Children’s data

Our gardening services are intended for adult customers and property-related service arrangements. We do not knowingly collect personal data from children in the ordinary course of business. If we become aware that we have received such information without a lawful basis, we will take appropriate steps to remove it.

10. International transfers

If any processor stores or accesses personal data outside the UK, we will ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or equivalent legal protections. We only permit international transfers where compliant protections exist.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or processing practices. When changes are made, the revised policy will apply from the date it is published or otherwise communicated. We encourage customers to review it periodically to stay informed about how personal data is handled.

12. Summary of our approach

Gardeners Woodford Green processes personal data fairly, transparently, and only when necessary. We collect limited information, use it for clear business purposes, rely on lawful bases under GDPR, retain it for appropriate periods, and share it only with trusted processors or where required by law. Our aim is to deliver reliable gardening services while respecting privacy and protecting customer information.

This Privacy Policy applies to all Gardeners Woodford Green customers in the area.