Privacy Policy - Gardeners Kingsbury

This Privacy Policy explains how Gardeners Kingsbury collects, uses, stores, shares, and protects personal data relating to all customers in the Kingsbury area. It is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this policy.

Scope of This Policy

This policy applies to all Gardeners Kingsbury customers in the area, including current, prospective, and former customers who enquire about, book, or receive gardening services from us. It covers personal information collected through direct communication, service requests, quotations, scheduling, payments, and any related administrative activity.

Information We Collect

Gardeners Kingsbury may collect and process the following categories of personal data:

Identity details such as your name and any business or household title you provide.
Contact details including your address, telephone number, and email address.
Service information such as property access notes, garden preferences, appointment details, and instructions relevant to the work requested.
Payment and billing records where required for invoicing, accounting, and transaction management.
Communication records including messages, complaints, feedback, quotations, estimates, and service updates.
Technical data where relevant, such as basic device or website usage data if you interact with our digital systems.

We only collect data that is necessary, relevant, and limited to what is needed for legitimate service delivery and administration. We do not intentionally collect special category data unless you provide it directly and it is required for a specific lawful purpose, such as accessibility or safety-related requests.

How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To schedule, carry out, and manage gardening services.
To communicate service updates, changes, or reminders.
To issue invoices, process payments, and maintain financial records.
To manage customer relationships and resolve disputes or complaints.
To comply with legal, accounting, and tax obligations.
To improve service quality, safety, and operational efficiency.

We process data in a fair, transparent, and secure manner. Personal information is not used for purposes that are incompatible with the reasons it was originally collected unless we have a lawful basis to do so.

Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Gardeners Kingsbury relies on the following lawful bases:

1. Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotations, confirming appointments, carrying out gardening work, and managing invoices or service changes.

2. Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer records, preventing fraud, improving our services, and maintaining internal administrative processes.

3. Legal Obligation

We may process and retain certain data to meet legal obligations, including taxation, accounting, record-keeping, and compliance with regulatory requirements.

4. Consent

Where required, we may rely on your consent. If we ask for consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Sharing Personal Data

We do not sell personal information. However, we may share limited personal data with trusted third parties, known as processors, when necessary for service delivery and administration. These processors may include:

Accounting or bookkeeping providers.
Payment processing services.
IT support and cloud storage providers.
Communication and scheduling tools.
Professional advisers, such as legal or tax advisers, where necessary.

All processors are required to handle personal data securely and only in accordance with our instructions. They must not use your information for their own purposes.

We may also disclose data where required by law, court order, or regulatory authority, or where necessary to protect our rights, customers, staff, or the public.

Data Retention

Gardeners Kingsbury retains personal data only for as long as necessary for the purposes for which it was collected, and to satisfy legal, accounting, or reporting requirements. Retention periods may vary depending on the nature of the information and the reason it is held.

In general:

Customer service and contract records are kept for the duration of the relationship and for a reasonable period afterwards.
Financial and invoicing records are retained for the period required by tax and accounting law.
Communication records are kept only as long as needed to manage enquiries, complaints, or service history.
Data collected on the basis of consent is kept until consent is withdrawn or the data is no longer needed.

When data is no longer required, it is securely deleted, anonymised, or disposed of in a safe manner.

Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and limited access to information on a need-to-know basis.

Although we do our best to safeguard personal information, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we continuously work to reduce risk and protect the data entrusted to us.

Your Rights

As a data subject under UK GDPR, you have important rights in relation to your personal data. These include:

The right of access – to request a copy of the personal data we hold about you.
The right to rectification – to ask us to correct inaccurate or incomplete information.
The right to erasure – to request deletion of your data in certain circumstances.
The right to restrict processing – to ask us to limit how your data is used in some cases.
The right to data portability – to receive certain data in a structured, commonly used format.
The right to object – to object to processing based on legitimate interests or direct marketing.
Rights related to automated decision-making – to avoid decisions made solely by automated means where applicable.

You also have the right to withdraw consent at any time where processing relies on consent. Exercising these rights will not usually affect the services we provide, although some requests may limit our ability to continue certain tasks or keep required records.

How We Handle Requests

We aim to respond to rights requests promptly and within the time limits required by law. To protect your privacy, we may need to verify your identity before responding to a request. In some cases, we may not be able to comply fully if legal exceptions apply, but we will always explain our reasons where permitted.

International Transfers

If any of our processors or systems store data outside the United Kingdom, we ensure appropriate safeguards are in place so that your personal data remains protected to the standard required by law. These safeguards may include adequacy regulations, contractual protections, or other approved transfer mechanisms.

Children’s Data

Our services are intended for adults and property-related customers. We do not knowingly collect personal data from children unless it is necessary and provided by a parent, guardian, or authorised adult in connection with a service request. If we become aware that we have collected data from a child unlawfully, we will take appropriate steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service operations. Any revised version will apply from the date it is made available. We encourage customers to review the policy periodically so they remain informed about how we process personal data.

Summary

Gardeners Kingsbury is committed to handling personal data lawfully, fairly, and transparently. We collect only the data needed to provide gardening services, manage enquiries, and meet our legal responsibilities. We process data under clear lawful bases, share it only with trusted processors when necessary, keep it only as long as needed, and respect your rights under UK GDPR. This policy applies to all Gardeners Kingsbury customers in the area.