Privacy Policy - Gardeners Brondesbury

This Privacy Policy explains how Gardeners Brondesbury handles personal data for its customers in the Brondesbury area. It applies to all customers, prospective customers, and website or service users who engage with Gardeners Brondesbury in this area. We are committed to processing personal data fairly, lawfully, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.

This policy sets out what data we collect, why we collect it, the lawful bases we rely on, how long we keep it, who may process it on our behalf, and the rights available to individuals under data protection law. We aim to keep all personal information secure, relevant, and limited to what is necessary for the services we provide.

1. Data We Collect

Gardeners Brondesbury collects only the personal data needed to provide gardening services, manage customer relationships, and meet our legal obligations. The type of information we may collect includes:

Identity details: name, title, and any preferred form of address.
Contact details: address, email address, telephone number, and property access information where relevant.
Service details: information about requested gardening work, service preferences, appointment times, and instructions for site visits.
Billing and payment information: invoice details, payment status, and limited financial records necessary for accounting.
Communication records: emails, call notes, messages, feedback, and complaint records.
Technical information: if an online form or digital platform is used, basic device and usage information may be collected for security and service improvement.

We do not seek to collect special category data unless it is absolutely necessary and a valid legal condition applies. In normal service delivery, Gardeners Brondesbury does not need health data, political views, religious beliefs, or similar sensitive information.

Where customers voluntarily provide extra information, we only use it for the purpose it was shared with us. We encourage individuals to avoid including unnecessary personal details when communicating with us.

2. How We Use Personal Data

We use personal data for the following purposes:

to provide gardening services and carry out requested work;
to arrange site visits, bookings, and follow-up services;
to issue quotes, invoices, and receipts;
to communicate about appointments, changes, and service updates;
to manage customer queries, complaints, and feedback;
to maintain internal records and service history;
to meet tax, accounting, and other legal obligations;
to protect our business, staff, customers, and property from fraud or misuse.

We process personal data only where it is necessary and proportionate. Gardeners Brondesbury does not use customer information for unrelated purposes without a lawful basis.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the context, Gardeners Brondesbury may rely on one or more of the following lawful bases:

Contract

We process personal data when it is needed to enter into or perform a contract with a customer. This includes handling bookings, carrying out gardening work, issuing quotes, and managing payment arrangements.

Legal Obligation

We process some information to comply with legal obligations, such as keeping accounting records, tax documents, and other business records required by law.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by the rights and freedoms of the individual. Examples include service administration, record keeping, quality assurance, fraud prevention, and responding to customer enquiries. When we rely on this basis, we consider the nature of the data, the purpose of processing, and any impact on the individual.

Consent

In limited cases, we may rely on consent, for example where it is required for a specific optional communication or marketing activity. If consent is used, it must be freely given, informed, and capable of withdrawal at any time.

4. Data Sharing and Processors

Gardeners Brondesbury may share personal data with trusted third parties that help us operate our business. These third parties act as processors or, in some cases, independent controllers. We only share the minimum information needed for the relevant task and require appropriate safeguards.

Typical categories of processors may include:

IT and hosting providers: for secure storage, email services, and system maintenance.
Accounting and bookkeeping providers: for invoicing, tax records, and financial administration.
Payment service providers: for processing card or online payments.
Administrative support services: for appointment scheduling, record handling, and customer communications.
Professional advisers: such as accountants, insurers, or legal advisers where needed.

Processors are required to handle personal data only according to our instructions, keep it confidential, and use suitable technical and organisational measures to protect it. We do not sell personal data.

We may also disclose information where required by law, court order, or a lawful request from public authorities. Any disclosure will be limited to what is necessary.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by law. The retention period depends on the type of data and the reason it is held.

Customer service records: retained for the period needed to manage the service relationship and deal with follow-up matters.
Invoices and accounting records: retained in line with tax and financial record-keeping requirements.
Communication records: retained for a reasonable period to support customer service, dispute handling, and business administration.
Marketing consent records: retained until consent is withdrawn or the data is no longer needed.

When data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a safe manner. We review retention regularly to ensure information is not kept longer than necessary.

6. Security of Personal Data

Gardeners Brondesbury takes appropriate security measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and data minimisation practices.

Although no system can be guaranteed completely secure, we work to maintain a level of protection appropriate to the nature of the data we hold. Where a data incident occurs that may affect personal information, we will assess the situation and take action in line with legal requirements.

7. Your Rights

Individuals whose data is processed by Gardeners Brondesbury have rights under data protection law. These rights may apply in full or in part depending on the circumstances and the legal basis for processing. They include the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete information;
erase your data in certain situations;
restrict the processing of your data in certain situations;
object to processing based on legitimate interests or direct marketing;
data portability where processing is based on consent or contract and carried out by automated means;
withdraw consent at any time where consent is the lawful basis;
complain to the Information Commissioner’s Office if you believe your rights have been infringed.

To protect privacy, we may need to verify identity before responding to a rights request. We will respond within the time limits set by law unless an extension is permitted.

8. Children’s Data

Gardeners Brondesbury does not knowingly collect personal data from children as part of its normal services. Our services are intended for adult customers or adult representatives acting on behalf of a property owner or occupier. If we become aware that child data has been collected inadvertently, we will take appropriate steps to delete or secure it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any revised version will apply from the date it is issued. We encourage customers in the Brondesbury area to review this policy periodically so they remain informed about how their information is used.

10. Scope of This Policy

This Privacy Policy applies to all Gardeners Brondesbury customers in the area, including prospective customers, current customers, and anyone who contacts us about gardening services. By engaging our services, you acknowledge that your personal data may be processed as described in this policy and in line with applicable data protection law.

We are committed to responsible and transparent data handling. Our aim is to keep personal data accurate, lawful, and limited to what is needed to deliver reliable gardening services in a respectful and privacy-conscious way.