Privacy Policy - Gardeners Crouch End

Gardeners Crouch End is committed to protecting the privacy and personal data of all customers in the Crouch End area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Gardeners Crouch End customers in the area, whether you contact us for a one-off gardening service, ongoing garden maintenance, landscaping work, or related support.

We aim to be transparent and fair in the way we handle personal data. This policy sets out what information we collect, why we collect it, the legal basis we rely on, how long we keep it, who may process it on our behalf, and the rights you have over your information. By using our services, you acknowledge that your personal data may be processed as described in this policy.

1. Information We Collect

We only collect personal data that is necessary for the operation of our services, communication with customers, administration, and legal compliance. The types of information we may collect include:

Identity details such as your name.
Contact details such as your address, email address, and telephone number.
Service information such as details of the gardening or maintenance services you request, property access instructions, service preferences, and scheduling notes.
Payment-related information such as invoicing records, payment status, and transaction references. We do not store full payment card details unless this is strictly necessary and lawful.
Communication records such as emails, messages, call notes, quotes, complaints, feedback, and any correspondence relating to your service.
Technical data if you interact with our digital systems, such as IP address, browser type, and basic usage information, where applicable.

We do not intentionally collect special category data unless you provide it voluntarily and it is relevant to service delivery, for example where access or safety needs are discussed. If such data is required, we will process it only where allowed by law and with appropriate safeguards.

2. How We Use Your Personal Data

Gardeners Crouch End uses personal data for legitimate business purposes connected to the provision of our gardening services. These purposes may include:

Responding to enquiries and providing quotes.
Managing bookings, appointments, and service delivery.
Carrying out agreed garden work and related tasks.
Maintaining internal records and customer history.
Issuing invoices and managing payments.
Handling complaints, disputes, or follow-up queries.
Improving service quality and customer experience.
Meeting legal, tax, accounting, and insurance obligations.

We only use personal information for purposes that are necessary, relevant, and proportionate. We do not sell your personal data.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. Gardeners Crouch End relies on the following lawful bases depending on the nature of the activity:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging services, managing appointments, carrying out work, invoicing, and communicating about ongoing service matters.

Legitimate Interests

We may process data where it is in our legitimate interests to do so and where those interests are not overridden by your rights and freedoms. Examples include maintaining customer records, improving our services, preventing fraud, and managing routine business operations.

Legal Obligation

We may process and retain certain information where required to comply with legal obligations, such as tax record keeping, accounting rules, or insurance requirements.

Consent

In limited situations, we may rely on your consent. Where consent is used, you can withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Vital Interests

In rare cases, we may process information to protect someone’s life or safety, for example where urgent access or risk concerns require action.

4. Sharing Your Data and Processors

We may share personal data only when necessary and only with trusted third parties that help us operate our services. These parties act as processors or, in some cases, independent controllers. All processors are required to handle personal data securely and only in accordance with our instructions, relevant data protection laws, and confidentiality obligations.

Processors and service providers may include:

Accounting and bookkeeping providers for invoicing and financial administration.
IT and cloud storage providers for secure data storage, communication, and backup services.
Payment and banking service providers for processing payments and managing transactions.
Scheduling or administration tools used to organise appointments and records.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

We may also disclose information where required by law, court order, regulatory obligation, or to protect our rights, property, staff, customers, or the public.

Whenever personal data is shared, we apply appropriate safeguards and limit disclosure to what is necessary.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods may vary depending on the type of data and the reason it is held.

Customer and service records are generally retained for the period necessary to manage the customer relationship and address follow-up matters.
Financial and invoicing records are retained for the period required by tax and accounting laws.
Communication records may be retained for a reasonable period to support service history, complaints handling, and business continuity.
Consent records are kept to demonstrate compliance where consent is relied upon.

When data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices. If legal claims, investigations, or disputes arise, data may be kept for longer where necessary.

6. Your Rights

As a data subject under UK GDPR, you have rights regarding your personal data. These rights may apply in full or in part depending on the circumstances and any legal exceptions. Your rights include:

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete information.
Right to erasure – in certain circumstances, you may request that we delete your personal data.
Right to restriction – you may request that we limit how your data is used in certain situations.
Right to object – you may object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – where processing is based on consent or contract and carried out by automated means, you may request a copy in a structured, commonly used format.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage customers to raise concerns with us first so that we can address them promptly and fairly.

7. Security of Your Information

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures are designed to reflect the nature of the information we hold and the risks involved. While no system can be guaranteed as entirely secure, we take data protection seriously and review our safeguards regularly.

8. International Transfers

Where any processor or service provider stores or accesses personal data outside the United Kingdom, we will ensure that suitable safeguards are in place to protect your information in line with applicable data protection law. This may include approved contractual safeguards or equivalent legal mechanisms.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. Any updates will apply from the date of publication of the revised policy. We encourage customers to review this policy periodically so they remain informed about how their personal data is used.

10. Applicability

This Privacy Policy applies to all Gardeners Crouch End customers in the area, including anyone who enquires about, books, receives, or has previously received gardening or related services from us in Crouch End and surrounding local service areas.

By continuing to use our services, you acknowledge that you have read and understood this policy and how your personal data is handled. We remain committed to using your information responsibly, lawfully, and with respect for your privacy.