Privacy Policy - Gardeners Wealdstone

This Privacy Policy explains how Gardeners Wealdstone collects, uses, stores, and protects personal data in connection with our gardening services. It applies to all Gardeners Wealdstone customers in the area, including prospective customers, current customers, and anyone who interacts with us regarding our services. We are committed to handling personal data lawfully, fairly, and transparently in line with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Gardeners Wealdstone provides gardening and related outdoor maintenance services to residential and commercial customers in the local area. For the purposes of data protection law, we act as the data controller for the personal data we collect and use about our customers and website or service enquiries where applicable.

We only collect personal data that is relevant and necessary for delivering services, handling enquiries, managing appointments, processing payments, and meeting legal obligations.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data such as your name, title, or business name.
Contact data such as your address, email address, telephone number, and service location.
Service data such as details of requested gardening work, property notes, service preferences, and appointment history.
Financial data such as payment records, billing details, and transaction information.
Communications data such as messages, feedback, complaint records, and correspondence with us.
Technical data where relevant, such as limited device or browsing information if you contact us through digital systems we use.

We do not intentionally collect special category personal data unless it is necessary and you have provided it, or unless another lawful condition permits us to do so. If such data is ever needed, we will treat it with extra care and only use it where permitted by law.

3. How We Use Personal Data

Gardeners Wealdstone uses personal data for the following purposes:

To respond to enquiries and provide quotes or service information.
To arrange, deliver, and manage gardening services.
To communicate about appointments, changes, and service updates.
To process payments, manage invoices, and maintain accounting records.
To handle customer support, complaints, and service improvements.
To maintain internal records and business administration.
To comply with legal, tax, insurance, and regulatory obligations.
To establish, exercise, or defend legal claims where necessary.

We do not sell personal data. We also do not use personal data for unrelated purposes that are incompatible with the reason it was collected.

4. Lawful Basis for Processing

We process personal data only where we have a valid lawful basis under the UK GDPR. Depending on the circumstances, we rely on one or more of the following bases:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes arranging services, managing bookings, and taking payment for work completed or agreed.

Legal Obligation

We may process and retain data where required by law, including for tax, accounting, record-keeping, or compliance with other legal duties.

Legitimate Interests

We may use personal data for our legitimate business interests where those interests are not overridden by your rights and freedoms. This can include managing customer relationships, improving services, preventing fraud, and maintaining secure records.

Consent

Where consent is required, we will ask for it clearly and separately. You may withdraw consent at any time, although this will not affect processing already carried out before withdrawal.

5. Data Sharing and Processors

We may share personal data with trusted third parties who help us run our business. These organisations act as processors or, in some cases, independent controllers. We only share the minimum data needed and require appropriate safeguards.

Processors may include:

Payment providers that handle card or transfer transactions.
Accounting and bookkeeping providers that support financial management and tax compliance.
IT and cloud service providers that host data, email, or administrative systems.
Scheduling or customer management tools used to organise appointments and service records.
Professional advisers such as legal, insurance, or audit services where necessary.

Where processors handle personal data on our behalf, they are required to act only on our instructions, keep data secure, and use it only for the agreed purpose. We may also disclose data if required by law, court order, or to protect the rights, property, or safety of Gardeners Wealdstone, our customers, or others.

6. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and to meet legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason for processing.

Customer and service records are generally retained for the duration of the service relationship and for a reasonable period afterwards.
Financial and tax records are kept for the period required by law.
Enquiry records may be retained for a shorter period where no service is provided.
Complaint or dispute records may be kept longer where needed to resolve an issue or defend a legal claim.

When personal data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures are designed to reflect the nature of the data and the risks involved.

Security measures may include controlled access, secure storage, staff awareness, and responsible use of trusted systems. While no system can be guaranteed completely secure, we take data protection seriously and review our practices regularly.

8. Your Rights Under Data Protection Law

If you are a customer of Gardeners Wealdstone in the area, you have rights over your personal data. Subject to legal limits and exemptions, these may include:

The right of access to request a copy of the personal data we hold about you.
The right to rectification to correct inaccurate or incomplete information.
The right to erasure to ask for deletion of data in certain circumstances.
The right to restrict processing to limit how we use your data in certain situations.
The right to object to processing based on legitimate interests or direct marketing.
The right to data portability where processing is based on consent or contract and carried out by automated means.
The right to withdraw consent where consent is the basis for processing.

You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to raise any concerns with us first so we can address them promptly.

9. Automated Decision-Making

Gardeners Wealdstone does not use personal data for automated decision-making that produces legal or similarly significant effects on customers. If this changes in the future, we will update this policy and provide any additional information required by law.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. When we do, the revised version will explain how we collect, use, and protect personal data at that time. We recommend reviewing this policy periodically to stay informed.

11. Summary of Our Commitment

Gardeners Wealdstone respects the privacy of every customer and keeps personal data only for legitimate business and legal purposes. We aim to ensure that all processing is lawful, fair, and transparent, and that data is shared only where necessary with trusted processors under appropriate safeguards. Our approach is simple: collect only what we need, use it responsibly, and protect it carefully.

This Privacy Policy applies to all Gardeners Wealdstone customers in the area and is designed to support clear, responsible, and GDPR-compliant data practices.