Privacy Policy - Gardeners Worcester Park

Effective for all Gardeners Worcester Park customers in the area, this Privacy Policy explains how personal data is collected, used, shared, stored, and protected when you engage with our gardening services. We are committed to handling information in a lawful, fair, and transparent manner, and we aim to respect your privacy at every stage of our service relationship.

This policy applies to all customers, prospective customers, and anyone who interacts with Gardeners Worcester Park in the course of booking, receiving, or managing gardening services within our service area. It covers information collected through enquiries, service arrangements, site visits, ongoing work, billing, and operational communications.

1. Who We Are

Gardeners Worcester Park provides gardening and related outdoor maintenance services to residential and commercial customers in the local area. For the purposes of data protection law, we act as a data controller for the personal data we decide to collect and use in connection with our services.

We are responsible for ensuring that personal data is processed in line with the UK General Data Protection Regulation and the Data Protection Act 2018. Our approach is based on the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

2. What Personal Data We Collect

We collect only the information needed to provide our services effectively, manage our business, and meet legal obligations. Depending on how you interact with us, we may collect the following categories of personal data:

Identity details such as your name and title.
Contact information such as address details and communication preferences.
Service information such as property access notes, garden preferences, service instructions, and appointment details.
Transaction data such as payment records, invoices, quotes, and service history.
Communication records such as emails, messages, notes from calls, and complaint correspondence.
Technical data if you interact with our digital systems, such as basic device or usage information.
Special category data only where it is necessary and lawful, for example if you voluntarily provide health-related access information or mobility considerations relevant to safe service delivery.

We do not intentionally collect unnecessary personal data. We also do not seek to collect special category data unless there is a clear and lawful reason to do so.

3. How We Use Personal Data

We use personal data to deliver our services and to manage legitimate business operations. Typical uses include:

Responding to enquiries and preparing quotations.
Scheduling visits and carrying out gardening work.
Managing customer accounts and service records.
Processing payments and issuing invoices.
Recording preferences, instructions, and property-specific service requirements.
Handling complaints, queries, and service-related communications.
Improving service quality, safety, and operational planning.
Meeting accounting, tax, insurance, and legal obligations.

We will only use your personal data for the purposes for which it was collected, unless we reasonably determine that it is necessary for a compatible purpose and that doing so is permitted by law.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for every use of personal data. Depending on the circumstance, Gardeners Worcester Park relies on one or more of the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging services, delivering work, managing bookings, and processing payments.

Legal Obligation

We may process data where necessary to comply with legal obligations, such as tax recordkeeping, accounting requirements, or responding to lawful requests from public authorities.

Legitimate Interests

We may use personal data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. Examples include maintaining service records, improving operations, preventing fraud, and safeguarding staff, property, and customers. We carefully balance these interests against your privacy rights.

Consent

Where required, we rely on your consent. This may apply to optional communications or to the processing of special category data that you choose to provide. You can withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, comply with legal requirements, and resolve disputes. Retention periods depend on the type of record and the reason it was created.

Customer service records are kept for a period that supports account management, ongoing service delivery, and issue resolution.
Financial and accounting records are retained for the time required by tax and business laws.
Communication records may be kept for a reasonable period to evidence instructions, agreements, and complaints handling.
Inactive or outdated data is securely deleted or anonymised when it is no longer required.

When retention is no longer necessary, we will take appropriate steps to remove, destroy, or anonymise the data securely. We maintain retention practices designed to avoid keeping information for longer than is needed.

6. Sharing Personal Data and Processors

We may share personal data where necessary for service delivery, administration, legal compliance, or legitimate business functions. We do not sell personal data. Any sharing is limited and controlled.

We may use trusted processors who act on our behalf and only process data according to our instructions. These may include:

Payment service providers for secure transaction processing.
Accounting and bookkeeping providers for invoicing and financial administration.
IT and cloud storage providers for data hosting, email, and business systems.
Scheduling or customer management tools used to organise service appointments and records.
Professional advisers such as legal, tax, or insurance advisers where needed.

Where processors are used, we require them to protect your information appropriately and to process it only for the agreed purposes. If personal data must be transferred outside the UK, we will ensure suitable safeguards are in place in accordance with applicable law.

7. Data Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures are designed to reflect the nature of the information we hold and the risks involved.

Access to personal data is restricted to personnel and service providers who need it for legitimate business purposes. We also aim to keep records accurate and up to date, and we encourage customers to notify us if any information changes.

8. Your Rights

As a data subject, you have a number of rights under data protection law. These rights may apply depending on the circumstances and any legal exemptions. They include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – you can request deletion of your data in certain situations.
Right to restriction – you can ask us to limit how we use your data in certain circumstances.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request transfer of certain data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been infringed. We encourage you to raise concerns with us first so that we can address them promptly and fairly.

9. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is provided by an adult customer for a legitimate service-related reason. If we become aware that data has been collected inappropriately, we will take appropriate steps to delete or correct it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our internal practices. Any updates will take effect when published in the revised version. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

11. Summary of Our Commitment

Gardeners Worcester Park treats privacy as an important part of service quality and customer trust. We collect only the data we need, use it for clear and lawful purposes, retain it only for as long as necessary, and work with processors who are bound to protect it. We also respect your rights and aim to make it easy for you to understand how your information is handled.

In short: this policy applies to all Gardeners Worcester Park customers in the area, and it is designed to ensure personal data is processed responsibly, securely, and in compliance with GDPR requirements.