Privacy Policy - Gardeners Harrow on the Hill

Gardeners Harrow on the Hill is committed to protecting the privacy of all customers in the Harrow on the Hill area. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use our gardening services. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Gardeners Harrow on the Hill customers in the area, including anyone who makes an enquiry, requests a quote, books a service, receives a gardening visit, or otherwise interacts with us in connection with our services.

1. Personal Data We Collect

We collect only the personal data that is necessary to provide our gardening services, manage customer relationships, and meet legal obligations. The types of data we may collect include:

Identity details such as your name and, where relevant, the name of a property owner, tenant, or authorised representative.
Contact details such as address, phone number, and email address.
Service information including details of your garden, property access, requested work, preferences, and service history.
Billing and payment information such as invoice records and transaction details.
Communication records including messages, enquiries, complaints, and feedback.
Technical information where you interact with our digital systems, such as basic device or usage information if collected through booking or enquiry tools.

We do not knowingly collect special category personal data unless it is required for a specific reason and allowed by law. If such information is ever provided voluntarily, we will handle it with extra care and only where a lawful basis exists.

2. How We Use Your Data

We use personal data to operate our business efficiently and provide reliable gardening services. This may include:

Responding to enquiries and preparing quotes.
Scheduling and delivering gardening services.
Managing appointments, site visits, and service follow-ups.
Issuing invoices and processing payments.
Maintaining customer records and service notes.
Handling complaints, queries, and service improvements.
Meeting legal, tax, and accounting obligations.
Protecting against fraud, misuse, or security incidents.

We only use personal data for the purpose for which it was collected, unless we reasonably determine that we need to use it for a compatible purpose and the law allows us to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each use of personal data. Gardeners Harrow on the Hill relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotations, arranging services, carrying out gardening work, managing bookings, and handling payments.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, improving services, preventing fraud, and keeping business records.

Legal Obligation

We process certain information to comply with legal duties, including tax, accounting, record-keeping, and regulatory obligations.

Consent

In limited situations, we may rely on your consent, for example if you agree to receive certain optional communications. Where consent is used, you may withdraw it at any time.

4. Sharing Your Data and Processors

We may share personal data with trusted third parties who help us operate our services. These third parties act as processors when they process data on our behalf and under our instructions. They may include:

Payment processors that handle secure transactions.
Booking or scheduling providers that manage appointments and service administration.
IT and cloud service providers that store or support our business systems.
Accounting and invoicing providers that support financial administration.
Communication providers that help deliver emails, messages, or service updates.

We may also share data where required by law, for example with public authorities, regulators, insurers, or legal advisers. Any sharing is limited to what is necessary and appropriate for the relevant purpose.

Where we use processors, we take reasonable steps to ensure they protect your data, process it only on our instructions, and implement appropriate security measures. We do not sell your personal data.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this policy. Retention periods vary depending on the type of data, the nature of our relationship with you, and legal requirements.

Enquiry records may be kept for a limited period to manage follow-up communication and service administration.
Customer and service records are generally retained for the duration of the relationship and for a reasonable period afterwards.
Financial and tax records are kept for the period required by law.
Complaint or dispute records may be retained longer if needed to resolve issues or defend legal claims.

When personal data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe and lawful manner.

6. Data Security

We take the security of personal data seriously and use appropriate technical and organisational measures to protect it. These may include access controls, secure storage, confidentiality practices, and procedures designed to prevent unauthorised access, loss, misuse, or disclosure.

While no system can be guaranteed to be completely secure, we work to ensure that any personal data we hold is treated carefully and in accordance with data protection principles.

7. Your Rights

As a data subject, you have a number of rights regarding your personal data. These rights may apply in different circumstances and are subject to legal conditions and exemptions. They include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to ask us to delete your personal data in certain situations.
Right to restriction – to ask us to limit how we use your data in certain circumstances.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to request that certain data be provided to you or transferred to another organisation in a structured format.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

You also have the right to raise concerns with the Information Commissioner’s Office (ICO) if you believe your data has been handled improperly. We would, however, appreciate the opportunity to address any concern first.

8. Children’s Data

Our services are intended for adults and property-related customers. We do not knowingly collect personal data from children unless it is incidental and necessary in a lawful context, such as when an adult customer provides relevant family or property information. If we become aware that children’s data has been collected inappropriately, we will take steps to delete it where required.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our internal practices. Any changes will apply from the date they are published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

10. Summary of Our Privacy Principles

Gardeners Harrow on the Hill follows the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality. In practical terms, this means we:

collect only what we need;
use data fairly and responsibly;
keep information secure;
retain it only for as long as necessary;
and respect your legal rights.

By using our services, you acknowledge that your personal data may be processed as described in this Privacy Policy. We are committed to handling all customer information with care, respect, and in compliance with applicable data protection law.