Privacy Policy - Gardeners White City

Gardeners White City is committed to protecting the privacy and personal data of all customers in the White City area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Gardeners White City customers in the area, including current, former, and prospective customers who enquire about or receive our gardening services.

By using our services, making an enquiry, or communicating with us, you acknowledge that your personal data may be processed as described in this policy. We aim to keep our handling of data clear, fair, and limited to what is necessary for delivering professional gardening services.

1. Information We Collect

We collect personal data only where it is needed to provide services, manage customer relationships, comply with legal obligations, or improve our operations. The types of information we may collect include:

Identity details such as your name and title.
Contact details such as your address, email address, and telephone number.
Service details including information about your property, garden preferences, requested tasks, appointment notes, and any instructions you provide.
Billing and payment information needed to manage invoices, payments, and account records.
Communication records including emails, messages, call notes, and service correspondence.
Technical and usage data if you interact with digital systems used for administration, such as basic device, browser, or log information.
Special instructions or accessibility needs that help us safely and effectively carry out the work.

We do not seek to collect more information than is necessary. Where possible, we use the minimum amount of data required to perform our services properly and securely.

2. How We Use Your Personal Data

Your data may be used for the following purposes:

To respond to enquiries and provide quotes.
To arrange and deliver gardening services.
To manage bookings, scheduling, and service updates.
To issue invoices, process payments, and maintain financial records.
To communicate with you about your service requests or account.
To maintain internal records and service history.
To improve service quality, safety, and customer experience.
To comply with legal, tax, accounting, or regulatory requirements.
To protect against fraud, misuse, or unlawful activity.

We will only use your personal information for purposes that are compatible with the reason it was collected, unless we are required or permitted by law to do otherwise.

3. Lawful Basis for Processing

We process personal data only where we have a lawful basis under GDPR. Depending on the context, we may rely on one or more of the following lawful bases:

Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes providing quotes, scheduling work, carrying out gardening services, and managing billing arrangements.

Legal Obligation

We may process your data where needed to meet legal and regulatory obligations, such as accounting, tax, insurance, or record-keeping requirements.

Legitimate Interests

We may use your data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include maintaining service records, improving operations, handling enquiries, and preventing fraud or misuse.

Consent

In limited situations, we may rely on your consent, especially where processing is optional or relates to non-essential communications. Where consent is used, you may withdraw it at any time.

4. Sharing and Processors

We may share personal data with trusted third parties who act as processors on our behalf or, in some cases, as independent controllers. These parties are permitted to process your data only for specified purposes and must protect it appropriately.

Examples of processors may include:

Administrative service providers who support scheduling, record management, and customer communications.
IT and cloud service providers who store or secure business data.
Accounting and invoicing providers who help manage financial records.
Payment service providers who handle transactions securely.
Professional advisers such as legal, financial, or insurance advisers where necessary.

We may also disclose personal data if required by law, court order, or a lawful request from a public authority. Any sharing will be limited to what is necessary and carried out with appropriate safeguards.

We do not sell personal data.

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, tax, insurance, or dispute-resolution requirements.

Retention periods may vary depending on the type of information:

Enquiry records may be kept for a limited period to manage follow-up communication and customer service.
Service and contract records may be retained for the duration of the working relationship and for a reasonable period afterwards.
Financial and invoicing records are kept in line with legal and accounting obligations.
Communication records may be retained where needed for evidence, service history, or complaint handling.

When data is no longer required, we will securely delete it or anonymise it so that it can no longer identify you.

6. Data Security

We use appropriate technical and organisational measures to help protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and restricted use of personal information on a need-to-know basis.

While no system can be guaranteed to be completely secure, we take privacy protection seriously and regularly review our handling practices to maintain a high standard of security.

7. Your Rights Under GDPR

As a data subject, you have rights regarding the personal data we hold about you. Subject to legal conditions and exemptions, these rights may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to request that we limit the way we use your data in certain situations.
Right to data portability – to request transfer of certain data in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing, where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to raise concerns with the relevant data protection authority if you believe your rights have not been respected.

8. Children’s Data

Our services are intended for adults and property-related customers. We do not knowingly collect personal data from children. If we become aware that we have unintentionally collected information about a child without appropriate authority, we will take reasonable steps to delete it.

9. International Transfers

In some cases, data processors may store or access information outside the United Kingdom. Where this happens, we will ensure that appropriate safeguards are in place so that your personal data remains protected to a standard consistent with applicable data protection law.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. When updates are made, the revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how data is handled.

11. Summary of Key Principles

Gardeners White City follows the principles of lawfulness, fairness, transparency, data minimisation, purpose limitation, accuracy, storage limitation, integrity, and confidentiality. In practical terms, this means we aim to collect only the information needed, use it fairly, keep it safe, and retain it only for as long as necessary.

If you are a customer in the White City area, this policy explains how your data may be used in connection with our services. Our commitment is to treat your information responsibly and in line with GDPR requirements.