Privacy Policy - Gardeners Woolwich

Gardeners Woolwich is committed to protecting the privacy and personal data of all customers in the Woolwich area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when providing gardening services. It applies to all Gardeners Woolwich customers in the area, including individuals who enquire about our services, receive quotes, book appointments, or have work carried out at their property.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We aim to keep our handling of personal information fair, transparent, and proportionate to the services we provide. This policy should be read carefully so you understand what data we collect, why we collect it, and the rights you have over your information.

1. Personal Data We Collect

We collect only the information that is necessary to provide gardening services, manage customer relationships, and meet legal or operational obligations. Depending on how you interact with us, we may collect the following categories of data:

Identity details such as your name and title.
Contact details such as your address, email address, and telephone number.
Service details such as information about your garden, property access, preferred service dates, and work instructions.
Communication records including enquiries, quotes, service notes, complaints, and correspondence.
Billing and payment information where required for invoicing and accounting.
Technical information such as basic device or website usage data if you interact with our online services.
Security and access information where needed for site visits, entry arrangements, or customer safety.

We do not intentionally collect special category data unless it is necessary for a specific lawful purpose and you have provided it voluntarily, or where the law permits us to do so. If you choose to share such information, we will handle it with extra care and only for the relevant purpose.

2. How We Use Your Data

We use personal data to operate our gardening services effectively and responsibly. The main purposes include:

Responding to enquiries and providing quotations.
Scheduling and delivering gardening services.
Managing customer accounts, instructions, and service preferences.
Processing payments, issuing invoices, and maintaining financial records.
Handling complaints, feedback, and service follow-up.
Meeting legal, tax, insurance, and record-keeping obligations.
Protecting our business, staff, customers, and property.
Improving our services and customer experience.

We will only use your data for the purposes for which it was collected, unless we reasonably believe we need to use it for another compatible purpose and the law allows this. We do not sell personal data.

3. Lawful Basis for Processing

Under data protection law, we must have a valid lawful basis to process personal data. Gardeners Woolwich relies on the following lawful bases:

Contract

We process data where it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes arranging services, responding to bookings, carrying out gardening work, and managing invoices.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include maintaining service records, managing customer communications, preventing fraud, improving our operations, and protecting our business from misuse. When relying on this basis, we consider the impact on your privacy and only process data in a way that is proportionate and reasonable.

Legal Obligation

We process certain information where required to comply with legal obligations, such as tax law, accounting requirements, insurance duties, or regulatory record retention rules.

Consent

In limited cases, we may rely on your consent, for example where we need to send certain optional marketing communications or use information beyond the immediate service context. If we rely on consent, you may withdraw it at any time.

4. How We Share Personal Data

We may share personal data with trusted third parties where necessary for service delivery, administration, or compliance. These third parties act as processors or independent controllers depending on the situation.

Examples of processors and service providers may include:

IT and cloud storage providers.
Payment processing providers.
Accounting and bookkeeping software providers.
Scheduling, customer management, or communication tools.
Professional advisers such as accountants, insurers, or legal advisers.
Waste disposal or specialist subcontractors, where required for a service.

We require processors to handle personal data securely, to use it only on our instructions, and to comply with data protection law. We do not permit them to use your data for their own unrelated purposes.

We may also disclose data where necessary to comply with legal requirements, enforce our agreements, protect rights or safety, or respond to lawful requests from public authorities.

5. Data Retention

We keep personal data only for as long as necessary for the purposes described in this policy, including to meet legal, accounting, and reporting requirements. Retention periods vary depending on the nature of the data and the reason for processing.

In general, we consider the following principles:

Customer and service records are retained for as long as needed to manage the relationship and address any follow-up issues.
Financial and invoicing records are retained for the period required by tax and accounting laws.
Communication records may be kept for a reasonable period to respond to queries, resolve disputes, and maintain service history.
Data collected on the basis of consent is retained until consent is withdrawn or the data is no longer required.

When data is no longer needed, we will securely delete, anonymise, or destroy it. We periodically review the information we hold to ensure it is not retained longer than necessary.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and restricted sharing of information on a need-to-know basis.

While we work hard to safeguard your information, no system can be guaranteed completely secure. If we become aware of a personal data breach that poses a risk to your rights and freedoms, we will respond in line with applicable legal requirements.

7. Your Rights

As a data subject under UK GDPR, you have a number of rights regarding your personal data. These include:

Right of access – you can request confirmation of whether we process your data and obtain a copy of it.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – in certain circumstances, you can ask us to delete your data.
Right to restrict processing – you may ask us to limit how we use your data in specific situations.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – where applicable, you can request your data in a structured, commonly used format.
Right to withdraw consent – where we rely on consent, you can withdraw it at any time.

To exercise these rights, you may need to provide enough information to verify your identity and help us locate the relevant records. We will respond within the time limits set by law unless an extension is permitted.

8. Children’s Data

Our services are directed to adult customers and property owners or occupiers. We do not knowingly collect personal data from children as part of our routine business activities. If we become aware that we have inadvertently collected such data without appropriate authorisation, we will take steps to remove it promptly unless we are legally required to retain it.

9. International Transfers

If any of our processors store or access data outside the UK, we will ensure that appropriate safeguards are in place to protect your information. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent legal mechanisms approved under data protection law.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our internal practices. Any updated version will apply from the date it takes effect. We encourage customers to review this policy periodically so they remain informed about how their personal data is used.

11. Summary of Our Commitment

Gardeners Woolwich processes personal data fairly, lawfully, and transparently. We collect only what we need, use it for clear business purposes, retain it only as long as necessary, and protect it through appropriate safeguards. We also respect your rights and will handle requests in accordance with data protection law.

This policy applies to all Gardeners Woolwich customers in the area and is designed to ensure that your personal information is handled with care, confidentiality, and accountability.

By using our gardening services, making an enquiry, or otherwise providing us with personal information, you acknowledge that you have read and understood this Privacy Policy.