Privacy Policy - Gardeners Harlington

Gardeners Harlington is committed to protecting the privacy and personal data of all customers in the Harlington area. This Privacy Policy explains how we collect, use, store, share, and safeguard personal information when we provide gardening and related services. It applies to all Gardeners Harlington customers in the area, including people who enquire about our services, receive quotes, book appointments, or have work carried out on their property.

We process personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. We aim to handle all information fairly, transparently, and only for legitimate purposes connected with delivering our services.

1. Data We Collect

We collect only the information needed to manage enquiries, provide services, and meet our legal obligations. The types of personal data we may collect include:

Identity details: name, title, and any preferred form of address.
Contact details: address, email address, telephone number, and service location.
Service information: details of requested gardening work, property notes, access instructions, and scheduling preferences.
Payment information: billing records, payment status, and transaction references where applicable.
Communication records: emails, messages, call notes, complaint details, and feedback.
Technical data: limited website or device data if a digital enquiry is made, such as IP address or browser details, where relevant to security and performance.

We do not seek to collect sensitive personal data unless it is necessary and you choose to provide it. If you share special category data with us, for example health information relevant to access or scheduling, we will handle it carefully and only where appropriate.

2. How We Use Personal Data

We use personal data to manage our services and maintain accurate records. Typical uses include:

responding to enquiries and preparing quotes;
booking and delivering gardening services;
coordinating visits and managing access to properties;
issuing invoices and processing payments;
recording service history and customer preferences;
handling complaints, disputes, and follow-up requests;
meeting legal, tax, accounting, and insurance obligations;
protecting our business, staff, and customers from fraud or misuse.

We only use personal data for purposes that are compatible with the reason it was collected. If we need to use your information for a new purpose, we will ensure there is a lawful basis and, where required, provide appropriate notice.

3. Lawful Basis for Processing

We rely on different lawful bases under data protection law depending on the context of the processing. These may include:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes, confirming bookings, delivering services, issuing invoices, and managing customer records related to the service.

Legal Obligation

We may process and retain certain data to comply with legal duties, including tax, accounting, record-keeping, and regulatory requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where your rights and freedoms do not override those interests. This can include service administration, business planning, preventing fraud, improving service quality, and keeping internal records. When we rely on legitimate interests, we consider whether the processing is necessary and proportionate.

Consent

In some situations, we may ask for your consent, particularly where processing is not strictly necessary for the service or legal compliance. If consent is used, you have the right to withdraw it at any time.

4. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods depend on the type of record and the reason for holding it.

Customer enquiries: retained for a reasonable period to manage follow-up and service planning.
Service and invoice records: kept for the period required by tax, accounting, and business record obligations.
Complaints and correspondence: retained as needed to resolve the issue and maintain accurate service history.
Security or legal records: held for as long as necessary to protect our interests or comply with legal requirements.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. We regularly review the information we hold to ensure it is not kept longer than necessary.

5. Sharing Data and Processors

We may share personal data with trusted third parties who help us operate our services. These parties act as processors or independent controllers depending on the service they provide. We only share what is necessary and require appropriate safeguards.

Examples of processors may include:

IT and cloud storage providers: for secure data hosting, email, and file storage.
Accounting or bookkeeping providers: for invoicing, payment tracking, and financial records.
Scheduling or administration tools: for booking management and customer communication.
Payment service providers: for handling transactions where applicable.

We may also disclose information if required by law, court order, or lawful request from public authorities, or where disclosure is necessary to establish, exercise, or defend legal claims.

All processors are expected to protect your information, process it only on our instructions, and use appropriate technical and organisational measures to keep it secure.

6. Data Security

We take reasonable steps to protect personal data from accidental loss, unauthorised access, alteration, disclosure, or destruction. Measures may include access controls, secure storage, password protection, and limiting access to those who need the information for legitimate business purposes. Although no system can be guaranteed completely secure, we work to maintain a high standard of protection.

7. Your Rights

Under data protection law, you may have several rights regarding your personal data. These include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to ask for data to be deleted where there is no lawful reason to keep it.
Right to restrict processing: to ask us to limit how we use your data in certain circumstances.
Right to object: to object to processing based on legitimate interests or direct marketing where applicable.
Right to data portability: to receive certain information in a commonly used format where the law allows.
Right to withdraw consent: where processing is based on consent, you can withdraw it at any time.

These rights are not absolute. In some cases, legal requirements or legitimate business needs may allow us to continue processing certain information. If you make a request, we will assess it carefully and respond in line with applicable law.

8. Children’s Data

Our services are intended for adults responsible for properties and gardening arrangements. We do not knowingly collect personal data from children unless it is provided incidentally in a legitimate service context. If we become aware that we have collected such data without a valid reason, we will take appropriate steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. The most recent version will apply to all current and prospective customers in the Harlington area. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

10. Summary of Our Commitment

Gardeners Harlington only collects personal data that is relevant, necessary, and handled lawfully. We retain information for no longer than needed, use trusted processors where appropriate, and respect your rights under data protection law. Our goal is to provide gardening services responsibly while treating every customer’s personal information with care, fairness, and strict confidentiality.