Privacy Policy - Gardeners Elm Park

Gardeners Elm Park respects the privacy of every customer and visitor whose personal data is processed in connection with our gardening services. This Privacy Policy explains how we collect, use, store, share, and protect personal data for all Gardeners Elm Park customers in the area. It is intended to meet the requirements of the UK GDPR and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to all individuals in the Elm Park area who use, enquire about, or receive gardening services from Gardeners Elm Park. It covers personal data collected through phone calls, email correspondence, online enquiry forms, service bookings, payment processing, site visits, quotations, and ongoing customer relationships. By using our services, you acknowledge that your information may be processed in the ways described below.

2. Personal data we collect

We only collect personal data that is relevant, necessary, and limited to the purposes of providing our services and managing our business. The information we may collect includes:

Identity details such as your name and, where needed, business or property name.
Contact details such as address, telephone number, and email address.
Service information such as the type of gardening work requested, property access notes, scheduling preferences, and service history.
Billing and payment information such as invoice details, payment status, and transaction records.
Communication records such as messages, call notes, complaints, feedback, and correspondence relating to quotes or appointments.
Technical data if you interact with digital systems, including basic device or usage information required to maintain service quality and security.

We do not intentionally collect special category data unless it is strictly necessary and you choose to provide it. If such information is ever shared with us, it will only be processed where a lawful basis exists and where appropriate safeguards are in place.

3. How we use your data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to schedule, deliver, and manage gardening services;
to communicate about appointments, changes, or service updates;
to process invoices, payments, and refunds where applicable;
to maintain accurate records of customer preferences and completed work;
to handle complaints, queries, and service improvements;
to comply with legal, accounting, and regulatory obligations;
to protect our business, staff, customers, and property from fraud or misuse.

We will not use your personal data for purposes that are incompatible with the reasons it was collected unless we have a lawful basis to do so.

4. Lawful basis for processing

Gardeners Elm Park processes personal data only where permitted under the UK GDPR. Depending on the context, our lawful bases may include:

Contract

We process personal data when it is necessary to take steps at your request before entering into a contract, or to perform a contract for gardening services. This includes booking appointments, providing quotations, carrying out agreed work, and managing payments.

Legal obligation

We may process and retain data where required by law, including tax, accounting, insurance, or record-keeping obligations.

Legitimate interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Legitimate interests may include maintaining business records, improving services, preventing fraud, responding to service issues, and ensuring network and information security.

Consent

In limited cases, we may rely on your consent, for example where you have clearly agreed to optional communications or to the collection of certain information. Where consent is used, you may withdraw it at any time.

5. Retention of personal data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods may vary depending on the type of information and the relevant purpose.

Customer and service records are generally retained for the period needed to manage the service relationship and resolve any follow-up issues.
Financial and invoicing records are retained for the time required by tax and accounting law.
Communication records are retained as needed to evidence instructions, service changes, or complaint handling.
Security-related records may be kept for a reasonable period where necessary to prevent or investigate misuse.

When personal data is no longer needed, it will be securely deleted, anonymised, or otherwise disposed of in a controlled manner.

6. Sharing and processors

We may share personal data with trusted third parties who help us operate Gardeners Elm Park efficiently and lawfully. These parties act as processors or, in some cases, independent controllers. They are only given access to the information required for their specific function and are expected to protect it appropriately.

Examples of processors and service providers may include:

Payment providers that handle card or electronic payments;
Accounting and bookkeeping services that assist with invoices, records, and tax compliance;
IT and cloud storage providers that support data hosting, security, and business continuity;
Communication platforms used for email, messaging, scheduling, or customer administration;
Professional advisers such as lawyers, insurers, or auditors where required.

Where processors are used, we ensure appropriate data protection terms are in place. We do not sell personal data.

7. International transfers

Where personal data is processed outside the UK, we will take steps to ensure that appropriate safeguards are in place. This may include the use of standard contractual clauses, adequacy regulations, or other lawful transfer mechanisms. We aim to keep processing within the UK or with providers that offer suitable protection.

8. Data security

We take reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and regular review of data-handling practices.

While we work hard to protect information, no system can be guaranteed to be completely secure. If a data breach occurs and is likely to result in a risk to your rights and freedoms, we will act in accordance with applicable law.

9. Your rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain information in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

These rights are not absolute and may be subject to legal exceptions or limitations. If you wish to exercise any of these rights, you can make a request through the channels normally used to communicate with us. We may need to verify your identity before responding.

10. Children’s data

Gardeners Elm Park does not knowingly collect personal data from children for marketing or service purposes. Our services are intended for adult customers or for individuals acting on behalf of a property owner, tenant, landlord, or business. If we become aware that data from a child has been collected without appropriate permission, we will take steps to delete it where required.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data-handling practices. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their personal data is used.

12. Fair and lawful processing

Gardeners Elm Park is committed to fairness, transparency, and accountability in every stage of data processing. We only collect information that is necessary, we use it for clear and legitimate purposes, and we keep it for no longer than required. Our approach is designed to respect privacy while allowing us to deliver reliable gardening services throughout the Elm Park area.

13. Summary of key principles

In summary, we will:

collect personal data only where needed for service delivery and business management;
use a clear lawful basis for each processing activity;
retain information only for appropriate periods;
share data only with trusted processors or where legally required;
support your rights under data protection law.

Gardeners Elm Park values privacy and handles personal information responsibly, securely, and in accordance with applicable law.