Privacy Policy - Gardeners Canning Town

Gardeners Canning Town is committed to protecting the privacy and personal data of all customers in the area. This Privacy Policy explains how we collect, use, store, and share personal information when providing gardening services. It applies to all Gardeners Canning Town customers in area, including anyone who requests a quote, books a service, communicates with us, or uses our gardening services.

1. Information We Collect

We collect only the personal data necessary to provide and manage our services effectively. Depending on the nature of the service requested, we may collect:

Identity details: name, title, and, where relevant, business or property name.
Contact details: address, email address, telephone number, and preferred contact method.
Service information: details about your garden, property access, service preferences, booking history, and instructions.
Communication records: messages, notes from phone calls, complaint details, and other correspondence.
Payment information: billing details and payment records, where required for invoicing and account management.
Technical data: basic website or device data if you interact with our digital systems, such as IP address and browser type, where applicable.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, or unless another lawful basis applies under data protection law.

2. How We Use Your Personal Data

We use personal data for clear and legitimate business purposes connected to our gardening services. These include:

Providing quotations, arranging visits, and delivering gardening work.
Managing appointments, schedules, and service updates.
Processing payments, issuing invoices, and maintaining financial records.
Responding to questions, requests, feedback, and complaints.
Keeping accurate records of services carried out and customer preferences.
Improving service quality, safety, and customer experience.
Meeting legal, accounting, and regulatory obligations.

We will only use your information in ways that are compatible with the reasons it was collected, unless we have a lawful basis to do otherwise.

3. Lawful Basis for Processing

Under the UK GDPR and the Data Protection Act 2018, we must have a lawful basis for processing personal data. Gardeners Canning Town relies on the following bases:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes quotes, bookings, service delivery, billing, and customer support.

Legal Obligation

We may process data when necessary to comply with legal requirements, including tax obligations, accounting rules, health and safety duties, and record-keeping obligations.

Legitimate Interests

We may process data for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include managing business operations, maintaining service records, preventing fraud, and improving customer service. When relying on this basis, we carefully consider the impact on your privacy.

Consent

In limited situations, we may rely on your consent, for example where you voluntarily agree to receive certain optional communications. You can withdraw consent at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

4. Sharing Your Information and Processors

We may share personal data with trusted third parties that help us operate our business. These third parties act as processors when they handle data on our behalf and only under our instructions. Examples may include:

IT and cloud storage providers: for secure data hosting, backup, and communication systems.
Accounting and invoicing providers: for billing, bookkeeping, and financial administration.
Payment service providers: for processing card or electronic payments.
Administrative support providers: where necessary for scheduling or record management.

We require processors to handle data securely, confidentially, and in compliance with data protection law. We do not sell your personal information.

In some cases, we may also share information with professional advisers, insurers, or public authorities if required by law or necessary to protect our legal rights.

5. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected and to meet legal, accounting, or operational requirements. Retention periods depend on the type of information and the service involved.

Customer and service records: kept for the duration of the service relationship and for a reasonable period afterwards.
Financial and tax records: kept for the period required by law.
Communication records: retained as long as needed to handle enquiries, complaints, or service history.
Consent-based records: kept until consent is withdrawn or the data is no longer needed.

When data is no longer required, we delete it securely or anonymise it so that it can no longer identify you.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of data handling practices. While no method of transmission or storage is completely risk-free, we work to keep your information as secure as reasonably possible.

7. Your Rights

As a data subject under the UK GDPR, you have important rights in relation to your personal data. These include:

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: in certain situations, you may request deletion of your personal data.
Right to restriction: you may ask us to limit how we use your data in certain circumstances.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to data portability: you may request that data provided by you be transferred in a structured format where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the time limits set by law, subject to any exceptions permitted under the GDPR.

8. Children’s Data

Our services are aimed at adult customers and property owners or occupiers. We do not knowingly collect personal data from children unless it is necessary in a household or property context and is provided by an adult customer. If we become aware that data has been collected inappropriately, we will take reasonable steps to delete it.

9. International Transfers

Where service providers store or process data outside the UK, we ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We only allow transfers where adequate protection is maintained.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. Any updated version will apply from the date it is published or otherwise communicated to customers. We encourage you to review this policy periodically to stay informed about how we protect your data.

11. Summary of Our Commitment

Gardeners Canning Town respects your privacy and uses personal data responsibly, fairly, and transparently. We collect only what we need, use it for lawful purposes, retain it for no longer than necessary, and protect it with appropriate safeguards. Customers in the area can trust that their personal information is handled in line with GDPR principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

This policy applies to all Gardeners Canning Town customers in area.