Privacy Policy - Gardeners Wanstead

Effective for all Gardeners Wanstead customers in the area, this Privacy Policy explains how we collect, use, store, share, and protect personal data when providing gardening services. We are committed to handling personal information in a lawful, fair, and transparent way in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Gardeners Wanstead customers in area, including individuals who enquire about our services, request quotations, book appointments, receive ongoing garden maintenance, or otherwise interact with us in connection with our services. By using our services, you acknowledge that your personal data may be processed as described in this policy.

1. Who We Are

Gardeners Wanstead provides gardening and related outdoor maintenance services to residential and commercial customers in the local area. For the purposes of data protection law, we are the data controller for the personal data we collect and use in the course of our business, meaning we determine why and how your data is processed.

We take privacy seriously and aim to collect only the information needed to deliver services efficiently, manage customer relationships, comply with legal obligations, and improve our operations responsibly. We do not sell personal data.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity information: name, title, and any business or property name provided to us.
Contact details: address, email address, and telephone number.
Service information: details about the gardening services requested, job notes, access instructions, preferences, and service history.
Property information: information relevant to the work required, such as garden size, condition, and photographs supplied by you or taken during visits for documentation.
Billing and payment information: invoicing details, payment status, and transaction records.
Communication records: emails, messages, call notes, complaints, feedback, and correspondence relating to quotations or service delivery.
Technical information: limited information collected through basic website or device interactions, if applicable, such as cookies or log data used for security and performance monitoring.

We do not intentionally collect special category data unless it is necessary and you choose to provide it. Special category data may include information about health, religious beliefs, or other sensitive details. If such information is disclosed to us incidentally, we will handle it carefully and only where there is a valid lawful basis.

3. How We Use Your Data

We use personal data for the following purposes:

to provide quotations and respond to enquiries;
to schedule, deliver, and manage gardening services;
to communicate about appointments, changes, or service issues;
to maintain accurate client and job records;
to process payments, issue invoices, and manage accounts;
to handle complaints, disputes, and service recovery;
to comply with legal, tax, accounting, and regulatory obligations;
to improve service quality, operational planning, and customer experience;
to protect our business, staff, and customers from fraud, misuse, or security threats.

We will only use your personal data where the law allows us to do so. Where appropriate, we may rely on more than one lawful basis for processing.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. We rely on the following lawful bases:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes providing quotes at your request, carrying out agreed gardening work, managing bookings, and processing payments.

Legal Obligation

We process certain data to comply with legal obligations, including accounting, tax, insurance, and record-keeping requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. Examples include improving our services, maintaining business records, preventing fraud, and managing internal administration.

Consent

Where consent is required, such as for certain optional communications or specific processing activities, we will ask for it clearly and allow you to withdraw it at any time.

We do not rely on consent where another lawful basis is more appropriate, such as for service delivery or legal compliance.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties where necessary to operate our business and provide services. These recipients may act as processors or, in some cases, as independent controllers.

Examples of processors may include:

IT and hosting providers that support our systems, email, or data storage;
accounting or bookkeeping providers that help manage financial records;
payment service providers that process transactions securely;
customer management or scheduling tools used for service administration;
professional advisers such as accountants, insurers, or legal advisers where necessary;
subcontractors or workers involved in service delivery, limited to the information required for the job.

All processors are expected to handle data securely, use it only on our instructions, and comply with data protection requirements. Where data is shared with independent controllers, such as tax authorities or insurers, those organisations are responsible for their own processing.

We may also disclose personal data if required by law, court order, or to protect the rights, property, or safety of Gardeners Wanstead, our customers, or others.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, and reporting requirements. Retention periods depend on the type of data, the reason for processing, and any legal obligations that apply.

As a general approach:

customer and service records are retained for as long as needed to manage the relationship and resolve potential queries;
financial and tax-related records are kept for the period required by law;
communications and job notes may be retained for a reasonable period to support service history and customer support;
data no longer required is securely deleted, anonymised, or archived in accordance with our retention practices.

When data is no longer needed, we will take appropriate steps to dispose of it securely.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These may include:

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: in certain circumstances, you may ask us to delete your data.
Right to restriction: you may request that we limit how we use your data in certain situations.
Right to data portability: where applicable, you may request certain data in a usable format.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where we rely on consent, you can withdraw it at any time.

We may need to verify your identity before responding to a rights request. Some rights may be limited where we must retain information for legal reasons or where other exemptions apply.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully or unfairly.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures are designed to reflect the nature of the data we hold and the risks involved in processing it.

Although no system can be guaranteed to be completely secure, we regularly review our practices to reduce risk and maintain a reasonable level of protection. Access to personal data is restricted to individuals who need it for legitimate business purposes.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business operations, or data handling practices. Any revised version will apply from the date it is made available. We encourage customers to review the policy periodically so they remain informed about how their data is used.

10. Summary of Our Commitments

In summary, Gardeners Wanstead is committed to processing personal data lawfully, transparently, and with care. We collect only what is needed, use it for legitimate service and business purposes, retain it only as long as necessary, share it only with trusted processors or where required by law, and respect your rights under data protection legislation.

This policy applies to all Gardeners Wanstead customers in area.