Privacy Policy - Gardeners Upper Walthamstow

Gardeners Upper Walthamstow is committed to protecting the privacy and personal data of all customers in the Upper Walthamstow area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our gardening services. It applies to all Gardeners Upper Walthamstow customers in the area, whether you contact us for a one-off visit, an ongoing maintenance arrangement, or any related service.

We process personal data in a fair, lawful, and transparent way, in line with the UK GDPR and the Data Protection Act 2018. We only collect information that is relevant and necessary for delivering our services, managing customer relationships, meeting legal obligations, and improving service quality.

1. Information We Collect

We may collect and use the following categories of personal data:

Identity details such as your name and, where relevant, the name of any authorised representative.
Contact details including address, email address, and telephone number.
Service information such as the type of gardening work requested, preferred service frequency, property access details, and appointment notes.
Payment and billing information where needed for invoicing, receipts, or payment processing.
Communication records including messages, service requests, complaints, feedback, and other correspondence.
Technical information if you interact with us digitally, such as device or usage data that helps us secure and improve our systems.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, or unless another lawful basis applies. If such data is ever needed, we will handle it with additional care and safeguards.

2. How We Use Your Data

We use personal data for the following purposes:

To provide gardening services requested by you.
To arrange visits, confirm appointments, and manage bookings.
To prepare quotations, invoices, and payment records.
To communicate about service updates, changes, or follow-up matters.
To manage customer accounts and records accurately.
To respond to enquiries, feedback, or complaints.
To meet legal, tax, accounting, and regulatory requirements.
To protect the security of our business, staff, customers, and systems.
To improve our service quality, planning, and internal operations.

We will not use your personal data for purposes that are incompatible with those described in this policy without informing you where required by law.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Gardeners Upper Walthamstow relies on the following lawful bases:

Contract - where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legitimate interests - where processing is needed to run and improve our services, manage customer relationships, maintain records, and ensure business security, provided these interests do not override your rights and freedoms.
Legal obligation - where we must process data to comply with tax, accounting, safeguarding, insurance, or other legal duties.
Consent - where we rely on your clear permission for optional processing activities, and you may withdraw consent at any time.

When we rely on legitimate interests, we balance our interests against your privacy rights. When consent is used, it will be requested clearly and separately from other matters.

4. Sharing Your Information

We may share personal data with trusted third parties when necessary and only for legitimate business purposes. These may include:

Service providers and processors who support our business operations, such as scheduling, payment handling, record storage, IT support, and administrative services.
Professional advisers such as accountants, legal advisers, or insurers when required for professional services or compliance.
Public authorities where disclosure is required by law, court order, or regulatory request.

We require processors to handle personal data securely, use it only on our instructions, and maintain appropriate technical and organisational safeguards. We do not sell your personal data.

Examples of Processors

Our processors may include:

IT and cloud service providers used for secure data storage or communication.
Booking or invoicing systems used to manage appointments and payments.
Administrative support providers who assist with document preparation or record management.

All processors are selected carefully and are required to process data in line with data protection law and our instructions.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the purpose for which it is held.

In general:

Customer service records are kept for as long as needed to manage the relationship and any follow-up matters.
Financial and tax records are kept for the period required by law.
Communication records are retained for a reasonable period to help with service history, complaints, or dispute resolution.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. Retention is reviewed periodically to ensure we do not keep information longer than necessary.

6. Your Rights

As a data subject under GDPR, you have a number of rights in relation to your personal data. Subject to legal conditions and exemptions, you may have the right to:

Access the personal data we hold about you.
Rectification of inaccurate or incomplete data.
Erasure of your data in certain circumstances.
Restriction of processing in certain situations.
Object to processing based on legitimate interests or direct marketing, where applicable.
Data portability for information you provided to us, where processing is based on consent or contract and carried out by automated means.
Withdraw consent at any time where processing depends on consent.

You also have the right to raise concerns about how we handle your data. If you believe your rights have not been respected, you may raise the issue with the relevant data protection authority in the UK.

We aim to handle requests promptly and fairly. To protect your privacy, we may need to verify your identity before responding to a request.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include controlled access, secure storage, staff awareness, and reasonable cybersecurity practices.

While we work hard to protect all information, no system can be guaranteed to be completely secure. If a data breach occurs that affects your personal data and presents a risk to your rights and freedoms, we will act in accordance with our legal obligations.

8. International Transfers

If any personal data is transferred outside the UK, we will ensure that suitable safeguards are in place so that your information remains protected to an appropriate standard. Where required, we will rely on approved transfer mechanisms and comply with applicable legal requirements.

9. Children’s Data

Our services are generally intended for adult customers or individuals acting on behalf of property owners or occupiers. We do not knowingly collect personal data from children unless it is necessary and lawful in the context of a service arrangement. If we become aware that data has been collected inappropriately, we will take steps to delete or correct it as appropriate.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is issued. We encourage customers in the Upper Walthamstow area to review this policy periodically so they remain informed about how their information is used.

11. Summary of Our Commitment

Gardeners Upper Walthamstow respects your privacy and handles personal data responsibly. We collect only the information needed to deliver our gardening services, rely on clear lawful bases for processing, retain data for no longer than necessary, use processors carefully, and support your rights under GDPR. This policy applies to all Gardeners Upper Walthamstow customers in area.