Privacy Policy - Gardeners Charing Cross
Gardeners Charing Cross is committed to protecting the privacy and personal data of all customers in the area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Gardeners Charing Cross customers in the area, including anyone who requests, receives, or enquires about our gardening services.
1. Who We Are
For the purposes of data protection law, Gardeners Charing Cross acts as the data controller in relation to the personal data we collect and process. This means we determine why and how your personal information is used when you engage our services, make an enquiry, or otherwise interact with us in connection with gardening work.
We are responsible for ensuring that personal data is handled lawfully, fairly, and transparently. We also take reasonable steps to make sure information is accurate, secure, and retained only for as long as necessary.
2. Personal Data We Collect
We may collect and process a range of personal data depending on how you interact with us and which services you request. The information we collect may include:
- Identity details such as your name
- Contact details such as telephone number and email address
- Address details including service location and billing address
- Service information relating to gardening tasks, appointments, and preferences
- Communication records including messages, notes, and correspondence
- Payment-related information needed to process transactions
- Technical information such as basic website or device data, where relevant
We generally collect this data directly from you when you enquire about services, request a quotation, book work, or communicate with us. In some cases, we may receive information from third parties where necessary to deliver a service you have requested or to manage a contractual relationship.
3. How We Use Your Data
We use personal data only for legitimate operational and administrative purposes connected to our services. These include:
- Providing gardening services and managing bookings
- Responding to enquiries and preparing estimates
- Sending service updates and confirming arrangements
- Processing payments and maintaining business records
- Handling complaints, queries, or follow-up requests
- Meeting legal, accounting, and regulatory obligations
- Improving the quality and efficiency of our services
We do not use your personal data for purposes that are incompatible with the reason it was collected, unless we have a lawful basis to do so.
4. Lawful Basis for Processing
Under UK GDPR, we must identify a lawful basis before processing personal data. Gardeners Charing Cross relies on the following lawful bases where appropriate:
Contract
We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging gardening services, confirming schedules, issuing invoices, and managing customer requests.
Legal Obligation
We may process certain data to comply with legal requirements such as tax records, accounting rules, or other obligations imposed by law.
Legitimate Interests
We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights. This may include managing service quality, maintaining records, preventing fraud, and improving operations.
Consent
Where we rely on your consent, for example for certain optional communications or specific processing activities, you have the right to withdraw that consent at any time.
5. Data Sharing and Processors
We may share personal data with trusted third parties who act as processors on our behalf. Processors only handle data under our instructions and are required to protect it appropriately. Examples may include:
- Payment service providers
- Accounting or bookkeeping services
- IT and cloud storage providers
- Administrative support services
- Communication or scheduling tools
We may also disclose data where required by law, regulation, court order, or lawful request from a public authority. We do not sell personal data.
Where a processor is engaged, we seek appropriate contractual safeguards to ensure your data is handled securely and in compliance with applicable data protection rules. Gardeners Charing Cross remains responsible for ensuring that any processors we use meet required standards of confidentiality, integrity, and security.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods may vary depending on the type of data, the nature of the service, and any legal or accounting requirements.
In general, we may keep customer records for a reasonable period after the end of a service relationship to manage follow-up matters, resolve disputes, and meet legal obligations. When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.
Retention is based on necessity, not convenience. We regularly review stored data to ensure it is not kept for longer than required.
7. Your Rights Under UK GDPR
You have a number of rights in relation to your personal data. Subject to legal conditions and exemptions, these rights include:
- Right of access – to request a copy of the personal data we hold about you
- Right to rectification – to ask us to correct inaccurate or incomplete data
- Right to erasure – to request deletion of your data in certain circumstances
- Right to restriction – to ask us to limit how we use your data
- Right to object – to object to processing based on legitimate interests or direct marketing
- Right to data portability – to receive certain data in a structured, commonly used format
- Right to withdraw consent – where processing is based on consent
If you wish to exercise any of these rights, we will assess your request in line with data protection law and respond within the required timeframe. In some cases, we may need to retain limited information where the law permits or requires us to do so.
8. Security of Your Data
We take the security of personal data seriously and use reasonable technical and organisational measures to protect it from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and limiting data access to those who need it for legitimate business purposes.
Although no system can be guaranteed to be completely secure, we work to maintain appropriate safeguards and review them as needed.
9. International Transfers
Where personal data is transferred outside the UK, we will ensure appropriate protections are in place in accordance with applicable law. This may include the use of approved safeguards designed to protect your data to a standard consistent with UK requirements.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our operations, legal obligations, or data protection practices. Any updated version will apply from the date it is published or otherwise made available. We encourage customers to review the policy periodically so they remain informed about how their data is handled.
11. Complaints and Further Information
If you have concerns about how your personal data is handled, you have the right to raise those concerns with the relevant data protection authority in the UK. We encourage you to review your rights and to seek clarification whenever needed. We aim to handle personal data responsibly, transparently, and in a way that respects customer privacy at all times.
12. Summary of Our Commitment
Gardeners Charing Cross collects only the information needed to provide and manage gardening services, uses it for lawful business purposes, retains it for no longer than necessary, and shares it only with trusted processors or where required by law. We are committed to treating all customer data with care, confidentiality, and respect.