Gardeners East Bedfont Privacy Policy

This Privacy Policy explains how Gardeners East Bedfont collects, uses, stores and protects personal data for all Gardeners East Bedfont customers in the local area. It also explains your rights under data protection law, including the UK General Data Protection Regulation and the Data Protection Act.

By using our gardening and related services, you acknowledge that you have read and understood this Privacy Policy. We may update this policy from time to time to reflect changes in our practices or legal requirements, and any updated version will apply from the date it is made available.

Scope of this Privacy Policy

This Privacy Policy applies to all Gardeners East Bedfont customers in the local area, including prospective customers who request quotes or information, current customers who receive our services, and former customers whose data we retain in accordance with this policy. It applies to personal data collected through in-person interactions, telephone calls, written correspondence, and other methods of communication where we interact directly with you.

What Personal Data We Collect

We only collect personal data that is necessary for us to provide our services, manage our business, and comply with our legal obligations. The types of personal data we may collect include:

Identification and contact details such as your name, postal address, and general location details relevant for providing gardening services.

Service and contract information such as details of your property that are relevant to the services, records of services provided, quotes, invoices, and payment records that do not directly identify payment card numbers but may include references to payment transactions.

Communication records such as notes of conversations, messages you send to us, and any feedback or complaints you provide.

Usage and preference information such as your preferred service times, frequency of visits, and any specific instructions you provide regarding your garden or property.

How We Collect Your Data

We collect personal data directly from you when you contact us to request information or a quote, when you agree to receive services, during the course of providing services, when you provide feedback or raise a query, and when you otherwise communicate with us in relation to our services.

We may also generate personal data as we provide services to you, for example by recording details of work carried out at your property, service dates, and related information needed for our records and for any follow-up visits.

Lawful Bases for Processing

We process your personal data only where we have a lawful basis under data protection law. Depending on the circumstances, we rely on the following lawful bases:

Contract: We process your data where it is necessary to enter into or perform a contract with you, such as providing gardening services, issuing quotes, and managing bookings and payments.

Legal obligation: We process your data where necessary to comply with legal obligations, such as record-keeping, tax, and accounting requirements.

Legitimate interests: We process your data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes managing our relationship with you, improving our services, handling queries and complaints, and protecting our business from fraud or misuse.

Consent: In some limited cases we may rely on your consent, for example if you specifically request that we retain certain information for future reference or if you ask us to share information with another service provider on your behalf. Where we rely on consent, you may withdraw it at any time.

How We Use Your Personal Data

We use your personal data for the following purposes:

To provide gardening and related services that you request, including arranging visits, carrying out work, and communicating with you about our services.

To create and manage quotes, bookings, and contracts, and to maintain accurate records of the services provided to you.

To manage billing and payments and to keep appropriate financial and accounting records.

To respond to your enquiries, feedback, and complaints and to provide customer support.

To manage and improve our business operations, including planning schedules, ensuring the safety of our staff, and reviewing service quality.

To comply with applicable laws, regulations, and professional or insurance requirements.

Data Sharing and Processors

We do not sell your personal data. We only share it where necessary and appropriate, and always in accordance with data protection law.

We may engage third parties who act as data processors and who process data on our behalf for specific purposes. These may include companies providing data storage or backup services, accounting or bookkeeping services, and information technology support. When we use processors, we ensure that they are bound by written contracts that require them to only process your data in accordance with our instructions, to keep it secure, and to comply with data protection requirements.

We may also share your data where required by law or regulation, where it is necessary to establish, exercise or defend legal claims, or where you have specifically asked us to share information with another party.

Data Retention

We keep your personal data only for as long as it is necessary for the purposes for which it was collected, and to meet any legal, accounting, or reporting requirements.

In general, we keep customer records, including basic contact and service information, for a period that allows us to manage our relationship with you, address any queries or disputes, and comply with tax and accounting rules. After the relevant retention period has expired, we will securely delete or anonymise your personal data so that it can no longer be used to identify you.

Where we rely on your consent for a specific use of your data, we will retain that data only for as long as your consent remains valid or until you withdraw your consent, whichever occurs first, unless we need to keep the data for another lawful basis.

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful access, accidental loss, destruction, or damage. These measures may include access controls, secure storage, and restricting access to personal data to those who have a legitimate need to know it for the purposes set out in this policy.

While we take reasonable steps to protect your data, no system can be guaranteed to be completely secure. We will take prompt action to investigate and, where required, notify you and any relevant authorities if we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms.

Your Data Protection Rights

You have a number of rights under data protection law in relation to the personal data we hold about you. These rights may be subject to certain conditions and legal exceptions, but we will always consider and respond to any request you make to exercise them.

Right of access: You have the right to ask for confirmation that we process your personal data and to request a copy of that data, along with certain information about how it is used.

Right to rectification: You have the right to ask us to correct or complete any inaccurate or incomplete personal data we hold about you.

Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and there is no legal reason for us to keep it.

Right to restriction of processing: You may have the right to request that we restrict the processing of your personal data, for example while we verify its accuracy or our legal basis for processing it.

Right to object: You have the right to object to processing that is based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is required for legal claims.

Right to data portability: In some cases, you have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format and to request that we transfer it to another controller where technically feasible.

Right to withdraw consent: Where we rely on your consent to process your personal data, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before you withdrew consent.

How to Raise Concerns or Complaints

If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us using the usual contact details you use for arranging services with Gardeners East Bedfont. We will do our best to address any concerns you may have.

You also have the right to lodge a complaint with the relevant data protection authority if you are not satisfied with our response or believe that your data protection rights have been infringed. Further information about your rights and how to raise a concern is available from the data protection authority.