Gardeners Eastcote Privacy Policy

This Privacy Policy explains how Gardeners Eastcote collects, uses, stores, and protects personal data relating to its customers and prospective customers. It applies to all Gardeners Eastcote customers and service users within our service area, regardless of how they contact us or use our gardening services.

Gardeners Eastcote is committed to complying with applicable data protection laws, including the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. We handle personal data in a lawful, fair, and transparent manner.

Personal Data We Collect

We may collect, use, store, and process the following categories of personal data:

Identification and contact details, such as full name, postal address, service address, and general contact details required to arrange and deliver our services.

Service and contract information, such as details of the gardening or maintenance services you request, visit dates and times, quotations provided, invoices, payment records, and related correspondence.

Payment information, such as records of payments made and payment method type. We do not store full card details where a third party payment processor is used.

Communication data, including information you provide when you contact us by phone, post, or through any other communication method, such as enquiries, feedback, or complaints.

Usage and preference information, such as your preferences for types of services, regular maintenance schedules, and any specific instructions you give us relating to your property or garden.

How We Collect Personal Data

We collect personal data directly from you when you:

Request a quotation or make a booking for our services.

Enter into a contract with us for regular or one off gardening services.

Communicate with us by any method to ask questions, request support, or provide feedback.

Respond to our marketing communications or participate in promotions where these are offered.

We may also collect limited information from publicly available sources to verify addresses or basic contact details where required for service delivery and lawful business purposes.

Purposes and Lawful Bases for Processing

We process your personal data only where we have a lawful basis under data protection law. The main purposes and corresponding lawful bases are as follows:

To provide and manage gardening services: We use your personal data to schedule visits, carry out work, manage appointments, and administer your account. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.

To handle quotations and enquiries: We process your identification and contact details to prepare quotes and respond to your questions. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.

To manage billing and payments: We process payment and invoice information for the purpose of issuing invoices, processing payments, and keeping financial records. The lawful bases are performance of a contract and compliance with legal obligations, including tax and accounting requirements.

To maintain records and comply with law: We may retain relevant personal data as part of our business records and to comply with legal and regulatory requirements. The lawful basis is compliance with a legal obligation and our legitimate interests in proper business administration.

To communicate with you about our services: We may contact you about changes to our services, terms, or policies, and to manage ongoing work. The lawful bases are performance of a contract and our legitimate interests in keeping you informed about important service information.

Marketing communications: We may send you marketing information about our services where the law permits and where you have not opted out. The lawful bases are consent, where required, or our legitimate interests in promoting and developing our business. You can opt out of marketing communications at any time.

Data Retention

We will retain your personal data only for as long as is reasonably necessary for the purposes set out in this Privacy Policy, including to satisfy legal, accounting, or reporting requirements.

In general, we apply the following retention periods:

Customer and contract records are typically kept for up to six years after the end of the customer relationship, to enable us to respond to queries and to meet legal and regulatory obligations.

Financial and invoicing records are retained for the period required by applicable tax and accounting laws.

Enquiries and correspondence from prospective customers who do not proceed may be kept for a shorter period, provided there is no ongoing need to retain them.

Where personal data is no longer needed, it will be securely deleted or anonymised so that it can no longer be associated with you.

Data Sharing and Processors

We do not sell your personal data. We may share your personal data with selected third parties where necessary for the purposes described in this policy.

Service providers and data processors: We may use third party providers to support the operation of our business, such as payment processing services, accounting or bookkeeping support, and information technology or administrative service providers. These third parties act as processors on our behalf and may only process personal data in accordance with our instructions and for the purposes we specify. We require all processors to implement appropriate security measures and to respect the confidentiality of your personal data.

Professional advisers: We may share personal data with professional advisers, such as accountants or legal advisers, where necessary for advice and compliance with our legal obligations.

Legal and regulatory authorities: We may disclose personal data where required to comply with applicable law, a lawful request from authorities, or to establish, exercise, or defend legal claims.

In the event of a business transfer or restructuring, your personal data may be transferred in accordance with data protection law and with appropriate safeguards.

International Transfers

Our core activities are based in the United Kingdom, and we aim to keep personal data stored and processed within the UK or other territories that provide an adequate level of protection. Where it is necessary to transfer personal data to another country, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other lawful transfer mechanisms.

Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, unlawful processing, accidental loss, destruction, or damage. These measures include limiting access to personal data to those who have a business need to know it and requiring that they process it only on our instructions and subject to confidentiality obligations.

While we take these precautions, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work continuously to maintain and improve our security practices.

Your Data Protection Rights

Under data protection law, you have certain rights in relation to your personal data. These rights may be subject to legal conditions and exemptions. Your rights include:

Right of access: You can request confirmation as to whether we process your personal data and request a copy of the personal data we hold about you.

Right to rectification: You can request that we correct or complete any inaccurate or incomplete personal data we hold about you.

Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.

Right to restriction of processing: You may request that we restrict the processing of your personal data in specific situations, such as while we verify its accuracy or consider an objection you have raised.

Right to object: You can object to our processing of your personal data where we rely on legitimate interests as the lawful basis. You also have the absolute right to object to processing for direct marketing purposes.

Right to data portability: In certain cases, you may request that we provide your personal data in a structured, commonly used, and machine readable format or request that it be transmitted to another controller.

Right to withdraw consent: Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

You also have the right to lodge a complaint with the relevant supervisory authority if you are concerned about how we handle your personal data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any updated policy will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

This Privacy Policy applies to all Gardeners Eastcote customers and prospective customers in our service area and should be read together with any terms and conditions that apply to the services you receive.