Privacy Policy - Gardeners Yeading

Gardeners Yeading is committed to protecting the privacy and personal data of every customer in the Yeading area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when providing gardening services. It also sets out the lawful basis we rely on under the UK GDPR and Data Protection Act 2018, the length of time we retain data, the third parties that may process information on our behalf, and the rights available to individuals.

This policy applies to all Gardeners Yeading customers in the area, including prospective customers, current customers, and former customers whose data we continue to hold for lawful business, legal, or administrative reasons.

1. Data We Collect

We collect only the information necessary to manage enquiries, deliver gardening services, and maintain appropriate business records. Depending on the nature of the service, we may collect the following categories of personal data:

Identity details: name, title, and any information used to confirm who you are.
Contact details: address, email address, telephone number, and preferred contact method.
Service information: details about the gardening work requested, property access instructions, scheduling preferences, and service history.
Billing and payment records: invoicing details, transaction references, and payment status.
Communication records: emails, messages, notes from calls, and customer feedback.
Technical information: limited website or device data where relevant, such as IP address or browser type, if used for security or service improvement.

We do not intentionally collect special category data unless it is provided directly by you and is necessary for a specific legitimate reason. If such data is ever needed, we will only process it where a lawful basis applies and where additional safeguards are in place.

2. How We Use Personal Data

We use personal data to deliver gardening services effectively and to manage our relationship with customers. Typical uses include:

responding to enquiries and quoting for work;
arranging appointments and service visits;
providing garden maintenance, landscaping, planting, clearance, and related services;
managing invoices, receipts, and payments;
keeping records of completed work and customer preferences;
handling complaints, queries, and service updates;
meeting legal, tax, insurance, and regulatory obligations;
protecting our business, staff, and customers from fraud or misuse.

We will only use personal data for the purposes for which it was collected unless we reasonably determine that it is compatible with the original purpose or we are legally required to do otherwise.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Gardeners Yeading relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, booking services, carrying out agreed gardening work, and processing payments.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, maintaining service records, improving our services, and protecting against fraud or abuse. We always consider whether the processing is proportionate and relevant.

Legal Obligation

Some records must be kept to comply with tax, accounting, employment, health and safety, or insurance requirements. In these cases, our lawful basis is compliance with a legal obligation.

Consent

In limited situations, we may rely on consent, for example where you explicitly agree to receive certain types of optional communication. If consent is used, you may withdraw it at any time. Withdrawal will not affect the lawfulness of any processing carried out before consent was withdrawn.

4. Data Retention

We keep personal data only for as long as necessary to meet the purpose for which it was collected. Retention periods depend on the type of information and the reason it is held. In general:

customer enquiry records may be retained for a limited period if no service is booked;
service records, invoices, and payment records may be kept for several years to support tax, legal, and accounting obligations;
communication records may be retained for a reasonable period to handle ongoing service matters or disputes;
data no longer needed is securely deleted, anonymised, or archived in line with our retention practices.

We regularly review stored data to ensure it is not kept longer than necessary. If records must be retained for legal reasons, they will be kept securely and accessed only when required.

5. Processors and Data Sharing

We may use trusted third-party processors to support the operation of our services. These processors only handle personal data on our instructions and are required to protect it appropriately. Examples may include:

IT and hosting providers that store electronic records or support secure communications;
accounting and bookkeeping providers that help manage invoices, payments, and tax records;
payment service providers that process card or online payments;
professional advisers such as insurers, legal advisers, or auditors where necessary;
business administration tools used for scheduling, record keeping, and customer management.

We may also disclose personal data where required by law, regulation, court order, or other lawful request from a public authority. We do not sell personal data. Where a third party processes data on our behalf, we aim to ensure appropriate contractual and security safeguards are in place.

6. Data Security

We take reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, password protection, and careful handling of physical and digital records. While no system can be guaranteed completely secure, we work to maintain a level of protection appropriate to the risks involved.

7. Your Rights

Depending on the circumstances and legal conditions, you may have the following rights under data protection law:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of data in certain situations.
Right to restriction: to ask us to limit how we use your data in some cases.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to receive certain information in a structured, commonly used format where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To protect privacy, we may need to verify your identity before responding to a request. We aim to respond within the time limits required by law. If a request cannot be fully met, we will explain why.

8. Children’s Data

Our services are intended for adult customers and property-related service arrangements. We do not knowingly collect personal data from children unless it is incidentally provided by an adult customer in connection with service arrangements. If we become aware that we have collected data inappropriately, we will take steps to delete it where required.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or the way we handle personal data. When changes are made, the revised policy will apply from the date of publication or as otherwise stated. We encourage customers to review this policy periodically to stay informed.

10. Summary of Our Commitment

Gardeners Yeading handles personal data responsibly, fairly, and in line with applicable data protection law. We collect only what is necessary, use it for clear and lawful purposes, retain it for appropriate periods, and work with processors who are required to safeguard it. Customers in the Yeading area can be confident that their personal information is treated with care and respect.

In short: we aim to provide reliable gardening services while keeping your personal information secure, relevant, and lawful to process.