Privacy Policy - Gardeners West Hendon

This Privacy Policy explains how Gardeners West Hendon collects, uses, stores, shares, and protects personal data. It applies to all Gardeners West Hendon customers in the area, including people who request quotes, make bookings, receive gardening services, or otherwise interact with us in connection with our work. We are committed to handling personal information in a lawful, fair, and transparent way, in line with the UK GDPR and the Data Protection Act 2018.

We know that privacy matters. Whether you contact us about routine lawn care, hedge trimming, planting, seasonal tidy-ups, or ongoing garden maintenance, we will only process the information that is necessary for legitimate business and service purposes. This policy is intended to help you understand what data we collect, why we collect it, how long we keep it, and what choices and rights you have.

1. Who We Are

Gardeners West Hendon provides gardening and related outdoor maintenance services to residential and commercial customers in West Hendon and surrounding local areas. For the purposes of data protection law, we act as the data controller for personal data that we collect and use in connection with our services.

This means we determine the purposes and means of processing your data and are responsible for ensuring that any such processing complies with applicable data protection requirements. We take our obligations seriously and apply appropriate technical and organisational measures to protect personal information.

2. Personal Data We Collect

We collect only data that is relevant to providing services, managing enquiries, and maintaining our business records. The types of information we may collect include:

Identity details such as your name or business name.
Contact details such as address, email address, and telephone number.
Service details such as property type, garden requirements, service preferences, and appointment notes.
Billing and transaction information such as payment status, invoices, and service history.
Communication records such as messages, phone notes, complaint details, and feedback.
Technical data in limited circumstances, such as basic website or device information if you contact us through digital channels.

We do not seek to collect special category data unless it is strictly necessary and you have provided it voluntarily in a way that is relevant to a service request. For example, if a customer tells us about access needs or safety considerations, we may retain that information only so we can carry out the work safely and appropriately.

3. How We Use Your Data

We use personal data for specific and legitimate purposes related to our services. These may include:

responding to enquiries and providing quotes;
booking and managing appointments;
delivering gardening services and maintaining service records;
issuing invoices and processing payments;
handling customer support, complaints, and follow-up queries;
maintaining internal business administration and accounting records;
meeting legal, tax, and regulatory obligations;
protecting our services, staff, and customers from fraud or misuse.

We use data in a way that is proportionate to the purpose. We do not sell personal data, and we do not use it for unrelated purposes that would be unexpected or unfair.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis before processing personal data. Gardeners West Hendon relies on the following lawful bases where appropriate:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes providing quotes at your request, arranging services, carrying out work, and managing payments.

Legitimate Interests

We may process data for our legitimate business interests, provided that your rights and freedoms do not override those interests. This includes managing customer relationships, improving our services, keeping internal records, preventing misuse, and maintaining secure business operations. We always consider whether processing is necessary and whether it is reasonable in the circumstances.

Legal Obligation

We may retain and use certain information where required by law, including tax, accounting, insurance, or other regulatory obligations.

Consent

In limited situations, we may rely on your consent, for example where you have expressly agreed to certain optional processing. Where consent is used, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. How We Share Data

We may share personal data with trusted third parties only when necessary and only for the purposes described in this policy. These third parties may include:

service processors such as bookkeeping, invoicing, scheduling, or communication providers;
payment-related providers that help handle customer payments securely;
professional advisers such as accountants, legal advisers, or insurers;
public authorities where disclosure is required by law or necessary to defend legal claims.

Where we use third-party service providers, they act as processors on our behalf or as independent controllers where appropriate. We require processors to handle data securely, use it only on our instructions, and comply with GDPR obligations. We do not allow processors to use your personal data for their own purposes unless you have been informed and a lawful basis exists.

6. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by law. Retention periods may vary depending on the type of information and the reason we hold it.

In general, we may retain:

quote and enquiry records for a reasonable period to allow follow-up and service continuity;
customer service records for the duration of the working relationship and a limited period afterwards;
financial and tax records for the period required under accounting and tax law;
complaint or dispute records until the issue is resolved and any limitation period has expired.

When data is no longer needed, we delete it securely or anonymise it so that it can no longer identify you. We review retained records periodically to ensure they remain necessary.

7. Data Security

We use appropriate security measures designed to protect personal information from accidental loss, misuse, unauthorised access, disclosure, or alteration. These measures may include restricted access, password protection, secure storage, staff awareness, and careful control of service providers. While no system can be guaranteed completely secure, we take reasonable and proportionate steps to safeguard the data we hold.

Our staff and any relevant processors are expected to treat personal information as confidential and to handle it only for legitimate business purposes. We also aim to keep records accurate and up to date so that our services are delivered properly.

8. Your Rights Under GDPR

You have several rights in relation to your personal data. These rights are subject to certain conditions and exemptions under data protection law, but we will always consider your request carefully.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in some circumstances, you can ask us to delete your data.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests in some cases.
Right to data portability – where applicable, you can request that we provide your data in a structured, commonly used format.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with legal requirements and within the applicable time limits. We may need to verify your identity before responding to protect your information.

9. Children’s Data

Our services are directed to adults and business customers, and we do not knowingly collect personal data from children in the ordinary course of business. If we become aware that we have collected such information without appropriate authority, we will take reasonable steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is used.

11. Summary of Our Commitment

Gardeners West Hendon will process personal data in a lawful, transparent, and limited manner. We collect only what we need, use it only for valid service and business purposes, retain it only as long as necessary, and work with processors that are contractually bound to protect it. We also recognise and respect your GDPR rights, and we aim to respond to any privacy concern fairly and promptly.

By using our services or making an enquiry, you acknowledge that this Privacy Policy applies to your interaction with Gardeners West Hendon in the area.