Privacy Policy - Gardeners St Margarets

Last updated: This Privacy Policy explains how personal data is collected, used, stored, and protected for all Gardeners St Margarets customers in the area. It applies to every customer, prospective customer, and website or service user within the local service area.

1. Introduction

At Gardeners St Margarets, we are committed to protecting privacy and handling personal information in a fair, lawful, and transparent manner. This policy explains what information we may collect, why we collect it, how long we keep it, who may process it on our behalf, and the rights available to individuals under the UK General Data Protection Regulation and the Data Protection Act 2018.

We aim to keep all personal data relevant, accurate, and limited to what is necessary for providing our gardening services, managing customer relationships, and meeting legal obligations. This policy is written for all Gardeners St Margarets customers in the area and applies regardless of whether services are booked once, on a recurring basis, or as part of a one-off enquiry.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity data, such as a name, title, and any preferred form of address.
Contact data, such as an email address, telephone number, and service address.
Service data, such as details of requested gardening work, property access notes, scheduling preferences, and service history.
Billing and transaction data, such as invoice details, payment status, and records needed for accounting.
Communication data, such as enquiries, feedback, complaints, and correspondence.
Technical data, where applicable, such as basic device or usage information if an online contact method is used.

We do not intentionally collect special category data unless it is strictly necessary and lawful to do so. If such information is ever provided to us incidentally, it will only be handled where there is a valid legal basis and appropriate safeguards in place.

3. How We Use Personal Data

We use personal data only for clear and legitimate purposes. These may include:

providing quotes, arranging visits, and delivering gardening services;
managing customer accounts and service records;
responding to enquiries and requests;
issuing invoices, processing payments, and maintaining accounts;
booking appointments, sending reminders, and confirming service updates;
maintaining the safety, quality, and continuity of service;
meeting tax, accounting, insurance, and other legal requirements.

We will only use personal data in ways that are compatible with the original purpose for which it was collected, unless a new lawful basis applies.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Gardeners St Margarets may rely on one or more of the following bases:

Contract

We process information when it is necessary to enter into or perform a contract with you. This includes providing services, preparing quotations, scheduling work, and managing customer requests.

Legal Obligation

We may process and retain certain information where required by law, such as for tax records, accounting, insurance, or regulatory compliance.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include improving service quality, handling customer communications, and maintaining business records.

Consent

Where consent is required, we will ask for it clearly and separately. You may withdraw consent at any time, and this will not affect processing carried out before withdrawal.

5. Data Sharing and Processors

We do not sell personal data. However, some trusted third parties may process information on our behalf as processors. These processors are only permitted to act under our instructions and must protect data appropriately.

Examples of processors may include:

IT and cloud service providers that support record storage or secure communications;
accounting or bookkeeping providers that assist with invoicing and financial administration;
payment service providers that handle transactions securely;
administrative service providers that support scheduling or document management.

We may also share data where required by law, where necessary to protect rights, or where it is necessary to establish, exercise, or defend legal claims. Any third party handling personal information must do so in line with data protection obligations.

6. International Transfers

If any processor stores or accesses data outside the UK, we will ensure suitable safeguards are in place, such as approved contractual protections or equivalent legal mechanisms. We take steps to ensure that personal data continues to receive an adequate level of protection wherever it is processed.

7. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected and to meet legal, accounting, or reporting duties. Retention periods may vary depending on the type of information and the reason for holding it.

As a general approach:

customer service records are kept for the duration of the service relationship and for a reasonable period afterwards;
financial and invoicing records are retained for the period required by tax and accounting law;
correspondence and complaint records are retained as needed to resolve issues and support service quality;
consent-based records are kept until consent is withdrawn or the data is no longer needed.

When data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

8. Security of Personal Data

We take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and careful data handling procedures.

While no system can be guaranteed to be completely secure, we work to maintain a level of protection appropriate to the nature of the data and the risks involved.

9. Your Rights

Individuals whose data is processed by Gardeners St Margarets have important rights under data protection law. Subject to legal limits and exemptions, these rights may include:

the right of access to obtain a copy of your personal data;
the right to rectification to correct inaccurate or incomplete information;
the right to erasure in certain circumstances, also known as the right to be forgotten;
the right to restriction of processing in certain situations;
the right to object to processing based on legitimate interests or direct marketing;
the right to data portability for data processed by automated means under certain conditions;
the right to withdraw consent where processing is based on consent;
the right to complain to the Information Commissioner’s Office if you believe your data has been mishandled.

If you exercise any of these rights, we will respond in accordance with applicable data protection law. Some requests may require us to verify identity before taking action.

10. Cookies and Online Data

If a website, online form, or digital booking channel is used, small amounts of technical information may be collected to support functionality, security, and performance. Where cookies or similar technologies are used, they will be limited to what is necessary or subject to consent where required by law.

Gardeners St Margarets does not use online tracking in a way that overrides privacy expectations. Any digital data collected is handled with the same care as offline records.

11. Children’s Data

Our services are intended for adults arranging gardening services for homes or properties. We do not knowingly collect personal data from children. If information relating to a child is accidentally provided, it will be handled carefully and only retained where necessary and lawful.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, service practices, or data processing arrangements. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review the policy periodically to stay informed about how their information is used.

13. Summary of Our Commitment

Gardeners St Margarets is committed to privacy, accountability, and responsible data handling. We only collect what is necessary, use data for legitimate and clearly defined purposes, keep it no longer than required, and share it only with trusted processors or when the law requires it. This policy applies to all Gardeners St Margarets customers in the area, and we strive to treat every personal record with care, respect, and confidentiality.

By using our services, you acknowledge that your personal information may be processed in accordance with this Privacy Policy and the applicable data protection laws.