Gardeners Grahame Park Privacy Policy

This Privacy Policy explains how Gardeners Grahame Park collects, uses, stores, and shares personal data about customers and potential customers in the local area. It also explains your rights under the UK General Data Protection Regulation and associated data protection laws. This policy applies to all Gardeners Grahame Park customers in the area, including individuals, households, and organisations who use or enquire about our gardening and related services.

Who We Are and Scope of This Policy

Gardeners Grahame Park is a gardening services provider operating in the local area. For the purposes of data protection law, we are the data controller for the personal data described in this Privacy Policy. This means we decide how and why your personal data is used and are responsible for ensuring it is handled lawfully and securely.

This Privacy Policy applies whenever you interact with Gardeners Grahame Park, including when you contact us to request a quote, book a service, receive ongoing maintenance, or otherwise communicate with us about our services.

Personal Data We Collect

We may collect and process the following categories of personal data about you:

Identification and contact information such as your name, postal address, billing address, and general location details necessary to provide services at your property.

Service and contract information such as details about your garden or outdoor space, access instructions, service preferences, service history, and details of any ongoing maintenance arrangements.

Communication records such as notes of conversations, messages you send us, and any feedback or complaints that you share with us.

Billing and payment information such as records of payments made and payment method details limited to what is needed to process transactions and comply with legal requirements. We do not store full payment card details where third party payment processors are used.

Technical and usage information such as basic information about how you contact us or respond to our communications, where this is needed for service administration, security, or managing appointments.

How We Collect Personal Data

We collect personal data directly from you when you contact us by any communication method, request a quote, book a service, or communicate with us during or after the provision of services.

We may also create or generate personal data about you as we provide services, for example, by recording details of work carried out at your property, service dates, and notes needed for future visits.

In limited cases, we may obtain personal data from third parties where you have authorised them to share your details with us, or where it is necessary for arranging access to a shared or managed property.

Lawful Basis for Processing Your Data

We rely on one or more of the following lawful bases under data protection law to process your personal data:

Contractual necessity where processing is required to enter into or perform a contract with you. This includes providing quotes, scheduling and delivering gardening services, managing your bookings, and handling payments.

Legal obligations where processing is necessary to comply with legal and regulatory requirements, such as tax, accounting, and record keeping duties.

Legitimate interests where processing is necessary for our legitimate business interests and does not override your rights and freedoms. These interests include managing our relationship with you, improving our services, scheduling and coordinating staff and resources, safeguarding our business, and protecting our property and staff.

Consent where we rely on your explicit permission, for example, for certain types of optional communications. Where we rely on consent, you can withdraw it at any time by contacting us.

How We Use Your Personal Data

We use your personal data for the following purposes:

To provide gardening and related services, including assessing your needs, preparing quotes, scheduling and delivering services, and managing follow up visits or regular maintenance.

To communicate with you about appointments, access requirements, changes to services, or important updates about our operations that may affect you.

To manage billing and payments, including issuing invoices, processing payments, and resolving billing queries.

To maintain accurate records for administrative and legal purposes, including accounting, tax, and record retention obligations.

To improve our services, for example by using feedback and service history to plan future work and enhance customer experience.

To protect our business, staff, and customers, including managing disputes, enforcing contractual terms, and preventing fraud or misuse of our services.

Data Sharing and Use of Processors

We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are only permitted to use your data in accordance with our instructions and for the purposes described in this policy. They are required to keep your data secure and confidential.

Typical categories of processors include:

Payment and accounting service providers who process payments, support our invoicing, and help us comply with accounting and tax obligations.

Information technology and communication service providers who host or support our systems, tools, or communication channels that we use to manage our business and provide services.

Professional advisers such as accountants, or legal advisers, where this is necessary to obtain professional advice, comply with legal obligations, or manage or defend legal claims.

We may also share personal data with third parties where required by law, to comply with regulatory obligations, to respond to lawful requests from public authorities, or to protect our rights, property, or safety or that of our staff and customers.

Data Retention

We keep your personal data only for as long as is necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements.

In general, we will retain customer records, including basic contact details, service information, and billing records, for a period aligned with applicable limitation periods and statutory retention requirements. This allows us to respond to queries about past services, manage potential disputes, and comply with our legal obligations.

Where personal data is no longer needed for the purposes for which it was collected, we will securely delete or anonymise it, taking into account any technical and legal requirements.

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful access, accidental loss, destruction, or damage. These measures include restricting access to personal data to those staff and processors who need it for legitimate business purposes and requiring them to handle it in a confidential and secure manner.

While we take reasonable steps to secure your personal data, no system can be completely secure. We continually review our measures and procedures to keep your data as safe as reasonably possible.

Your Data Protection Rights

As a customer of Gardeners Grahame Park in the area, you have a number of rights in relation to your personal data under data protection law. These include:

The right of access to obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data and certain additional information.

The right to rectification to request correction of inaccurate or incomplete personal data that we hold about you.

The right to erasure in certain circumstances, for example where the data is no longer needed for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing.

The right to restriction of processing in certain circumstances, such as where you contest the accuracy of your data or object to our processing, while we consider your request.

The right to data portability in some cases, allowing you to receive personal data you provided to us in a structured, commonly used, and machine readable format, and to transmit it to another controller where technically feasible.

The right to object to processing based on our legitimate interests, including certain types of direct marketing. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims.

You also have the right to lodge a complaint with the relevant data protection authority if you are concerned about how we handle your personal data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, how we handle personal data, or changes in legal requirements. When we make significant changes, we will take appropriate steps to bring them to your attention. The most current version of this policy will apply to the personal data we hold and process.

By continuing to use Gardeners Grahame Park services after any updates to this Privacy Policy, you acknowledge that you have read and understood the updated terms as they apply to our handling of your personal data.