Privacy Policy - Gardeners Harold Wood

This Privacy Policy explains how Gardeners Harold Wood collects, uses, stores, shares, and protects personal data when providing gardening services to customers in the Harold Wood area. It applies to all Gardeners Harold Wood customers in the area, including individuals who request quotes, book services, communicate with us, or receive ongoing garden maintenance and related services. We are committed to handling personal information in a lawful, fair, transparent, and secure manner in line with the UK GDPR and the Data Protection Act 2018.

By using our services, you acknowledge that some personal information is needed to arrange, deliver, and manage gardening work. We only collect information that is relevant, adequate, and limited to what is necessary for those purposes. We also make sure that any third parties involved in processing data do so under appropriate safeguards.

1. Information We Collect

Gardeners Harold Wood may collect different categories of personal data depending on the service you request and how you interact with us. The information collected may include:

Identity details such as your name and title.
Contact details such as address and any phone or email details you choose to provide.
Service information including property access notes, garden preferences, job history, and service instructions.
Billing and payment records where applicable, including transaction details and invoices.
Communication records such as messages, notes from calls, feedback, and complaint history.
Technical data when you interact with digital systems we may use, such as device or usage information collected through basic website or email interactions.

We do not seek to collect special category data unless it is unavoidable and lawful to do so. If such data is ever required, it will be handled with extra care and only where the law permits.

2. How We Use Personal Data

We use personal data for clear and legitimate business purposes connected to the provision of gardening services. These purposes include:

Responding to enquiries and preparing quotes.
Scheduling, delivering, and managing gardening services.
Recording service instructions and site-specific requirements.
Processing payments, issuing invoices, and maintaining financial records.
Handling service updates, changes, cancellations, and follow-up communications.
Addressing complaints, resolving disputes, and maintaining service quality.
Complying with legal, regulatory, tax, and accounting obligations.
Protecting against fraud, misuse, or security incidents.

We only use data in ways that are compatible with the original reason it was collected. Where we need to use information for a new purpose, we will ensure there is a lawful basis before doing so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Gardeners Harold Wood relies on the following lawful bases depending on the situation:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging appointments, carrying out gardening work, managing payment arrangements, and communicating about the service.

Legal Obligation

We process certain data to comply with legal obligations, including tax records, accounting requirements, and other regulatory duties.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include service administration, customer support, internal record keeping, improving operations, and ensuring security.

Consent

In some limited situations, we may rely on your consent. If consent is used, you will be told clearly what it covers and you may withdraw it at any time where applicable.

Vital Interests and Public Interest

These lawful bases are not usually relevant to routine gardening services, but they may apply in rare circumstances if required by law or to protect someone’s safety.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate and deliver services. These third parties act as processors when they process data on our instructions, or as separate controllers where they determine their own purposes. We take steps to ensure any sharing is limited and necessary.

Examples of processors or service providers may include:

Administration and scheduling providers.
Payment processing services.
Accounting and invoicing systems.
IT hosting, email, and storage providers.
Professional advisers such as accountants or legal advisers where needed.

Where processors are used, we expect them to keep data secure, act only on our instructions, and comply with data protection requirements. We do not sell personal data. We do not disclose information to unrelated third parties except where necessary for service delivery, legal compliance, or protection of rights and safety.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and for any additional period required by law or legitimate business needs. Retention periods may vary depending on the type of information and the service relationship.

Customer and service records are normally kept for the duration of the service relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by accounting and tax law.
Communication records may be stored for as long as needed to resolve queries, manage service history, or defend legal claims.

When personal data is no longer needed, we will delete it, anonymise it, or securely destroy it. Retention decisions are reviewed periodically so that information is not kept longer than necessary.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful management of third-party access. While no system can be guaranteed completely secure, we work hard to protect the information entrusted to us.

We also encourage all customers to provide information carefully and only share details that are relevant to the services requested. Any sensitive instructions or access notes should be shared only when necessary for the job.

7. Your Rights

As a data subject, you have rights under data protection law. These rights may apply depending on the legal basis for processing and the circumstances of the request. Your rights include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent.

You also have the right to make a complaint to the relevant data protection authority if you believe your data has been handled unlawfully. We encourage customers to raise concerns directly so that we can address them promptly and fairly.

8. Children’s Data

Our services are intended for adults and property owners, tenants, or authorised representatives arranging gardening work. We do not knowingly collect personal data from children except where it is unavoidably included in communication or service records and only where permitted by law. If we become aware that we have collected children’s data without a valid reason, we will take appropriate steps to delete or protect it.

9. International Transfers

Where any processor or service provider stores or accesses data outside the United Kingdom, we will ensure suitable safeguards are in place. These may include approved contractual protections and other legal mechanisms designed to keep data protected to a standard consistent with UK GDPR requirements.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, services, or operational practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their personal data is used.

11. General Statement

This Privacy Policy applies to all Gardeners Harold Wood customers in the area. It is intended to provide a clear explanation of how we handle personal data in connection with our gardening services. We are committed to keeping your information safe, using it only for proper purposes, and respecting your rights at every stage.

Gardeners Harold Wood recognises that privacy is an important part of trust. We aim to process personal information with fairness, transparency, and accountability, while delivering reliable local gardening services in a responsible way.