Privacy Policy - Gardeners Enfield Town

Gardeners Enfield Town is committed to protecting the privacy and personal data of all customers in the Enfield Town area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our gardening services. It also explains your rights under the UK GDPR and the Data Protection Act 2018.

This policy applies to all Gardeners Enfield Town customers in the area, including individuals who enquire about our services, request quotations, make bookings, receive gardening work, or otherwise interact with us in relation to our services. By using our services, you acknowledge that your personal information may be handled in line with this policy.

1. Personal Data We Collect

We only collect personal data that is necessary for providing our gardening services, managing customer relationships, meeting legal obligations, and improving the way we operate. The information we collect may include:

Identity details such as your name and title.
Contact details such as telephone number, email address, and service address.
Service information such as details about the work requested, property access notes, garden preferences, and scheduling requirements.
Billing and payment information where needed to process invoices and payments.
Communication records including emails, messages, and notes from calls or appointments.
Technical data if you visit any digital service channel we use, such as IP address, browser type, or basic usage data.
Feedback and complaint information if you share reviews, concerns, or service-related issues.

We do not intentionally collect sensitive personal data unless it is necessary and you provide it to us voluntarily. If such data is ever needed, we will only process it where permitted by law and with appropriate safeguards.

2. How We Use Your Data

We use personal data for clear and specific purposes connected to our services. These may include:

Providing quotations, arranging visits, and delivering gardening services.
Managing bookings, schedules, and customer requests.
Sending service updates, reminders, and administrative messages.
Preparing invoices, taking payments, and maintaining financial records.
Handling customer queries, complaints, and service follow-up.
Improving our operations, service quality, and customer experience.
Meeting legal, tax, accounting, and regulatory obligations.
Protecting our business, staff, customers, and property from fraud or misuse.

We only use your personal data where there is a lawful reason to do so and where the use is compatible with the original purpose for which the data was collected.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis before processing personal data. Gardeners Enfield Town relies on the following lawful bases:

Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes providing quotations, arranging gardening work, managing appointments, and issuing invoices.

Legal Obligation

We may process and retain certain information to comply with legal duties, including tax, accounting, insurance, and record-keeping requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided these are not overridden by your rights and freedoms. This may include responding to enquiries, improving our services, preventing fraud, maintaining business records, and managing customer communications.

Consent

In some cases, we may rely on your consent, particularly where it is appropriate for optional communications or non-essential uses of your data. Where consent is used, you may withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us run our services. These third parties act as data processors or, in some cases, independent controllers. We only share the minimum information required and require appropriate data protection standards.

Processors may include:

Payment providers who process transactions securely.
Accounting and bookkeeping services that assist with financial administration.
IT and cloud service providers that support secure storage, communication, and operational systems.
Scheduling or job management tools used to organise service appointments.
Professional advisers such as insurers, lawyers, or accountants when necessary.

Where processors handle your information on our behalf, they are required to protect it and use it only according to our instructions and applicable law.

We may also disclose personal data if required by law, by a court order, or where necessary to protect our legal rights, customers, staff, or property.

5. International Transfers

If any of our service providers store or process data outside the UK, we will take appropriate steps to ensure that your personal data remains protected. This may include using approved contractual safeguards or transferring data only to countries with adequate legal protections.

6. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, or as long as required by law. Retention periods depend on the type of information and the reason for holding it.

Customer service records are kept for the duration of the relationship and for a reasonable period afterwards in case follow-up is required.
Financial and tax records are retained for the period required by law and accounting practice.
Communication records may be kept to resolve disputes, maintain service history, or ensure continuity of service.
Consent-based records are kept only until consent is withdrawn or the purpose ends.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

7. Security of Your Data

We take reasonable and appropriate technical and organisational measures to protect personal data against accidental loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and limiting data access to those who need it for legitimate business purposes.

While no system can be guaranteed to be completely secure, we work to reduce risks and handle information responsibly. If a data breach occurs and it is likely to result in a risk to your rights and freedoms, we will take the steps required by law, which may include notifying the relevant authority and affected individuals.

8. Your Rights

As a customer or website user within the scope of this policy, you have a number of rights under data protection law. Subject to certain conditions and exemptions, these include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – in some circumstances, you can ask us to delete your data.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request certain information in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the time limits set by law. We may need to verify your identity before acting on your request.

9. Children’s Data

Our services are intended for adults and property-related service arrangements. We do not knowingly collect personal data from children unless it is necessary and lawful in a specific circumstance. If we become aware that we have collected data from a child without appropriate authority, we will take steps to address it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. When we make changes, the revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

11. Summary of Our Commitment

Gardeners Enfield Town handles personal data lawfully, fairly, and transparently. We collect only what we need, use it for clear purposes, keep it for no longer than necessary, and share it only with trusted service providers or when the law requires it. We respect the privacy rights of every customer and remain committed to maintaining responsible data practices throughout the delivery of our gardening services in the Enfield Town area.