Privacy Policy - Gardeners West Drayton

This Privacy Policy explains how Gardeners West Drayton collects, uses, stores, shares, and protects personal data when providing gardening and related services to customers in the West Drayton area. It applies to all Gardeners West Drayton customers in the area, including individuals who request quotations, arrange appointments, receive services, or communicate with us in any way connected with our work.

We are committed to handling personal data in a fair, lawful, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy sets out the information we may collect, the reasons we use it, the lawful bases we rely on, how long we keep it, which types of processors may handle it on our behalf, and the rights individuals have over their data.

1. Who We Are

Gardeners West Drayton provides gardening services such as maintenance, landscaping support, planting, seasonal care, and related customer services. In this policy, “we”, “us”, and “our” refer to Gardeners West Drayton as the data controller for the personal data we collect and use in connection with our services.

As the controller, we decide why and how personal data is processed. We take our responsibilities seriously and aim to ensure that all processing is limited to what is necessary for service delivery, business operations, legal compliance, and the protection of legitimate interests.

2. Personal Data We Collect

We collect only the information needed to provide services effectively, manage customer relationships, and operate our business. The categories of personal data we may collect include:

Identity details such as name and title.
Contact details such as address, phone number, and email address.
Service information such as property access notes, service preferences, requested work, appointment dates, and customer instructions.
Billing and transaction details such as payment records, invoice information, and records of services purchased.
Communication records including emails, messages, notes from calls, and any feedback or complaints.
Technical information if you interact with us through digital means, such as basic device or usage data where relevant for security or system operation.

We generally do not collect special category data. If such data is ever provided to us accidentally or becomes necessary for a specific service requirement, we will handle it with additional care and only where permitted by law.

3. How We Collect Data

We may receive personal data directly from customers when they request a quote, book a service, provide instructions, complete a payment, or contact us about an existing job. We may also obtain data from third parties where a customer authorises someone else to act on their behalf, such as a property manager, landlord, or family member.

In some cases, we may collect limited information from public sources or service partners where it is necessary to confirm details, manage appointments, or resolve an issue. We will always seek to keep this information relevant and proportionate.

4. Why We Use Personal Data

We use personal data only for legitimate business and service-related purposes. These may include:

Providing quotations and arranging visits.
Delivering gardening and related services.
Managing bookings, reminders, and service schedules.
Processing payments, invoices, and refunds where relevant.
Communicating about service changes, follow-up work, or customer queries.
Maintaining internal records and quality control.
Handling complaints, claims, or legal matters.
Meeting tax, accounting, and other legal obligations.
Protecting our business, staff, and customers from fraud or misuse.

We do not use personal data for unrelated purposes without first checking that a lawful basis exists and, where required, obtaining consent.

5. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for every type of personal data processing. Gardeners West Drayton relies on the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with a customer. This includes providing quotes, confirming services, carrying out work, and managing payment or service delivery.

Legal Obligation

We may process personal data where required to comply with legal duties, including tax, accounting, record-keeping, or responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided that these interests are not overridden by the rights and freedoms of the individual. Examples include managing customer relationships, improving services, securing our systems, and preventing fraud.

Consent

Where consent is required, we will ask for it clearly and separately. Individuals may withdraw consent at any time where processing depends on consent alone.

6. How We Share Data

We may share personal data with carefully selected processors and service providers who support our operations. These parties process data only on our instructions and are required to protect it appropriately. Processor categories may include:

IT and hosting providers that store or secure business data.
Accounting and bookkeeping providers that support financial records and tax compliance.
Payment service providers that process customer payments securely.
Communication and scheduling tools that help manage appointments and customer messages.
Professional advisers such as legal, financial, or insurance advisers where necessary.
Subcontractors or service partners involved in delivering customer work, where required for the service.

We may also disclose data if required by law, to respond to valid legal processes, or to protect rights, property, or safety. We do not sell personal data.

7. International Transfers

Where a processor or service provider stores or accesses data outside the UK, we will ensure appropriate safeguards are in place. These may include adequacy regulations, approved contractual clauses, or equivalent measures to maintain a high level of protection.

8. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and in line with legal and business requirements. Retention periods may vary depending on the type of record. In general:

Customer and service records are kept for the duration of the relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law.
Communication records are kept for as long as needed to deal with queries, disputes, or service follow-up.
Inactive or unnecessary records are deleted, anonymised, or securely archived when no longer needed.

When retention is no longer necessary, we will dispose of data securely and responsibly.

9. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include secure devices, access controls, password protection, staff confidentiality obligations, and careful selection of processors.

While no system can guarantee perfect security, we take reasonable steps to reduce risk and to respond quickly if an incident occurs. If a personal data breach is likely to result in a risk to individuals, we will act in line with our legal obligations.

10. Your Rights

Individuals whose personal data we process have rights under data protection law. Subject to legal limits, these rights may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – to receive certain data in a structured, commonly used format where the legal conditions are met.
Right to withdraw consent – where processing is based on consent.

You also have the right to raise a concern with the UK Information Commissioner’s Office if you believe your data has not been handled appropriately. We encourage individuals to contact us first so we can try to resolve any issue quickly and fairly.

11. Children’s Data

Our services are directed to adults, property owners, occupiers, and authorised representatives. We do not knowingly collect personal data from children unless it is incidentally provided in the course of a customer interaction and is necessary for service delivery. If we become aware that child data has been collected improperly, we will take steps to delete or protect it as required.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or the way we process data. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their data is used.

13. Summary of Our Approach

Gardeners West Drayton only processes personal data that is necessary, proportionate, and lawful. We aim to be clear about what we collect, why we collect it, who may process it on our behalf, and how long it is retained. We respect privacy rights and work to ensure that all customer data is treated with care, confidentiality, and accountability.

By using our services, requesting a quote, or communicating with Gardeners West Drayton in the West Drayton area, you acknowledge that your personal data may be processed in line with this Privacy Policy.