Privacy Policy - Gardeners Monken Hadley

Gardeners Monken Hadley is committed to protecting the privacy of all customers in the Monken Hadley area. This Privacy Policy explains how we collect, use, store, share, and protect personal data when we provide gardening services to local customers. It also explains the rights available to individuals under the UK GDPR and the Data Protection Act 2018.

This policy applies to all Gardeners Monken Hadley customers in the area, including prospective customers who ask for information, current customers who receive gardening services, and former customers whose data we retain for legal or administrative reasons. By engaging our services or contacting us about our services, you should understand how your data is handled.

1. Personal Data We Collect

We only collect personal data that is necessary to provide our gardening services, manage customer relationships, and meet our legal obligations. The information we may collect includes:

Identity details such as name and title.
Contact details such as address, telephone number, and email address.
Property details relevant to the service, such as garden access notes, service instructions, and appointment preferences.
Payment information where needed to process invoices, payments, or refunds.
Communication records including messages, service requests, complaints, and feedback.
Service history such as quotations, work completed, scheduling information, and maintenance notes.
Technical data if you interact with our digital systems, including basic device or usage information where applicable.

We do not intentionally collect special category data unless it is necessary and lawful to do so. If such data is ever provided to us incidentally, we will handle it with enhanced care and only where there is a valid legal basis.

2. How We Use Personal Data

We process personal data for clear and limited purposes related to our gardening services. These purposes include:

Providing quotes and responding to enquiries.
Arranging and delivering gardening services.
Managing appointments, reminders, and service updates.
Issuing invoices and processing payments.
Maintaining records of work completed and customer preferences.
Handling complaints, queries, and customer support.
Meeting tax, accounting, and legal obligations.
Protecting our business from fraud, misuse, or legal claims.

We will never use your data in a way that is incompatible with these purposes. If we need to use personal data for a new purpose, we will assess whether that use is lawful and, where required, inform you appropriately.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for each type of processing. Gardeners Monken Hadley relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, delivering services, managing bookings, and handling payments.

Legal Obligation

We may process and retain certain information to comply with legal duties, such as accounting, tax records, and record-keeping requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include administrative management, service improvement, business security, and limited communications with customers.

Consent

In some situations, we may rely on your consent, for example where it is required for optional communication preferences or certain non-essential processing. Where consent is used, you may withdraw it at any time.

We do not rely on consent where another lawful basis is more appropriate. Each processing activity is assessed to ensure that it is fair, transparent, and lawful.

4. Sharing Your Data and Processors

We may share personal data only when necessary and only with trusted third parties acting on our behalf or where required by law. These third parties may act as data processors or, in some cases, as separate controllers.

Examples of processors may include:

Accounting or bookkeeping providers.
Payment service providers.
IT and cloud storage providers.
Customer management or scheduling systems.
Communication tools used for email, messaging, or administration.

Where processors are used, they are bound by data processing terms that require them to protect personal data, process it only on our instructions, and use appropriate security measures. We do not sell customer data.

We may also disclose information if we are required to do so by law, court order, regulatory authority, or to protect our legal rights. Any such disclosure will be limited to what is necessary.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or as long as we are legally required to retain it. Retention periods may vary depending on the type of data and the reason for processing.

Customer service records are usually kept for the duration of the relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law.
Enquiry records may be kept for a limited time if no service is booked, in order to manage follow-up or business administration.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. Retention is reviewed regularly to ensure we do not keep data longer than necessary.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures are proportionate to the nature of the information we hold and the risks involved.

Security measures may include access restrictions, password protection, secure storage, and staff awareness of data protection responsibilities. Although no system can be guaranteed to be completely secure, we work to reduce risks and respond quickly to any concerns.

7. Your Rights

Under data protection law, you have important rights regarding your personal data. These rights may apply depending on the circumstances of the processing:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – in certain cases, you can request deletion of your data.
Right to restriction – you can ask us to limit how we use your data in some situations.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request a copy of certain data in a portable format where applicable.
Right to withdraw consent – where processing relies on consent, you may withdraw it at any time.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached. We encourage you to raise any concerns directly so we can address them promptly, but you are not required to do so before contacting the ICO.

8. Children’s Data

Our gardening services are intended for adult customers and property owners or occupiers. We do not knowingly collect personal data from children unless it is incidentally included in customer correspondence and is necessary for service administration. If we become aware that data has been collected without a lawful basis, we will take appropriate steps to delete or restrict it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service-related changes. When we do so, the revised version will replace the previous one. We encourage customers to review this policy periodically so they remain informed about how their data is protected.

10. Summary of Our Approach

Gardeners Monken Hadley handles personal data responsibly, transparently, and only where there is a valid legal reason to do so. We collect the minimum information needed to deliver gardening services, retain it only for as long as necessary, and share it only with trusted processors or where required by law. We also respect your rights to access, correct, delete, or restrict the use of your data, subject to legal limits.

By using our services, you can be confident that your personal data is handled in line with applicable data protection law and with respect for your privacy.