Privacy Policy - Gardeners Tooting Bec

This Privacy Policy explains how Gardeners Tooting Bec collects, uses, stores, and protects personal data in connection with its gardening services. It applies to all Gardeners Tooting Bec customers in the area, including prospective customers, current customers, and anyone who communicates with us about our services. We are committed to handling personal information in a lawful, fair, transparent, and secure way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We only collect and process personal data that is necessary for delivering our services, managing customer relationships, meeting legal obligations, and improving the quality of our work. This policy is designed to help you understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your information.

1. Personal Data We Collect

We may collect different types of personal data depending on how you interact with us and which services you request. The categories of data may include:

Identity information, such as your name.
Contact details, such as address, telephone number, and email address.
Service details, such as the type of gardening work requested, appointment preferences, and service notes.
Billing and payment information, such as payment status and transaction records.
Communication records, including emails, messages, and notes from phone calls or enquiries.
Technical data, where relevant, such as device or browser information if you interact with us through digital systems.

We may also collect limited information about your property or garden where this is necessary to provide a quotation, plan work, or complete a service safely and effectively. We do not seek to collect special category data unless it is strictly necessary and permitted by law.

2. How We Use Personal Data

We use personal data only where there is a valid reason to do so. The main purposes for processing include:

Providing quotations and scheduling gardening services.
Managing bookings, appointments, and customer records.
Carrying out the services you have requested.
Communicating with you about your work, updates, changes, or service-related issues.
Processing payments and maintaining financial records.
Responding to questions, feedback, complaints, or follow-up requests.
Meeting legal, tax, insurance, accounting, and regulatory obligations.
Improving service quality, administration, and operational efficiency.

We will never use your personal data for purposes that are incompatible with those described in this policy unless we have informed you or are otherwise permitted by law.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for every processing activity. Depending on the situation, Gardeners Tooting Bec relies on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes taking bookings, carrying out agreed gardening work, handling service updates, and processing payments.

Legitimate Interests

We may process data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. This may include managing business operations, keeping appropriate customer records, improving services, preventing fraud, and handling service communications.

Legal Obligation

Some data must be retained or used to comply with legal obligations, such as tax, accounting, insurance, or regulatory requirements.

Consent

In limited cases, we may rely on your consent, for example where it is required for a particular type of communication or optional processing. Where consent is used, you can withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Processors

We may share personal data with trusted third parties who assist us in operating our services. These organisations act as processors or, in some cases, independent controllers. We only share the information necessary for the relevant purpose and only where appropriate safeguards are in place.

Examples of processors may include:

Payment processors used to handle card or electronic payments.
Accounting or bookkeeping providers used for financial administration.
IT and hosting providers used to store or secure records.
Communication providers used for email, messaging, or telephone systems.
Administrative service providers used to help manage appointments or service records.

We may also disclose personal data where required by law, where necessary to protect our rights or property, or where needed to respond to a lawful request from public authorities. We do not sell personal data.

5. International Transfers

Where a processor or service provider stores or accesses data outside the UK, we take steps to ensure appropriate protection is in place. This may include the use of approved contractual safeguards or relying on jurisdictions that provide adequate protection under applicable law.

6. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and no longer than required by law. Retention periods depend on the type of data and the reason for processing.

In general:

Customer service records are retained for the period needed to manage the service relationship and handle any follow-up matters.
Financial and invoicing records are retained for the period required by tax and accounting laws.
Communication records may be kept for a reasonable period to evidence instructions, resolve disputes, or maintain service history.
Legal or insurance-related records may be retained for as long as needed to support claims, compliance, or legal defence.

When personal data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe manner.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful handling of records. Although no system can be guaranteed to be completely secure, we take reasonable steps to protect the information we hold.

8. Your Rights

As a data subject, you have a number of rights under data protection law. These rights may apply depending on the circumstances and any legal exemptions. Your rights include:

Right of access – you can ask for a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can ask for your data to be deleted in certain circumstances.
Right to restriction – you can ask us to limit how we use your data in certain cases.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request certain data in a structured, commonly used format where technically feasible.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law and may need to verify your identity before taking action. We aim to deal with requests promptly and fairly.

9. Children’s Data

Our services are directed to adults and property holders or occupants arranging gardening services. We do not knowingly collect personal data from children unless it is incidentally provided in the course of normal communications and is necessary for service administration. If we become aware that we have collected data from a child without appropriate basis, we will take reasonable steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our processing practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

11. Fair and Transparent Processing

We believe that privacy should be treated with the same care as the services we provide. Accordingly, Gardeners Tooting Bec aims to process personal data in a way that is lawful, relevant, and proportionate. We do not retain information longer than necessary, and we limit access to those who need it to perform their role. Our approach is based on the principle of data minimisation, meaning we collect only what is needed for legitimate business purposes.

If you provide us with personal data, it is used only for the purposes set out in this policy and in line with your expectations as a customer in the area. By using our services or contacting us, you acknowledge that your information may be processed in accordance with this Privacy Policy and applicable data protection law.

12. Summary of Key Points

We collect only the personal data needed to provide and manage gardening services.
We process data under lawful bases such as contract, legitimate interests, consent, and legal obligation.
We share data only with trusted processors and only when necessary.
We retain information for no longer than required by law or business need.
You have strong rights over your personal data, including access, correction, deletion, and objection.

This Privacy Policy applies to all Gardeners Tooting Bec customers in the area and is intended to ensure that your personal information is handled with care, respect, and compliance.