Privacy Policy - Gardeners Carshalton

This Privacy Policy explains how Gardeners Carshalton collects, uses, stores, shares, and protects personal data when providing gardening services to customers in Carshalton and the surrounding area. It applies to all Gardeners Carshalton customers in the area, including individuals who request a quote, arrange a visit, receive an estimate, or use our gardening services. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By engaging with our services, you acknowledge that your personal data may be processed for service delivery, administration, legal compliance, and legitimate business purposes. We only collect information that is necessary and relevant to the work we perform, and we take appropriate steps to keep it secure.

1. Who We Are

Gardeners Carshalton is a service provider offering gardening and related outdoor maintenance services to residential and commercial customers. In this policy, references to “we”, “us”, and “our” mean Gardeners Carshalton. References to “you” or “your” mean the customer, website visitor, or any individual whose personal data we process in connection with our services.

We act as a data controller for the personal data we collect and determine the purposes and means of processing that data. In some cases, we may also use third-party service providers to process data on our behalf, and these parties act as data processors.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity details, such as your name and title.
Contact details, such as your address, phone number, and email address.
Service information, including details about the gardening work requested, property access notes, preferences, and appointment records.
Payment and billing information, where relevant to invoicing and payment processing.
Communication records, including enquiries, feedback, complaints, and correspondence.
Technical information, if you interact with our digital systems, such as IP address, browser data, and usage information collected through cookies or similar technologies.
Photos or site notes, where needed to assess or carry out gardening work safely and accurately.

We do not intentionally collect special category data unless it is necessary and lawful to do so. If such information is ever provided to us unintentionally, we will handle it with heightened care and only retain it where there is a lawful basis for processing.

3. How We Use Personal Data

We use personal data for the following purposes:

To provide quotes, assessments, and gardening services.
To communicate about appointments, schedules, and service updates.
To manage customer accounts, invoices, and payments.
To record service history and improve the quality of our work.
To respond to enquiries, feedback, or complaints.
To maintain business records and comply with legal obligations.
To protect our business, staff, and customers from fraud, misuse, or security risks.

We process data only when necessary and avoid using it in ways that are incompatible with the original purpose for which it was collected.

4. Lawful Basis for Processing

We rely on one or more lawful bases under the UK GDPR for processing personal data. These include:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, arranging services, delivering gardening work, and handling billing.

Legal Obligation

We may process data to comply with legal or regulatory requirements, such as tax, accounting, and record-keeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include maintaining service records, improving operations, protecting against fraud, and managing customer relationships.

Consent

In limited situations, we may rely on your consent, for example where it is required for certain optional communications or the use of non-essential cookies. Where consent is used, you may withdraw it at any time.

Vital Interests

In exceptional circumstances, we may process data to protect someone’s vital interests, such as in an emergency or where there is an immediate safety concern.

5. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to deliver our services or meet legal obligations. These parties may act as processors and only process data on our instructions.

Examples of processors or service providers may include:

Payment processors that handle card or electronic payments.
Accounting software providers used for invoicing, bookkeeping, and financial administration.
IT and cloud service providers that support secure data storage, email, or system maintenance.
Customer administration tools used for scheduling, record-keeping, and communication management.
Professional advisers such as accountants, legal advisers, or insurers, where necessary.

We may also disclose data where required by law, court order, or a regulatory authority. If our business structure changes through a merger, transfer, or reorganisation, personal data may be transferred as part of that process, subject to appropriate safeguards.

We do not sell your personal data.

6. International Transfers

Where any processor stores or accesses personal data outside the UK, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under UK data protection law.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations. Retention periods may vary depending on the type of data and the nature of the service provided.

In general:

Customer service records are retained for a reasonable period to support ongoing administration and service history.
Financial records are retained for the period required by tax and accounting law.
Communication records are retained for as long as needed to resolve queries, manage customer care, or evidence agreed instructions.
Data no longer required is securely deleted, anonymised, or otherwise disposed of in a safe manner.

We regularly review the data we hold to ensure it is not kept for longer than necessary. Retention is based on business need and legal requirement, not on indefinite storage.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include restricted access, secure storage, password protection, staff awareness, and careful management of third-party systems.

While we work hard to protect your information, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we will act promptly and responsibly if a data incident occurs.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to conditions or exemptions, depending on the circumstances.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – you can request deletion of your data in certain situations.
Right to restriction – you can ask us to limit how we use your data in certain cases.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request that certain data be provided in a structured, commonly used format.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

You also have the right to raise concerns with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to contact us first so we can try to resolve any concerns fairly and promptly.

10. Children’s Data

Our services are generally intended for adults. We do not knowingly collect personal data from children unless it is required in a lawful and necessary context, such as a family household arrangement. If we become aware that we have collected data from a child without a valid basis, we will take appropriate steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or how we handle personal data. The most current version will apply to your use of Gardeners Carshalton services. We recommend reviewing this policy periodically to stay informed about how we protect your information.

12. Summary of Our Commitment

At Gardeners Carshalton, we value privacy, trust, and transparency. We collect only the information needed to deliver high-quality gardening services, use it under a valid lawful basis, share it only with necessary processors, and keep it only for as long as required. We respect your rights and aim to handle all personal data with care, fairness, and accountability.