Gardeners Carshalton Customer Privacy Policy

This Privacy Policy explains how Gardeners Carshalton collects, uses, stores and protects personal data relating to its customers and prospective customers in the Carshalton area. It applies to all individuals who engage or consider engaging Gardeners Carshalton for gardening or related services, whether contact is made in person, by post, or through any digital or written communication channel.

Gardeners Carshalton is committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation GDPR, the Data Protection Act 2018 and all other applicable data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.

Personal Data We Collect

We may collect and process different types of personal data about you, depending on how you interact with us and the services you request. This may include

Identification and contact details such as your name, postal address, service address, and any other contact details you choose to provide, such as an alternative contact person.

Service and contract information such as details of the gardening or maintenance services requested or provided, visit dates and times, service history, quotations, invoices and payment records.

Financial information such as payment transaction details. We do not store full payment card details. Where payments are processed by third party payment providers, only limited information necessary for accounting and reconciliation is retained by us.

Communication records such as notes from telephone conversations, written correspondence, and any other messages you send to us in the course of enquiring about or using our services.

Technical and usage data where applicable such as basic information about how you interact with any online content we may provide, including date and time of enquiries and any forms submitted.

We generally do not seek to collect special category personal data such as health information or data about your beliefs or background. If you voluntarily provide such information where it is relevant to the provision of our services for example, mobility considerations for site access, we will handle it securely and limit access to only what is necessary.

How We Collect Personal Data

We usually collect personal data directly from you when you contact us to request information, a quotation or a service, or when you engage us to carry out gardening or related work. This may be done via telephone, written correspondence, electronic messages, or in person.

We may also receive personal data from third parties acting on your behalf, such as a family member, landlord, letting agent or property manager, where they provide your details for the purpose of arranging services at a property you occupy or own. In such cases, we will treat the personal data in accordance with this Privacy Policy.

Lawful Bases for Processing

We process your personal data only when we have a lawful basis to do so under GDPR. Depending on the situation, this may include

Contractual necessity where processing is required in order to provide a quotation at your request, to perform a contract for gardening or related services, or to take steps before entering into a contract.

Legitimate interests where processing is necessary for our legitimate business interests and does not override your fundamental rights and freedoms. This may include managing our relationship with you, improving our services, maintaining accurate records and protecting our business against fraud or misuse.

Legal obligation where processing is necessary to comply with our legal obligations, such as tax and accounting requirements, or to respond to valid requests from public authorities.

Consent where you have given clear consent for us to process your personal data for a specific purpose. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

How We Use Your Personal Data

We may use your personal data for the following purposes

To respond to your enquiries and provide quotations for services in the Carshalton area.

To plan, schedule and deliver gardening and maintenance services at your property.

To issue invoices, process payments and maintain accounting records.

To manage our ongoing relationship with you, including handling feedback, complaints or service queries.

To keep internal records regarding the work we have carried out, including before and after information where relevant to the service.

To comply with legal and regulatory obligations and to cooperate with lawful requests from authorities.

To protect our rights, property and safety, including the prevention and detection of fraud or misuse of our services.

Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with applicable laws and regulatory requirements.

Customer and service records including contact details, contracts, quotations, service history and related correspondence are typically kept for up to seven years after the end of our relationship with you. This period reflects legal requirements relating to accounting, tax and potential contractual claims.

Where personal data is no longer required for the purposes described in this Privacy Policy and we are not legally required to retain it, we will delete it or anonymise it so that it can no longer be associated with you.

Data Sharing and Processors

We do not sell your personal data. We may share limited personal data with third parties where required for lawful purposes and in accordance with GDPR. These third parties may act as data processors, processing personal data on our behalf, or as independent controllers.

Service providers and processors We may use carefully selected third party providers to support our operations, such as payment processing providers, accountants, IT or administrative service providers. These parties are only given access to the personal data necessary to perform their services and are contractually required to keep it secure and to use it only in accordance with our instructions and applicable law.

Professional advisers We may share personal data with professional advisers such as accountants or legal advisers where this is necessary for the management of our business or to protect our legal interests.

Public authorities We may disclose personal data when required to do so by law, regulation or legal process, or in response to valid requests by public authorities.

Where we use processors located outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, in accordance with GDPR requirements.

Security of Your Personal Data

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access to personal data is restricted to individuals who need it for the purposes set out in this Privacy Policy and who are required to keep it confidential.

While we make reasonable efforts to safeguard your personal data, no transmission or storage system can be guaranteed to be fully secure. You are encouraged to take care when sharing personal data and to inform us promptly if you believe your data may have been compromised.

Your Data Protection Rights

Under GDPR, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include

Right of access You can request confirmation of whether we hold personal data about you and obtain a copy of that data.

Right to rectification You can ask us to correct or update any inaccurate or incomplete personal data we hold about you.

Right to erasure You can request that we delete your personal data where there is no longer a lawful basis for us to retain or process it.

Right to restriction You can ask us to restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy or consider an objection you have raised.

Right to object You can object to our processing of your personal data where we rely on legitimate interests as the lawful basis, including for certain forms of direct communication.

Right to data portability Where technically feasible, you can request that we provide you with the personal data you have given us in a structured, commonly used and machine readable format, or that we transmit it to another controller, where the processing is based on consent or contract and carried out by automated means.

To exercise any of these rights, please contact us using your usual contact route with Gardeners Carshalton. We may need to verify your identity before responding to your request, and we will respond within the timeframes required by law.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your personal data has not been handled in accordance with applicable law.

Scope and Updates to This Policy

This Privacy Policy applies to all Gardeners Carshalton customers and prospective customers in the Carshalton area. It covers all personal data that we collect and process in connection with enquiries, quotations and the provision of our gardening and related services.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. Any material changes will be effective from the date the revised policy is made available. You are encouraged to review this Privacy Policy periodically to stay informed about how we protect your personal data.