Privacy Policy - Gardeners Canonbury

This Privacy Policy explains how Gardeners Canonbury collects, uses, stores, shares, and protects personal data belonging to customers in the Canonbury area. It applies to all Gardeners Canonbury customers in the area, including individuals who request gardening services, receive quotations, make enquiries, or otherwise interact with our business. We are committed to handling personal information lawfully, fairly, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We respect your privacy and aim to collect only the information necessary to provide our services, manage customer relationships, meet legal obligations, and maintain safe and efficient business operations. By using our services or communicating with us, you acknowledge that your data may be processed in accordance with this policy.

1. Information We Collect

We may collect and process personal data that you provide directly to us, data generated through our services, and limited information from third parties where permitted by law. The types of data we may collect include:

Identity information such as your name and, where relevant, business name.
Contact details such as address, email address, and telephone number.
Service information such as details of the gardening work requested, scheduled, or completed.
Billing and payment information where required for invoicing, payment processing, and records.
Communication records including messages, service notes, complaints, and feedback.
Site and property details relevant to the delivery of gardening services, such as access requirements or garden specifications.
Technical data limited to basic information necessary for website or system security, where applicable.

We do not seek to collect unnecessary personal data. Where special category data is not required for our services, we will not knowingly request it. If you voluntarily provide information that is sensitive, we will only process it where there is a lawful reason to do so and where appropriate safeguards are in place.

2. How We Use Personal Data

We process personal data for clear and legitimate purposes related to our gardening services. These may include:

responding to enquiries and providing quotations;
delivering gardening and related property services;
arranging appointments and managing schedules;
processing invoices and payments;
maintaining customer records and service histories;
handling complaints, disputes, and service follow-up;
meeting legal, accounting, and tax obligations;
protecting the security of our operations, staff, and customers;
improving service quality and business administration.

We will only use your data for purposes that are compatible with the reason it was collected. If we need to use your information for a new purpose that is unrelated, we will ensure we have a valid legal basis and, where required, notify you.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing personal data. Gardeners Canonbury relies on the following bases where appropriate:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotes at your request, delivering services, managing bookings, and handling payment-related records.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where your rights do not override those interests. This can include business administration, service improvement, record keeping, fraud prevention, and internal management. We balance our interests against your privacy rights before relying on this basis.

Legal Obligation

We may process and retain certain data to comply with legal duties, including tax, accounting, insurance, and regulatory requirements. In such cases, the law requires us to keep specific records for defined periods.

Consent

In limited circumstances, we may rely on your consent, for example where you choose to provide optional information or agree to a specific type of contact not necessary for service delivery. Where consent is used, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

4. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, and reporting obligations. The retention period depends on the nature of the information and the reason it is held.

Customer and service records are generally retained for the period needed to manage the relationship and resolve any related issues.
Financial and tax records are retained for the period required by law.
Communication records may be kept for a reasonable period to support service continuity and evidence of instructions or requests.
Technical and security records are retained only as long as necessary for monitoring and protection.

When data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices. We regularly review stored data to ensure it is not kept longer than necessary.

5. Processors and Data Sharing

We may use trusted third-party service providers, known as processors, to help operate our business. These processors may handle personal data only on our instructions and must protect it with appropriate technical and organisational measures. Examples may include:

Payment processors for handling card or electronic payments;
Accounting or bookkeeping providers for financial administration;
IT and cloud service providers for secure data storage and system support;
Communication tools used to manage emails, bookings, or service messages;
Professional advisers such as insurers, accountants, or legal advisers where necessary.

We may also share personal data with public authorities, regulators, courts, or law enforcement where required by law or necessary to protect our rights, customers, staff, or property. We do not sell personal data.

If a processor is located outside the UK or European Economic Area, we will only transfer data where appropriate safeguards are in place and where the transfer complies with applicable data protection law.

6. How We Protect Your Data

We take data security seriously and use reasonable measures to protect personal information against unauthorised access, disclosure, alteration, loss, or destruction. These measures may include access controls, secure storage, staff awareness, password protection, and limited access to information on a need-to-know basis.

Although we work to safeguard all personal data, no system can be guaranteed completely secure. If a data incident occurs, we will assess the situation and take appropriate steps in line with our legal obligations.

7. Your Rights

As a data subject under UK GDPR, you have rights regarding your personal data. Subject to legal conditions and exemptions, these may include:

Right of access to request a copy of the personal data we hold about you;
Right to rectification to correct inaccurate or incomplete information;
Right to erasure in certain circumstances, sometimes called the right to be forgotten;
Right to restrict processing where you question accuracy, lawfulness, or necessity;
Right to object to processing based on legitimate interests or direct marketing;
Right to data portability for certain data processed by automated means and based on consent or contract;
Right to withdraw consent where processing is based on consent;
Right not to be subject to solely automated decision-making where such decisions have legal or similarly significant effects.

If you wish to exercise any of these rights, we will review your request and respond within the timeframe required by law. Please note that some rights may not apply in all situations, particularly where we must keep records to comply with legal obligations or defend legal claims.

8. Children’s Data

Our services are intended for adults and property-related customers. We do not knowingly collect personal data from children for marketing or service administration. If we become aware that data has been collected from a child without appropriate authority, we will take steps to delete or protect it as required.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, service operations, or data handling practices. Any updates will apply from the date they take effect. We encourage customers in Canonbury to review this policy periodically so they remain informed about how their data is used.

10. Summary of Our Commitment

Gardeners Canonbury processes personal data with care, purpose, and respect. We collect only what is needed, use it for lawful and limited purposes, retain it for no longer than necessary, and share it only with trusted processors or where required by law. Our approach is designed to support reliable services while protecting the privacy rights of every customer in the area.

In short: your personal information is handled lawfully, securely, and transparently, with your rights and privacy at the centre of our practices.