Privacy Policy - Gardeners New Eltham

This Privacy Policy explains how Gardeners New Eltham collects, uses, stores, shares, and protects personal data for all customers in the New Eltham area. It applies to every individual who uses, enquires about, or receives gardening services from Gardeners New Eltham, whether the interaction takes place by phone, email, online enquiry, written communication, or in person.

We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We respect the privacy of our customers and aim to ensure that any personal data is processed only for clear and legitimate purposes. This policy is intended to explain what data we collect, why we collect it, and what rights you have over your information.

1. Who This Policy Applies To

This policy applies to all Gardeners New Eltham customers and prospective customers in the area, including residential and commercial clients, individuals requesting quotes, and anyone who contacts us for gardening services. It also applies where a third party, such as a property manager or family member, communicates with us on your behalf.

By using our services or providing information to us, you acknowledge that your data will be processed in accordance with this Privacy Policy. We may update this policy from time to time to reflect changes in law, service arrangements, or data processing practices.

2. Data We Collect

We only collect personal data that is necessary for providing gardening services, managing customer relationships, and meeting legal or operational obligations. The type of information collected may include:

Identity details such as your name and, where relevant, the name of an organisation or property owner.
Contact details including address, email address, and telephone number.
Service information such as the type of garden work requested, service preferences, access notes, and appointment details.
Billing and payment details such as invoicing information and transaction records, where applicable.
Communication records including messages, emails, call notes, and any feedback or complaints you provide.
Technical information if you contact us through digital channels, such as basic enquiry metadata or device-related information used to help us respond.

We do not seek to collect sensitive personal data unless it is strictly necessary and permitted by law. If such information is ever provided to us incidentally, we will handle it with extra care and only use it where there is a lawful reason to do so.

3. How We Use Your Data

Gardeners New Eltham uses personal data for the following purposes:

To provide quotes, schedule appointments, and deliver gardening services.
To communicate with you about your enquiry, booking, service updates, or invoices.
To manage customer records and maintain service history.
To handle complaints, disputes, and service-related questions.
To comply with legal, tax, accounting, or regulatory obligations.
To improve our services, planning, and operational efficiency.
To protect our legitimate business interests, including fraud prevention and record keeping.

We will only use your data for the purpose for which it was collected, unless we reasonably believe another compatible purpose is relevant and lawful. We do not sell personal data.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each activity that involves personal data. Gardeners New Eltham relies on the following lawful bases where appropriate:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotations, confirming bookings, carrying out gardening work, and issuing invoices.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include responding to enquiries, managing customer relationships, improving our services, and keeping proper business records.

Legal Obligation

Some data must be retained or processed to meet legal obligations, such as tax, accounting, insurance, or regulatory requirements.

Consent

In limited situations, we may rely on your consent. Where consent is used, you can withdraw it at any time, although this will not affect the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We may share your personal data with trusted third parties that act as data processors or independent controllers, but only when necessary and with appropriate safeguards. Processors are only permitted to use your information on our instructions and for the agreed purpose.

Examples of processors or service providers may include:

Accounting and bookkeeping providers used to manage invoices, payments, and tax records.
IT and cloud storage providers used to securely store or process customer records.
Communication service providers used to manage telephone, email, or messaging systems.
Payment service providers used to process card or electronic payments where applicable.
Professional advisers such as accountants, insurers, or legal advisers where needed.

We may also disclose personal data if required by law, court order, or a competent authority. Where data is transferred to a third party, we take reasonable steps to ensure that it is protected and processed only for legitimate purposes.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the nature of our relationship with you.

In general:

Customer enquiry records may be kept for a reasonable period to enable follow-up and service continuity.
Service and billing records may be retained for several years to satisfy tax and accounting obligations.
Complaint or dispute records may be retained for as long as needed to resolve the matter and defend legal claims.

When information is no longer required, we will take reasonable steps to delete, anonymise, or securely dispose of it. Retention periods are reviewed periodically to ensure they remain appropriate.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures may include access controls, secure storage, staff awareness, and limiting access to only those who need it to perform their duties.

Although no system can be guaranteed completely secure, we work to reduce risks and handle data responsibly. If a data breach occurs and it is likely to pose a risk to your rights and freedoms, we will respond in accordance with applicable law.

8. Your Rights

As a data subject, you have a number of rights under the UK GDPR in relation to your personal data. These rights may apply depending on the circumstances and the legal basis for processing.

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where consent is the basis for processing.

If you exercise any of these rights, we may need to verify your identity before responding. We will consider all requests carefully and respond within the timeframe required by law.

9. Cookies and Similar Technologies

If we use a website or online enquiry system, basic technologies may be used to support functionality, security, and performance. Any such tools will only be used where lawful and necessary. Where consent is required, we will seek it in advance.

This policy does not include technical guidance or a comprehensive cookie guide. It focuses on how Gardeners New Eltham handles personal data in the context of services provided in the New Eltham area.

10. International Transfers

In some cases, a processor or service provider may store data outside the UK. If that happens, we will ensure appropriate safeguards are in place so that your personal data remains protected to the standard required by applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, processes, or legal obligations. Any revised version will apply from the date it is posted or otherwise made available. We encourage customers to review it periodically.

12. Summary of Our Commitment

Gardeners New Eltham is committed to using personal information fairly, securely, and only when necessary. We collect limited data to deliver gardening services, manage enquiries, comply with the law, and maintain accurate records. We rely on lawful bases such as contract, legitimate interests, consent, and legal obligation. We retain information only for as long as needed, use trusted processors where appropriate, and respect your rights under data protection law.

This Privacy Policy applies to all Gardeners New Eltham customers in the area.