Gardeners Church End Privacy Policy

This Privacy Policy explains how Gardeners Church End collects, uses, stores and shares personal data about its customers in the local area. It is intended to comply with the UK General Data Protection Regulation and related data protection laws. By using our gardening and related services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to all Gardeners Church End customers within our service area, including prospective customers who make enquiries, current customers receiving services, and former customers whose data we may still retain for limited purposes such as accounting and legal obligations.

Who we are and scope of this policy

Gardeners Church End is a gardening service provider operating in the Church End area. For the purposes of data protection law, Gardeners Church End is the data controller in respect of the personal data described in this Privacy Policy. This means that we decide how and why your personal data is used and are responsible for keeping it safe and used in a lawful manner.

This Privacy Policy covers personal data we collect when you contact us, request a quote, use our services, visit our website or interact with us in any other way as a customer or potential customer.

Personal data we collect

We may collect and process the following categories of personal data about you:

Identification and contact information, such as your name, postal address, property address where services are provided, and any other contact details you choose to provide.

Service and contractual information, such as details of the gardening services you request, site access details you choose to provide, dates and times of visits, and details about your preferences for your garden or outdoor space.

Communication records, such as messages and correspondence between you and Gardeners Church End, including details of queries, complaints, feedback and responses.

Billing and transaction information, such as records of payments made, invoices issued, and information necessary to process payments through third party payment providers. Payment card details are generally handled directly by secure payment processors and are not stored by us beyond what is necessary for transaction confirmation.

Website and usage information, such as information provided via contact forms and basic technical information transmitted by your browser, including date, time and duration of visits and pages viewed, to the extent that these data identify or can be linked to you as an individual.

How we collect your data

We collect personal data directly from you when you contact Gardeners Church End, request a quotation, make a booking, agree a contract for services, or communicate with us in person, over the phone, or online. We may also receive data when you provide details through our website or any online forms or messaging tools we use.

In some cases we may receive personal data from third parties, for example if you are referred to us by another customer or by a business partner, or where payment information is confirmed to us by a payment processing provider.

Lawful bases for processing

We rely on one or more of the following lawful bases under the UK GDPR to process your personal data:

Contractual necessity. We process your data where this is necessary to enter into or perform a contract with you, for example to provide gardening services, prepare quotations, schedule visits, issue invoices, and manage your account.

Legal obligation. We process certain data because we are legally required to do so, for example for tax, accounting and record-keeping obligations, and to respond to requests from regulatory or law enforcement authorities where required by law.

Legitimate interests. We may process your personal data where it is necessary for our legitimate business interests and these are not overridden by your rights and interests. This includes managing and improving our services, handling customer queries and complaints, keeping records of our work, and protecting our business and property.

Consent. Where we rely on your consent, for example for certain forms of direct marketing, we will only process your data for those purposes once you have clearly agreed. You can withdraw your consent at any time, and we will then stop processing your data for that purpose unless another lawful basis applies.

How we use your personal data

Gardeners Church End uses your personal data for the following purposes:

To provide and manage gardening and related services you have requested, including arranging visits, carrying out work at your property and communicating with you about that work.

To respond to enquiries and provide quotations based on information you supply about your garden or outdoor area.

To manage our relationship with you as a customer, including communicating about changes to services, terms and conditions or this Privacy Policy.

To issue invoices, process payments and maintain accurate financial records.

To handle feedback, queries, concerns or complaints and to improve the quality of our services based on your input.

To maintain health, safety and security, including keeping appropriate records of where we are working and when.

To comply with our legal obligations and respond to valid requests from authorities where required by law.

Data sharing and processors

We do not sell your personal data. We may share your data with trusted third parties to help us provide our services, always on a limited and secure basis. These third parties act as data processors and may only process personal data in accordance with our instructions and applicable law.

Categories of processors we may use include payment processing providers, cloud storage and document management services, accounting or bookkeeping services, and information technology and communication service providers that support our business operations.

We may also share personal data where this is required by law, necessary to protect our legal rights, or in connection with the sale or restructuring of all or part of our business, in which case appropriate safeguards will be applied.

International data transfers

Where any of our service providers or their systems are located outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your personal data. These safeguards may include the use of standard contractual clauses approved for use in international data transfers or other lawful transfer mechanisms as permitted by data protection laws.

Data retention

We keep personal data only for as long as it is reasonably necessary to fulfil the purposes described in this Privacy Policy, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

In general, customer and service records will be kept for as long as you remain a customer and for a reasonable period afterwards to deal with any queries or disputes. Financial and invoicing records are typically retained for a period required by tax and accounting laws. When personal data is no longer needed, it will be securely deleted, anonymised or archived in a way that prevents further use.

Security of your personal data

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include restricting access to personal data to those employees, contractors and processors who need it for their work and taking reasonable steps to ensure that they are subject to confidentiality obligations.

While we take data security seriously, no system can be guaranteed to be completely secure. You are encouraged to take care when sharing personal data with us and to inform us promptly if you suspect any misuse of your data or unauthorised access to it.

Your data protection rights

Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:

The right of access, meaning you can request confirmation that we process your personal data and obtain a copy of that data.

The right to rectification, meaning you can ask us to correct or update inaccurate or incomplete personal data we hold about you.

The right to erasure, sometimes called the right to be forgotten, meaning you can request that we delete your personal data where there is no good reason for us to continue processing it.

The right to restrict processing, meaning you can ask us to suspend the processing of your personal data in certain situations.

The right to data portability, meaning you can request that we provide you or another organisation with certain personal data in a structured, commonly used and machine-readable format, where the processing is based on consent or contract and carried out by automated means.

The right to object, meaning you can object to our processing of your personal data where we rely on legitimate interests as our lawful basis, including any profiling based on those interests, and we will stop the processing unless we have compelling legitimate grounds to continue.

Where we process your personal data based on your consent, you also have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Complaints and changes to this policy

If you have concerns about how Gardeners Church End handles your personal data, you can contact us using your usual communication channels so we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom.

We may update this Privacy Policy from time to time to reflect changes in the law, our business practices or the services we provide. Any changes will take effect when the revised Privacy Policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.