Privacy Policy - Gardeners Brimsdown

This Privacy Policy explains how Gardeners Brimsdown handles personal data for customers in the Brimsdown area. It applies to all Gardeners Brimsdown customers in the area, including people who enquire about our services, request quotes, book appointments, receive gardening work, or otherwise interact with our business. We are committed to protecting personal information and processing it fairly, lawfully, and transparently in line with the UK GDPR and the Data Protection Act 2018.

This policy should be read carefully so you understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your data. By engaging with our services, you acknowledge that your personal data may be used as described below.

1. Personal Data We Collect

Gardeners Brimsdown may collect and use different categories of personal data depending on the service requested and the nature of our relationship with you. The information we collect may include:

Identity data: name, title, and any relevant identification details you provide.
Contact data: address, email address, telephone number, and service location details.
Service and property data: information about your garden, outdoor space, access instructions, preferred service times, and notes relevant to carrying out garden work safely and efficiently.
Transaction data: records of quotes, invoices, payments, and service history.
Communication data: correspondence by phone, email, text message, or other communication methods.
Technical data: limited information such as device or browser data if you contact us through digital channels that automatically transmit such details.
Marketing preferences: your choices about receiving updates, offers, or service information where applicable.

We do not intentionally collect special category personal data unless it is necessary for a lawful reason and you have provided it in a relevant context. If such information is ever shared with us accidentally, we will handle it with appropriate care and restrict its use to what is required.

2. How We Use Personal Data

We use personal data to operate our gardening services, manage customer relationships, and meet legal and business obligations. Typical uses include:

providing quotations and responding to enquiries;
booking, delivering, and managing gardening services;
handling billing, payment, and accounting tasks;
recording service preferences and property-specific instructions;
communicating about appointments, service updates, and changes;
improving our services and maintaining quality standards;
managing customer support and resolving complaints;
complying with legal, tax, insurance, and regulatory duties;
protecting against fraud, misuse, or unlawful activity.

We only use personal data for purposes that are compatible with the reason it was originally collected, unless we have a lawful basis to use it for another purpose.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Gardeners Brimsdown relies on the following lawful bases where appropriate:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes at your request, scheduling visits, carrying out gardening work, issuing invoices, and managing service delivery.

Legal Obligation

We may process data where we need to comply with legal obligations, such as tax recordkeeping, accounting requirements, or responding to lawful requests from authorities.

Legitimate Interests

We may process data for our legitimate business interests, provided those interests do not override your rights and freedoms. This can include managing customer records, improving efficiency, maintaining service quality, preventing fraud, and keeping appropriate business documentation.

Consent

In some cases, we may rely on your consent, particularly for optional communications such as certain marketing messages. Where consent is used, you may withdraw it at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

4. Sharing Data and Processors

Gardeners Brimsdown does not sell personal data. However, we may share information with trusted third parties where necessary to provide our services or comply with the law. These third parties may act as processors or independent controllers depending on the service they provide.

Examples of processors may include:

IT and hosting providers: who support secure storage, email, scheduling, or administration systems;
accounting and bookkeeping providers: who help with invoices, financial records, and tax compliance;
payment service providers: who process card or electronic payments;
administrative support services: who assist with appointment coordination or record management;
professional advisers: such as accountants, insurers, or legal advisers where necessary;
subcontractors or associated service providers: where additional support is needed to complete agreed work.

All processors are expected to handle personal data securely, follow our instructions where applicable, and use appropriate technical and organisational safeguards. We only share the minimum amount of data needed for the task.

We may also disclose personal information if required by law, to protect our rights, to prevent harm, or in connection with a legal claim, dispute, or regulatory matter.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the nature of our relationship with you.

As a general approach:

customer and service records are retained for the period needed to manage the business relationship and handle follow-up matters;
financial and transaction records are kept for the period required by law and normal accounting practice;
communication records may be retained for a reasonable time to support service continuity, queries, or dispute resolution;
marketing preference records are retained until you change your preferences or the information is no longer needed.

When data is no longer required, we will securely delete it or anonymise it so it can no longer be linked to you. In some circumstances, we may retain information for longer if necessary to defend legal claims, comply with statutory duties, or manage an ongoing issue.

6. Data Security

We take the security of personal data seriously and use appropriate measures to help protect it from unauthorised access, loss, misuse, or alteration. These measures may include access controls, secure storage, limited data sharing, and staff awareness procedures. While no system can be guaranteed completely secure, we work to reduce risks and handle data responsibly.

7. Your Rights

As a data subject, you have rights over your personal data under UK data protection law. Subject to certain conditions and exemptions, these rights include:

Right of access: to request a copy of the personal data we hold about you;
Right to rectification: to ask us to correct inaccurate or incomplete data;
Right to erasure: to request deletion of your data in certain circumstances;
Right to restriction: to ask us to limit processing in certain situations;
Right to object: to object to processing based on legitimate interests or direct marketing;
Right to data portability: to receive certain data in a structured, commonly used format where applicable;
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We aim to deal with requests within the timeframe required by law and will explain if an exemption applies.

8. Marketing Preferences

If we send optional marketing communications, you can opt out at any time. We will respect your choices and update your preferences accordingly. Service-related messages, however, may still be sent where necessary for appointment management, billing, or important updates.

9. Complaints and Data Protection Concerns

If you are concerned about how your personal data is handled, you should raise the issue with us so we can review it. We take privacy matters seriously and will work to resolve concerns fairly. You also have the right to raise a complaint with the UK data protection regulator if you believe your rights have been infringed.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how their data is used.

11. Summary of Our Commitment

Gardeners Brimsdown values privacy and handles personal data with care, transparency, and respect. We collect only what we need, use it for clear and lawful purposes, keep it only as long as necessary, and require processors to protect it appropriately. We also recognise and support your rights over your personal information.

By using Gardeners Brimsdown services in the Brimsdown area, you acknowledge that this Privacy Policy applies to you and governs the way your personal data is collected, used, stored, and shared.