Privacy Policy - Gardeners Enfield Wash

Effective for all Gardeners Enfield Wash customers in the area. This Privacy Policy explains how personal data is collected, used, stored, shared, and protected when you use gardening services provided by Gardeners Enfield Wash. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all customers, prospective customers, and service users in the Enfield Wash area, including individuals who request quotes, book appointments, receive gardening services, or communicate with us in any way related to our services.

1. Information We Collect

We may collect and process different categories of personal data depending on how you interact with us. The information we collect is limited to what is necessary for providing our services and running our business properly.

Categories of data we may collect

Identity details such as your name and, where relevant, the name of a business or property owner.
Contact details such as phone number, email address, and service address.
Service information such as details of the work requested, property access instructions, preferred appointment times, and service notes.
Payment and billing information such as invoices, payment status, and transaction references. We do not store unnecessary financial details.
Communication records such as emails, messages, notes from phone calls, and records of complaints or enquiries.
Technical information if you visit our online systems, such as IP address, device type, browser type, and basic usage data, where applicable.
Special category data is not usually required. If such information is provided incidentally, for example access needs related to health or disability, we only process it where necessary and lawful.

We aim to keep the amount of data collected to the minimum needed to deliver a reliable service. We do not intentionally collect more information than is reasonably required.

2. How We Use Personal Data

We use personal data to manage enquiries, deliver services, and maintain business records. The main purposes include:

providing quotes and estimates;
booking and delivering gardening services;
managing customer accounts and service records;
issuing invoices and processing payments;
handling complaints, queries, or follow-up requests;
improving service quality, scheduling, and customer experience;
meeting legal, tax, insurance, and regulatory obligations;
protecting our business, staff, and customers from fraud or misuse.

We only use personal data for the purposes for which it was collected, unless we reasonably need to use it for a compatible purpose.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing activity. Gardeners Enfield Wash relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes providing quotes, arranging visits, carrying out gardening work, and handling invoicing.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include scheduling work, maintaining records, improving services, responding to service issues, and preventing fraud.

Legal obligation

Some information must be retained or processed to comply with legal obligations, including tax, accounting, insurance, and record-keeping requirements.

Consent

Where required, we will ask for your consent before processing certain data. If consent is used as the lawful basis, you may withdraw it at any time. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

Vital interests and public interest

These bases are unlikely to apply in normal service delivery, but may be used in rare situations where necessary to protect someone’s life or in other legally recognised circumstances.

4. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, including legal, accounting, and reporting requirements. Retention periods vary depending on the type of record and the reason it is held.

Typical retention approach

Customer service and enquiry records are usually kept for a reasonable period after the last contact to manage follow-up, disputes, or repeat work.
Invoice and payment records are generally kept for the period required by tax and accounting law.
Communication records may be retained to evidence instructions, agreements, or complaint resolution.
Technical logs are kept only as long as needed for security, diagnostics, or operational purposes.

When personal data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe and lawful manner. We do not keep data indefinitely without a valid reason.

5. Processors and Data Sharing

In order to run our business effectively, we may share personal data with carefully selected third parties that act as processors or independent controllers. Any sharing is limited to what is necessary and subject to appropriate safeguards.

Types of processors or third parties we may use

IT and cloud service providers that host or support business systems and data storage.
Accounting and bookkeeping services that help with invoicing, tax records, and compliance.
Payment service providers that process transactions securely.
Communication and scheduling tools used to manage customer appointments and records.
Professional advisers such as legal, insurance, or financial advisers where needed.
Public authorities where disclosure is required by law, regulation, or a lawful request.

We require processors to handle personal data securely and only in accordance with our instructions, unless they are independently responsible for their own lawful processing. We do not sell personal data.

6. International Transfers

If any service provider stores or processes data outside the United Kingdom, we will ensure suitable safeguards are in place to protect your data. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent measures recognised under applicable law.

7. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and limited data sharing. However, no system can be guaranteed to be completely secure.

We work to protect your information, but you should also take care when sharing personal data by email or other channels.

8. Your Rights

Under data protection law, you have rights in relation to your personal data. These rights may apply depending on the circumstances and the lawful basis for processing.

Your rights include:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete data.
Right to erasure - to request deletion of personal data in certain circumstances.
Right to restriction - to ask us to limit how your data is used in certain situations.
Right to data portability - to receive certain data in a structured, commonly used format where applicable.
Right to object - to object to processing based on legitimate interests or direct marketing, where relevant.
Right to withdraw consent - where processing is based on consent.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your rights have been infringed. We encourage you to raise any concerns directly so we can try to resolve them first.

9. Children’s Data

Our services are intended for adults and property-related service arrangements. We do not knowingly collect personal data from children for marketing or service purposes. If information about a child is incidentally relevant to access arrangements or a property-related issue, we will handle it carefully and only where necessary.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. Any revised version will apply from the date it is published or otherwise made available. We recommend reviewing this policy periodically to stay informed about how your data is handled.

11. Summary of Our Commitment

Gardeners Enfield Wash respects your privacy and is committed to processing personal data responsibly for customers in the Enfield Wash area. We collect only the information needed to provide and manage our gardening services, use it on lawful grounds, retain it only as long as necessary, and share it only with trusted processors or where required by law. We also ensure that your rights are recognised and that your data is handled with care, security, and transparency.

This policy applies to all Gardeners Enfield Wash customers in area.