Privacy Policy - Gardeners Neasden

Gardeners Neasden is committed to protecting the privacy and personal data of all customers in the Neasden area. This Privacy Policy explains how personal information is collected, used, stored, shared, and protected when services are requested or delivered. It applies to all Gardeners Neasden customers in the area, including prospective customers, current customers, and anyone who contacts us about our gardening services.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our approach is based on transparency, fairness, and accountability. We only collect the information necessary to provide reliable gardening services, manage customer relationships, and operate our business responsibly.

1. Data We Collect

We may collect and process a range of personal data depending on how you interact with us and which services you request. The information we collect may include:

Identity details such as your name and title.
Contact details including address, email address, and telephone number.
Service details such as the type of gardening work requested, property access notes, and preferred appointment times.
Payment information where needed for invoicing, record keeping, or payment processing.
Communication records including messages, call notes, and service-related correspondence.
Technical data such as basic device or usage information if you interact with our digital systems.

We do not seek to collect special category data unless it is strictly necessary and a lawful basis applies. If such information is ever provided by you incidentally, it will be handled with enhanced care and only used where permitted by law.

2. How We Use Your Data

Personal data is used for specific, limited purposes connected to our services. These purposes include:

Providing quotes, scheduling visits, and delivering gardening services.
Managing customer accounts and service records.
Processing payments and maintaining financial records.
Responding to enquiries, complaints, or service updates.
Improving the quality, efficiency, and safety of our services.
Meeting legal, accounting, and regulatory obligations.

We ensure that all processing is relevant, proportionate, and not excessive. Where possible, we keep personal data in a form that is easy to manage and secure.

3. Lawful Basis for Processing

Under data protection law, every use of personal data must have a lawful basis. Gardeners Neasden relies on the following lawful bases depending on the context:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes handling quotes, bookings, service delivery, billing, and follow-up arrangements.

Legitimate Interests

We may process data where it is needed for our legitimate business interests, provided these interests do not override your rights and freedoms. Examples include maintaining service records, improving customer experience, preventing fraud, and managing business operations.

Legal Obligation

We may retain or use data where required by law, including tax, accounting, health and safety, or other statutory obligations.

Consent

In limited situations, we may rely on your consent, especially where optional communications or specific uses of data are involved. Where consent is used, you may withdraw it at any time.

4. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected. Retention periods depend on the type of information and the reasons for processing it. In general:

Customer service records are retained for the period needed to manage the relationship and resolve any issues.
Financial and invoicing records are kept for the duration required by tax and accounting law.
Communication records are retained for a reasonable time to handle follow-up queries or service disputes.
Marketing-related data, where applicable, is retained until you opt out or the data is no longer needed.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. Retention decisions are reviewed periodically to ensure that data is not kept longer than necessary.

5. Processors and Data Sharing

We may use trusted third-party service providers, known as processors, to help us operate efficiently and deliver our services. These processors may support functions such as payment handling, administrative systems, record storage, communication tools, or IT maintenance.

Any processor acting on our behalf is required to:

Process personal data only on our instructions.
Maintain appropriate confidentiality and security measures.
Use data only for the agreed purpose.
Assist with compliance obligations where relevant.

We may also disclose personal data where necessary to comply with legal requirements, protect our rights, or respond to lawful requests from public authorities. We do not sell personal data.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and careful management of service records.

Although no system can be guaranteed completely secure, we work to reduce risks and review our data protection practices regularly. Access to personal data is restricted to people who need it for legitimate business purposes.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may include:

The right of access to request a copy of the personal data we hold about you.
The right to rectification to correct inaccurate or incomplete data.
The right to erasure in certain circumstances, sometimes known as the right to be forgotten.
The right to restrict processing where conditions under data protection law are met.
The right to object to processing based on legitimate interests or direct marketing.
The right to data portability for data processed by automated means based on consent or contract, where applicable.
The right to withdraw consent where processing is based on consent.

Some rights are subject to legal exceptions and may not apply in every situation. If a request is made, we will assess it carefully and respond in accordance with applicable law.

8. Children’s Data

Our services are intended for adult customers and property-related service arrangements. We do not knowingly collect personal data from children unless it is required for a lawful and legitimate reason connected to service delivery and handled appropriately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business operations, or data protection practices. Any revised version will continue to apply to all Gardeners Neasden customers in the area from the date it becomes effective. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

10. Our Commitment

Gardeners Neasden believes privacy is an essential part of trust. We are committed to using personal data responsibly, keeping it secure, and respecting the rights of every customer. By collecting only the information we need, using it for clear purposes, and retaining it for appropriate periods, we aim to maintain a lawful and respectful approach to data protection.

In summary, this policy explains how we collect, use, store, and protect personal information for all Gardeners Neasden customers in the area. It sets out our lawful bases for processing, our retention approach, the role of processors, and the rights available to individuals under data protection law.