Privacy Policy - Gardeners Cambridge Heath

This Privacy Policy explains how Gardeners Cambridge Heath collects, uses, stores, shares, and protects personal data when providing gardening services to customers in the Cambridge Heath area. It applies to all Gardeners Cambridge Heath customers in the area, including individuals who request quotes, make bookings, receive services, or otherwise interact with our business. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK GDPR and the Data Protection Act 2018.

This policy is written to help you understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your data. By using our services, you acknowledge that your personal data may be handled as described in this policy.

1. Who We Are

Gardeners Cambridge Heath provides gardening and related outdoor maintenance services to residential and commercial customers in Cambridge Heath and surrounding local areas. For the purposes of data protection law, we act as the data controller for the personal information we collect about our customers, prospective customers, and service users.

This means we decide why and how your personal data is processed. In some cases, we may use trusted third parties to support our operations. Where this happens, they may act as data processors or independent controllers depending on the service provided.

2. Personal Data We Collect

We only collect information that is relevant and necessary to provide our services effectively. The types of data we may collect include:

Identity details: name, title, and any business name if you are a commercial customer.
Contact details: address, email address, telephone number, and preferred communication method.
Service information: details of the gardening services requested, property access notes, service preferences, and appointment history.
Payment information: billing details, payment status, transaction records, and invoice information.
Communication records: messages, enquiries, complaints, feedback, and service-related correspondence.
Technical data: limited information such as device or browser details where collected through digital systems used for administration.
Special category data: we do not intentionally collect sensitive personal data unless it is necessary and you choose to provide it, for example where access arrangements require additional information. If such data is provided, we will handle it with extra care and only where lawful.

We do not collect more data than is needed for the purposes described in this policy. We do not sell personal data.

3. How We Collect Personal Data

We may collect personal data directly from you when you:

request a quote or service;
make an enquiry or submit a booking request;
communicate with us by phone, email, message, or in person;
provide payment or billing details;
leave feedback or make a complaint;
use our services at your property or premises.

We may also receive information from third parties where necessary for service delivery, such as property managers, letting agents, commercial clients, or payment providers. In those cases, we will only use the data for the purpose for which it was shared and in accordance with applicable law.

4. Why We Use Your Data

We use personal data for the following purposes:

to provide gardening services and carry out agreed work;
to manage appointments, schedules, and property access arrangements;
to prepare quotations, invoices, and service records;
to respond to enquiries and customer support requests;
to manage payments, accounting, and tax obligations;
to handle complaints, disputes, or insurance-related matters;
to improve our service quality, internal records, and customer experience;
to comply with legal and regulatory requirements.

We may also use data to protect our legitimate business interests, such as preventing fraud, maintaining service standards, and securing our systems and records.

5. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to use your personal data. Gardeners Cambridge Heath relies on the following lawful bases:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes providing quotes, arranging services, completing work, and handling billing.

Legal Obligation

We may process and retain certain information to comply with tax, accounting, record-keeping, and other legal requirements.

Legitimate Interests

We may use personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include managing customer records, improving services, handling complaints, and protecting our business operations. When we rely on this basis, we assess whether the processing is necessary and proportionate.

Consent

In limited circumstances, we may ask for your consent, for example if we need to use data for a purpose not covered by another lawful basis. Where consent is used, you can withdraw it at any time.

6. Sharing and Processors

We may share personal data with trusted third parties only where necessary for the purposes described in this policy. These third parties may include:

Payment service providers: to process transactions securely.
Accounting and bookkeeping providers: to manage financial records and tax compliance.
IT and system support providers: to maintain our digital tools, data storage, and security measures.
Professional advisers: such as accountants, insurers, or legal advisers where needed.
Operational subcontractors: where they assist in delivering a service you have requested.

Where these parties process data on our behalf, they are required to follow our instructions, protect your information, and use it only for the agreed purpose. We use appropriate contracts and safeguards to ensure compliance. We do not allow processors to use your data for their own marketing or unrelated purposes.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods may vary depending on the type of information and the reason it is held. In general:

Customer service records: retained for the duration of the customer relationship and a reasonable period afterwards.
Financial and accounting records: retained for the period required by tax and accounting law.
Correspondence and complaints: kept for as long as needed to resolve the matter and maintain appropriate records.
Legal claims or disputes: retained for longer where necessary to establish, exercise, or defend legal rights.

When data is no longer required, we take steps to delete, anonymise, or securely destroy it. Retention periods may be extended where required by law or where a legitimate business need exists.

8. Data Security

We take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, alteration, or disclosure. These may include access controls, secure storage, restricted permissions, and internal procedures for handling customer information.

Although no system can be guaranteed completely secure, we work to maintain appropriate safeguards and review our practices regularly. If a personal data breach occurs, we will assess the risk and take action in accordance with our legal obligations.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These may include:

Right of access: you can ask for a copy of the personal data we hold about you.
Right to rectification: you can request correction of inaccurate or incomplete information.
Right to erasure: in certain circumstances, you can ask us to delete your data.
Right to restrict processing: you can ask us to limit how we use your data in some situations.
Right to data portability: you may request your data in a structured, commonly used format where applicable.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where consent is the basis for processing, you can withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. Some rights are subject to legal limitations and may not apply in every case.

10. Marketing and Communications

We do not send marketing communications unless it is lawful to do so. If we rely on consent, you may withdraw it at any time. If we rely on legitimate interests where permitted, you can still object to marketing communications. Where you opt out, we will respect your preference.

11. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect your information and to meet the requirements of data protection law. This may include standard contractual clauses or other approved transfer mechanisms.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updates will apply from the date they are published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how their information is protected.

13. Summary of Key Points

We collect only the data needed to provide and manage our gardening services.
We use data under lawful bases including contract, legal obligation, legitimate interests, and consent where appropriate.
We may share data with trusted processors who support payments, accounts, IT, and service delivery.
We keep personal data only as long as necessary and delete it securely when no longer required.
You have rights over your data, including access, correction, deletion, objection, and restriction.

Gardeners Cambridge Heath is committed to respecting your privacy and handling personal information responsibly. If you are a customer in the Cambridge Heath area, this policy applies to the personal data we collect and process in connection with our services.