Privacy Policy - Gardeners Newbury Park

This Privacy Policy applies to all Gardeners Newbury Park customers in the area. It explains how personal data is collected, used, shared, stored, and protected when we provide gardening services, respond to enquiries, manage bookings, and maintain customer relationships. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Gardeners Newbury Park provides local gardening and related outdoor maintenance services to customers in Newbury Park and the surrounding area. In this policy, “we,” “us,” and “our” refer to the service provider responsible for deciding how and why personal data is processed. We act as a data controller for the personal data we collect and use in connection with our services.

2. Personal Data We Collect

We only collect personal data that is necessary for providing and managing our services, improving customer service, and meeting legal obligations. The types of data we may collect include:

Identity data: name, title, and any preferred form of address.
Contact data: address, email address, and phone number.
Service and property information: details about gardens, outdoor spaces, access requirements, and preferences relevant to the work requested.
Communication records: messages, enquiries, service notes, complaints, and feedback.
Transaction data: records relating to quotes, invoices, payments, and payment status.
Technical data: limited information such as device or browser details if you interact with our digital systems.
Usage and scheduling data: appointment history, service frequency, and booking preferences.

We do not intentionally collect special category data unless it is strictly necessary and permitted by law. If such information is ever provided to us by mistake, we will handle it carefully and only retain it where there is a lawful reason to do so.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange, deliver, and manage gardening services.
To keep records of work carried out and agreed arrangements.
To process payments and maintain financial records.
To communicate about appointments, changes, service updates, and customer support.
To handle complaints, disputes, and service-related queries.
To comply with legal and regulatory requirements.
To improve service quality, internal processes, and customer experience.

We only use personal data for purposes that are compatible with the original reason for collection. Where additional use is needed, we will ensure that a lawful basis applies.

4. Lawful Basis for Processing

Under data protection law, we must have a valid lawful basis before processing personal data. Depending on the context, we may rely on one or more of the following:

Contract

We process personal data when it is necessary to provide a service requested by you, prepare a quotation, manage a booking, or perform our contractual obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, such as managing customer relationships, maintaining service records, preventing fraud, and improving operations, provided those interests do not override your rights and freedoms.

Legal Obligation

We may retain and process certain information to comply with legal duties, including accounting, tax, or record-keeping obligations.

Consent

In limited cases, we may rely on your consent. For example, if we need to use information for a purpose that requires consent under law, we will ask clearly and you may withdraw consent at any time.

5. Data Sharing and Processors

We may share personal data with trusted third parties only where necessary and appropriate. These third parties act as processors or independent controllers depending on the service they provide.

Payment providers: used to process payments securely.
Accounting or bookkeeping providers: used to manage invoices, receipts, and statutory records.
IT and cloud service providers: used to store or support business records and communication systems.
Administrative support services: used to help manage bookings, correspondence, or customer records.
Professional advisers: such as legal or tax advisers, where necessary.
Public authorities: where disclosure is required by law or is necessary to protect rights and safety.

All processors are required to handle personal data securely, follow our instructions, and apply appropriate technical and organisational measures. We do not sell personal data.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting requirements. Retention periods depend on the type of data and why it is held.

Customer and service records: retained for as long as needed to manage the relationship and any follow-up matters.
Financial records: retained for the period required by tax and accounting law.
Communication records: retained for a reasonable period to support customer service, dispute handling, and business records.
Deleted or anonymised data: removed securely when no longer needed.

When personal data is no longer required, we will delete it or anonymise it in a secure manner.

7. Data Security

We take reasonable steps to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, limited access on a need-to-know basis, and regular review of business practices. While no system can be guaranteed completely secure, we work to maintain an appropriate level of protection for the nature of the data we hold.

8. Your Rights

Depending on the circumstances and applicable law, you may have the following rights in relation to your personal data:

Right of access: request a copy of the personal data we hold about you.
Right to rectification: ask us to correct inaccurate or incomplete information.
Right to erasure: request deletion of your personal data in certain situations.
Right to restriction: ask us to limit the way we process your data in certain circumstances.
Right to object: object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability: receive certain data in a structured, commonly used format where legally applicable.
Right to withdraw consent: withdraw consent where processing is based on consent.

You also have the right to raise concerns with the relevant data protection authority if you believe your data has been handled unlawfully. We encourage you to raise any issue with us first so we can review and resolve it where possible.

9. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children for direct service purposes. If we become aware that we have received such data without appropriate permission or legal basis, we will take steps to delete it where required.

10. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it in accordance with applicable data protection law. Any transfer will only take place where adequate protection can be maintained.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or service arrangements. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

12. Summary of Our Approach

Our approach is simple: we collect only the data needed to provide reliable gardening services, we use it for clear and lawful purposes, we keep it only as long as necessary, and we protect it using appropriate safeguards. We value privacy and aim to handle every customer record with care, responsibility, and transparency.

By using Gardeners Newbury Park services, customers in the area acknowledge that personal data may be processed as described in this Privacy Policy.