Privacy Policy - Gardeners Woodlands

Effective date: This Privacy Policy explains how Gardeners Woodlands collects, uses, shares, stores, and protects personal data when providing gardening and related services. It applies to all Gardeners Woodlands customers in the area, including anyone who requests a quote, books a service, communicates with us, or otherwise uses our services.

1. Introduction

Gardeners Woodlands is committed to handling personal data in a lawful, fair, and transparent way. We respect the privacy of our customers, prospective customers, suppliers, and other individuals whose data we process. This policy sets out what data we collect, why we collect it, the legal grounds we rely on, how long we keep it, who may process it on our behalf, and what rights you have under data protection law.

We only process personal data where it is necessary for legitimate business purposes, for the performance of a contract, to meet legal obligations, or where you have given consent. We do not sell personal data. We aim to keep information accurate, secure, and limited to what is relevant for the services we provide.

2. Personal data we collect

We may collect and process the following categories of personal data:

Identity details: name, title, and where relevant, business name.
Contact details: address, email address, telephone number, and property or service location details.
Service information: details of requested work, garden preferences, site notes, quotation history, scheduling information, and service records.
Payment information: billing details, payment confirmations, and transaction references. We do not intentionally store full card details unless required by secure payment systems operated by third parties.
Communications: emails, text messages, call notes, and any other correspondence relating to enquiries, complaints, feedback, or service updates.
Technical and usage data: limited information such as device identifiers or basic website interaction data if collected through standard analytics or security tools.
Special category data: we do not usually seek to collect special category personal data. If such data is provided to us inadvertently, for example in correspondence, we will handle it carefully and only where legally permitted.

We collect only the information that is necessary and relevant to delivering a dependable service.

3. How we collect personal data

We collect data directly from you when you:

request a quote or make an enquiry;
book or receive a gardening service;
communicate with us by phone, email, or message;
complete forms or provide information in writing;
make a payment or request an invoice;
provide feedback, raise a concern, or make a complaint.

We may also receive data from third parties where it is necessary for service delivery, such as property managers, landlords, occupiers, subcontractors, or payment processors. Where information is obtained from another source, we will use it only for the purpose for which it was supplied and in line with this policy.

4. Lawful basis for processing

Under UK GDPR and applicable data protection law, we must have a lawful basis to process personal data. Gardeners Woodlands relies on the following lawful bases:

Contract: to provide quotations, arrange appointments, perform gardening services, issue invoices, and manage customer accounts or service arrangements.
Legal obligation: to keep records for tax, accounting, insurance, health and safety, and other regulatory requirements.
Legitimate interests: to manage and improve our business, respond to enquiries, maintain service quality, prevent fraud, protect our property and systems, and retain basic records of past services.
Consent: where required, for example if we use certain optional marketing communications or specific non-essential processing. You may withdraw consent at any time.

Important: If we rely on legitimate interests, we will ensure that our interests do not override your rights and freedoms. We only process data where it is reasonable to do so.

5. How we use your data

We may use your personal data to:

respond to enquiries and provide quotes;
deliver gardening and related services;
schedule and manage appointments;
process payments and issue invoices;
maintain service records and customer history;
handle complaints, disputes, or follow-up requests;
meet legal, tax, and insurance obligations;
carry out internal administration and business management;
keep systems secure and prevent misuse.

We may also use limited information to improve efficiency and service quality. Any such use will be proportionate and consistent with the purposes described here.

6. Data retention

We keep personal data only for as long as necessary for the purpose it was collected and to satisfy legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason for processing.

Customer service records: kept for a reasonable period after the service ends so we can manage follow-up, warranty-type queries, or disputes.
Financial and tax records: retained for the period required by law.
Communications: retained as long as needed to respond to queries and maintain evidence of agreements or instructions.
Marketing preferences: retained until you object, unsubscribe, or consent is withdrawn.

When data is no longer needed, we will securely delete, anonymise, or archive it as appropriate. Retention is always limited to what is necessary and lawful.

7. Data processors and third parties

Gardeners Woodlands may use trusted third-party processors to help us operate efficiently and securely. These processors only act on our instructions and are required to protect your data in line with data protection law.

Examples of processors may include:

IT and hosting providers: for secure data storage, email, and system maintenance.
Accounting and bookkeeping providers: for invoicing, financial records, and tax-related administration.
Payment service providers: for handling transactions securely.
Communication service providers: for sending messages or managing customer communications.
Scheduling or administration tools: for organising appointments and service management.

We may also disclose information where necessary to professional advisers, insurers, legal bodies, or public authorities, but only when required or permitted by law.

We do not allow processors to use your data for their own purposes. They may only process it on our behalf and under appropriate contractual safeguards.

8. International transfers

Where a processor or service provider stores or processes data outside the United Kingdom, we will take appropriate steps to ensure that your personal data receives a similar level of protection. This may include using recognised transfer mechanisms and contractual safeguards.

9. Data security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and limitation of access to those who need the information for legitimate business purposes.

Although no system can be guaranteed completely secure, we are committed to maintaining appropriate safeguards and reviewing them where necessary. If a personal data incident occurs, we will assess it and take action in accordance with applicable law.

10. Your rights

Depending on the circumstances and applicable law, you may have the following rights:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete information.
Right to erasure: to request deletion of your data in certain situations.
Right to restriction: to ask us to limit how we use your data in certain circumstances.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to request transfer of certain data to you or another controller, where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

These rights are not absolute. In some cases, we may need to continue processing data where required by law or where we have compelling legitimate grounds.

How we handle rights requests

When you exercise your rights, we may need to verify your identity before acting on the request. We will respond within the time limits required by law and will explain if any part of a request cannot be fulfilled. If you believe your data protection rights have been infringed, you may also raise a complaint with the relevant supervisory authority.

11. Marketing communications

If we send marketing communications, we will do so only where permitted by law. You can opt out of marketing at any time, and we will respect your preferences. Service-related messages, such as appointment confirmations or important account notices, are not marketing and may still be sent when necessary to provide our services.

12. Children’s data

Our services are directed to adults. We do not knowingly collect personal data from children for marketing or direct service purposes. If we become aware that we have inadvertently collected such data without appropriate authority, we will take reasonable steps to delete it or ensure it is handled lawfully.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

14. Summary of our commitments

We collect only relevant personal data needed to deliver gardening services.
We process data on lawful grounds such as contract, legal obligation, legitimate interests, or consent.
We retain data only for as long as necessary and then delete or anonymise it securely.
We use trusted processors under proper safeguards and do not sell personal data.
We respect your rights and aim to respond fairly and promptly to requests.

Gardeners Woodlands is committed to protecting privacy and using personal data responsibly. If you engage our services in the area, this Privacy Policy applies to you and explains how we treat your information with care, transparency, and respect.