Privacy Policy - Gardeners West Harrow

Gardeners West Harrow is committed to protecting the personal data of its customers, clients, and website visitors. This Privacy Policy explains how information is collected, used, stored, shared, and protected when you use our gardening services. It applies to all Gardeners West Harrow customers in the area, including individuals, households, landlords, and business clients who engage our services within West Harrow and the surrounding locality.

We process personal data in a manner that is lawful, fair, and transparent. This policy is designed to meet the standards of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It also explains your rights over your personal information and how those rights can be exercised.

1. Information We Collect

We only collect personal data that is necessary for providing, managing, and improving our gardening services. The type of information we collect may include the following:

Identity details such as your name and title.
Contact details such as address, phone number, and email address.
Service information such as property access notes, preferred appointment times, and gardening requirements.
Billing and payment records including invoicing details and transaction history.
Communication records including messages, service updates, complaints, and feedback.
Technical data if you interact with our digital systems, such as IP address, device type, browser type, and usage logs.

We may also collect limited information that helps us deliver a safe and effective service, such as access instructions, parking notes, or garden layout details. Where relevant, we may record service preferences so that future visits can be tailored appropriately. We do not intentionally collect more data than is required for operational purposes.

We do not collect special category data unless it is strictly necessary and you have provided it voluntarily or a legal requirement applies. Special category data may include information relating to health, religion, or other sensitive matters. If such information is ever relevant to service delivery, we will handle it with additional care and a valid legal basis.

2. How We Use Personal Data

Personal data is used only for clear and legitimate purposes connected to our gardening business. These purposes may include:

Providing quotations, scheduling visits, and carrying out gardening work.
Managing customer accounts and maintaining service records.
Processing payments, issuing invoices, and dealing with refunds or account queries.
Communicating about appointments, service changes, and relevant updates.
Responding to questions, complaints, or requests for support.
Maintaining business records for tax, legal, and insurance purposes.
Improving our services, planning workloads, and ensuring quality control.

We use customer data only to the extent necessary to complete the task for which it was collected. We will never use your data in a way that is incompatible with the original purpose unless we have a lawful reason to do so.

3. Lawful Basis for Processing

Under data protection law, every use of personal data must rely on a lawful basis. Gardeners West Harrow may rely on one or more of the following legal grounds:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, arranging visits, carrying out gardening work, and managing payment obligations.

Legal Obligation

Some data must be retained or processed in order to comply with law, including tax rules, accounting duties, and other regulatory requirements.

Legitimate Interests

We may process data where it is in our legitimate interests to do so, provided those interests do not override your rights and freedoms. Examples include maintaining business records, preventing fraud, improving our operations, and ensuring service continuity.

Consent

Where required, we will rely on your consent, for example if you voluntarily agree to receive certain types of communications that are not necessary for the service. You may withdraw consent at any time, although this will not affect processing already carried out lawfully before withdrawal.

Important: If we rely on legitimate interests, we carry out a balancing assessment to make sure your privacy rights are respected. We only process data when we can justify the activity fairly and responsibly.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These organisations are known as processors when they handle data on our instructions. They are required to protect your information and act only within agreed terms.

Examples of processors or service providers may include:

Payment processors who handle card or bank transactions.
Accounting and bookkeeping providers who support invoicing, tax records, and financial reporting.
IT and data storage providers who manage secure software, cloud storage, or backup services.
Communication providers who help us send emails, messages, or service notifications.
Professional advisers such as insurers, legal advisers, or auditors where needed.

We do not sell personal data. We also do not share information with unrelated third parties for their own marketing purposes. Any transfer of personal information is limited to what is necessary and subject to appropriate safeguards.

If personal data is transferred outside the UK, we will ensure that suitable legal protections are in place. This may include adequacy regulations, contractual safeguards, or other approved mechanisms designed to keep your data secure.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this policy. Retention periods depend on the type of information, the nature of the service, and any legal obligations that apply.

Customer and service records are kept for the period needed to manage the relationship and resolve any disputes.
Financial and tax records are retained for the period required by law.
Communication records are retained for a reasonable time to support service history and customer care.
Consent-based records are retained until consent is withdrawn or the purpose is no longer relevant.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. We review our retention practices regularly to make sure we are not keeping information longer than necessary.

6. Security Measures

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, or alteration. These measures may include access controls, secure storage, encryption where appropriate, staff confidentiality obligations, and regular review of internal practices.

Although no system can be guaranteed as completely secure, we work to reduce risks and maintain a level of protection suitable to the nature of the data we handle. In the event of a personal data breach, we will act in accordance with applicable law, including notifying regulators and affected individuals where required.

7. Your Rights

You have a number of rights regarding your personal information. Subject to legal conditions and exemptions, these include:

Right of access – you can request a copy of the data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in some circumstances, you can ask us to delete your personal data.
Right to restrict processing – you can request limits on how we use your data in certain situations.
Right to data portability – you may ask for certain data to be provided in a structured, commonly used format.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

We will respond to valid requests within the timeframes required by law. To protect privacy, we may need to verify your identity before releasing any information. Exercising your rights will not usually affect the quality of service we provide, unless the requested change is essential to delivering that service.

8. Children’s Data

Our services are generally intended for adults acting on behalf of a property or household. We do not knowingly collect data from children except where it is incidental to a service arrangement and only with appropriate oversight. If we learn that we have collected information from a child without proper basis, we will take appropriate steps to delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our internal processes. Any updates will take effect once published or otherwise communicated. We encourage customers to review the policy periodically so they remain informed about how their personal data is handled.

By using Gardeners West Harrow services, you acknowledge that you have read and understood this Privacy Policy. We remain committed to handling personal information responsibly, lawfully, and with respect for the privacy of every customer in the area.