Privacy Policy - Gardeners Bexleyheath

Gardeners Bexleyheath is committed to protecting the privacy and personal data of all customers in the Bexleyheath area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when providing gardening services. It applies to all Gardeners Bexleyheath customers in the area, including anyone who makes an enquiry, requests a quote, books a service, or receives ongoing garden maintenance.

1. Who We Are

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Gardeners Bexleyheath acts as the data controller for the personal data we collect in connection with our services. This means we decide how and why your personal data is processed. We take our responsibilities seriously and only handle data in ways that are fair, lawful, transparent, and limited to what is necessary.

2. Personal Data We Collect

We collect personal information only when needed to deliver our services, respond to enquiries, manage bookings, or comply with legal obligations. The types of data we may collect include:

Identity details: name, title, and any preferences you share
Contact details: address, email address, and telephone number
Service information: details of the gardening work requested, property access notes, and service preferences
Payment-related information: billing information and transaction records
Communication records: messages, call notes, and correspondence related to your enquiry or service
Technical data: limited website usage information, if applicable, such as pages visited and device-related data
Marketing preferences: whether you wish to receive updates or promotional messages

We do not intentionally collect special category data unless you choose to provide it and it is necessary for a specific reason, such as accessibility requirements or health-related access considerations. If such information is provided, we will treat it with extra care and process it only where permitted by law.

3. How We Use Your Data

Gardeners Bexleyheath uses personal data for the following purposes:

to respond to enquiries and provide quotations
to arrange and carry out gardening services
to manage bookings, scheduling, and service updates
to process invoices and payments
to maintain customer records and service histories
to improve the quality, efficiency, and safety of our services
to deal with complaints, disputes, or claims
to comply with tax, accounting, and other legal obligations
to send marketing communications where you have permitted or where we are otherwise allowed to do so

We only use your data for the purposes explained above, or for closely related purposes that would reasonably be expected.

4. Lawful Basis for Processing

We rely on one or more lawful bases under UK GDPR when processing personal data. These lawful bases may include:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, confirming appointments, delivering services, and handling payments.

Legal Obligation

We may process personal data where required to comply with legal duties, such as record-keeping, tax obligations, or responding to lawful requests from public authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include improving service quality, maintaining internal records, preventing fraud, and managing customer relationships.

Consent

Where required, we rely on your consent, particularly for certain types of electronic marketing. You may withdraw consent at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as processors or, in some cases, independent controllers. We only share information when necessary and only with parties that are expected to protect it appropriately.

Typical processors may include:

Payment processors: to handle card or electronic payments securely
IT and hosting providers: to store, maintain, and secure business systems
Communication service providers: to support email, telephone, or messaging functions
Accounting and bookkeeping services: to manage financial records and compliance
Scheduling or administration tools: to organise bookings and service records

We may also disclose data where necessary to professional advisers, insurers, legal representatives, or public authorities. If a business transfer or restructuring occurs, personal data may be transferred as part of that process, subject to applicable safeguards.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including the need to satisfy legal, accounting, and reporting obligations. Retention periods vary depending on the type of information and the reason it was collected.

Enquiry records: retained for a limited period after the enquiry is closed, unless further service is arranged
Customer service records: retained for as long as needed to manage the relationship and support future work
Financial records: retained for the period required by law and accounting practice
Marketing preferences: retained until you update your preferences or withdraw consent

When data is no longer needed, we will securely delete, anonymise, or destroy it. Retention is reviewed periodically to ensure we do not keep information longer than necessary.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality expectations, and limited access on a need-to-know basis.

While we work hard to protect your information, no system can be guaranteed completely secure. If a personal data breach occurs and we are required to notify affected individuals or regulators, we will do so in line with applicable legal requirements.

8. International Transfers

Where personal data is transferred outside the UK, we will only do so when suitable safeguards are in place to protect your information. Such safeguards may include adequacy regulations, standard contractual clauses, or equivalent legal mechanisms.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply in different circumstances and may be subject to exemptions. Your rights include:

Right of access: you can request a copy of the personal data we hold about you
Right to rectification: you can ask us to correct inaccurate or incomplete information
Right to erasure: you can request deletion of your data where there is a lawful basis to do so
Right to restrict processing: you can ask us to limit how we use your data in certain situations
Right to object: you can object to processing based on legitimate interests or direct marketing
Right to data portability: you can request transfer of certain data in a machine-readable format
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

If you want to exercise any of these rights, we will respond in accordance with applicable legal timeframes. We may need to verify your identity before acting on your request.

10. Marketing Preferences

We may send occasional service-related or marketing messages where permitted by law. You can opt out of marketing communications at any time. If you do so, you will still receive essential messages relating to active bookings, billing, safety, or legal matters.

11. Children’s Data

Our services are directed to adult customers and property owners or occupiers. We do not knowingly collect personal data from children unless it is incidentally provided by an adult customer and necessary for service delivery. If we become aware that we have collected data improperly from a child, we will take appropriate steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review the policy periodically so they remain informed about how their data is handled.

13. Summary of Our Commitment

Gardeners Bexleyheath values privacy and handles personal data with care, respect, and accountability. We collect only the information necessary to provide reliable gardening services, we use it only for clear and lawful purposes, and we keep it only for as long as needed. By placing privacy and security at the centre of our operations, we aim to maintain trust with every customer in the Bexleyheath area.