Privacy Policy - Gardeners Ardleigh Green

Gardeners Ardleigh Green is committed to protecting personal data and respecting privacy. This Privacy Policy explains how we collect, use, store, share, and protect information relating to our customers, prospective customers, and anyone who interacts with our services in the Ardleigh Green area. It applies to all Gardeners Ardleigh Green customers in the area, whether services are arranged directly, by enquiry, or through any other service-related communication.

We aim to process personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy describes what data we collect, the legal grounds on which we rely, how long we keep it, who may process it on our behalf, and the rights individuals have over their information.

1. Information We Collect

We collect only the information that is reasonably necessary to provide, manage, and improve our services. The types of personal data we may collect include:

Identity details such as name and title.
Contact details such as telephone number, email address, and property address.
Service details such as requested gardening work, appointments, preferences, and instructions.
Billing and transaction information where relevant to invoicing, payments, and record keeping.
Communication records including messages, notes from enquiries, and service-related correspondence.
Technical information if you interact with digital systems, such as basic device or browser information collected for security and performance.

We do not intentionally collect special category personal data unless it is strictly necessary and permitted by law. If such information is ever provided to us, we will handle it with extra care and only for a valid purpose.

2. How We Use Personal Data

We use personal data to deliver our services efficiently and to maintain accurate business records. Typical uses include:

Responding to enquiries and preparing service arrangements.
Managing appointments and carrying out requested gardening services.
Issuing invoices, recording payments, and managing account activity.
Keeping service notes and customer preferences for future visits.
Handling complaints, feedback, or service queries.
Meeting legal, tax, accounting, and insurance obligations.
Protecting our services, systems, staff, and customers from misuse or fraud.

We only use data in ways that are relevant to the purpose for which it was collected.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. Gardeners Ardleigh Green may rely on one or more of the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging services, confirming schedules, managing payments, and delivering the work requested.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include improving our services, maintaining records, handling routine customer communications, and ensuring business security.

Legal Obligation

Some information must be processed to comply with legal duties, including tax, accounting, insurance, and regulatory requirements. In such cases, we keep and use the relevant data as required by law.

Consent

In limited situations, we may rely on consent, for example where you have clearly agreed to receive certain optional communications. Where consent is used, you may withdraw it at any time.

4. Sharing and Processors

We do not sell personal data. However, we may share information with trusted third parties where necessary for service delivery, administration, or legal compliance. These parties act as processors or independent controllers depending on the service they provide.

Processors may include:

Payment service providers used to process transactions securely.
Accounting and bookkeeping providers used for financial administration.
IT and cloud service providers used for secure storage and system support.
Communication tools used to manage emails, messages, or appointment records.
Professional advisers such as insurers, legal advisers, or auditors where needed.

Where we use processors, we ensure appropriate contracts and safeguards are in place so that personal data is processed only on our instructions and protected to the required standard.

We may also disclose information if required by law, court order, or a lawful request from a public authority. Any sharing will be limited to the minimum necessary.

5. Data Retention

We keep personal data only for as long as it is needed for the purpose for which it was collected, or for as long as required by law. Retention periods vary depending on the type of information and the reason it is held.

Customer and service records are generally kept for the duration of the business relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law.
Communication records may be kept for a period necessary to resolve queries, manage service quality, or support legal claims.

When data is no longer required, it is securely deleted or anonymised where appropriate. We regularly review retention needs to avoid keeping information for longer than necessary.

6. Data Security

We take the security of personal data seriously and use appropriate technical and organisational measures to reduce the risk of unauthorised access, loss, misuse, or alteration. Measures may include access controls, secure storage, password protection, and limited access on a need-to-know basis.

While no system can be completely risk-free, we work to maintain safeguards that are proportionate to the nature of the data we process. Staff and contractors who handle personal data are expected to follow confidentiality and data protection requirements.

7. Your Rights

Individuals whose data we process have a number of rights under data protection law. These rights may be subject to legal conditions or exemptions, but we will always consider requests carefully and respond appropriately.

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in specific situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you believe your rights have not been respected, you also have the right to raise a concern with the relevant data protection authority. We encourage you to contact us first so that concerns can be reviewed and, where possible, resolved promptly.

8. Children’s Data

Our services are aimed at adult customers and property-related service arrangements. We do not intentionally collect personal data from children. If we become aware that data has been collected from a child without appropriate authorisation, we will take reasonable steps to delete it where required.

9. International Transfers

Where any processor or service provider stores or accesses personal data outside the UK, appropriate legal safeguards will be used to protect that data. These safeguards may include adequacy regulations, contractual protections, or other lawful transfer mechanisms.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, services, or operational practices. The most current version will apply to how we handle personal data. We encourage customers to review this policy periodically so they remain informed about how their information is used.

11. Summary of Our Commitments

Gardeners Ardleigh Green is committed to handling personal data responsibly, securely, and only for clear business or legal purposes. We collect the minimum amount of information needed, process it on a valid lawful basis, share it only where necessary, and keep it only as long as required. These standards apply to all Gardeners Ardleigh Green customers in the Ardleigh Green area.

By using our services, making an enquiry, or providing personal data to us, you acknowledge that you have read and understood this Privacy Policy.