Privacy Policy - Gardeners Tottenham

Gardeners Tottenham is committed to protecting the privacy and personal data of every customer in the Tottenham area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when we provide gardening services to customers in this area. It also explains the rights available to individuals under the UK GDPR and the Data Protection Act 2018.

This policy applies to all Gardeners Tottenham customers in area, including anyone who requests a quote, books a service, communicates with us, or receives gardening work from us. By using our services, you acknowledge that your personal data may be handled as described in this policy.

1. Data We Collect

We collect only the information that is necessary to provide our services, manage our relationship with customers, and meet legal obligations. The types of personal data we may collect include:

Identity information such as your name and title.
Contact details such as address, email address, and phone number.
Service details such as information about your garden, property access, job preferences, requested service dates, and instructions.
Billing information such as invoice details and payment records.
Communication records such as messages, call notes, and correspondence relating to a quote, booking, complaint, or service update.
Technical information if you visit our online channels, including basic device and usage information where applicable.
Security and access information where needed to complete work safely and efficiently, such as gate codes or entry instructions.

We do not intentionally collect more data than is necessary. If special category data is ever provided to us accidentally, for example if a customer mentions health issues that affect access arrangements, we will handle it carefully and only where appropriate and lawful.

2. How We Use Personal Data

We use personal data for clear and limited purposes connected to our gardening services. These purposes include:

Responding to enquiries and preparing quotes.
Delivering gardening services and managing appointments.
Communicating about service changes, scheduling, or follow-up work.
Processing payments, creating invoices, and keeping financial records.
Maintaining internal records of work completed and customer preferences.
Handling complaints, disputes, or service issues.
Meeting legal, tax, accounting, and insurance obligations.
Protecting our business, customers, staff, and property from fraud, misuse, or unsafe activity.

We use personal data only where it is relevant and proportionate to the service being delivered. We do not sell personal data to third parties.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing personal data. Gardeners Tottenham relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with a customer. This includes processing your details to provide a quote, book a service, complete gardening work, and send invoices.

Legal Obligation

We may process personal data to comply with legal duties, including tax recordkeeping, accounting requirements, and other obligations under applicable UK law.

Legitimate Interests

We may use personal data where it is necessary for our legitimate business interests, provided these interests do not override your rights and freedoms. Examples include managing customer relationships, improving service quality, protecting against misuse, and keeping secure business records.

Consent

In some cases, we may rely on your consent, especially where it is required for a specific optional purpose. Where consent is used, you may withdraw it at any time. Withdrawal of consent will not affect processing that has already taken place lawfully.

4. Data Sharing and Processors

We may share personal data with trusted third parties only when necessary and only for legitimate business purposes. These third parties act as processors or independent data controllers depending on the service they provide.

Examples of processors and service providers may include:

Payment processors who help us accept card or bank payments.
Accounting or bookkeeping providers who assist with financial records and tax compliance.
IT and cloud storage providers who support data storage, email, and business administration.
Scheduling or customer management tools used to organise bookings and service records.
Professional advisers such as insurers, legal advisers, or auditors where required.

Where we use processors, we ensure there are appropriate contractual safeguards in place to protect personal data and to require the processor to act only on our instructions and in compliance with data protection law.

We may also share data if required by law, court order, regulatory request, or to protect the rights, safety, or security of Gardeners Tottenham, our customers, or others.

5. International Transfers

Some of our processors may store or access data outside the United Kingdom. Where this happens, we take appropriate steps to ensure that personal data remains protected to a standard that is consistent with UK GDPR requirements. This may include contractual safeguards and checks on the security practices of the provider.

6. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and no longer than is reasonably required. Retention periods may vary depending on the type of data and the purpose for which it is held.

Customer and service records are retained for the period needed to manage the service relationship and resolve any issues.
Financial and invoice records are retained for the period required by tax and accounting law.
Communication records may be kept for a reasonable time to maintain continuity of service and evidence of instructions or agreements.
Marketing consent records are kept until consent is withdrawn or the information is no longer needed.

When data is no longer needed, we will securely delete, anonymise, or otherwise dispose of it in a safe manner. Retention is based on necessity, legal duty, and business need, not convenience.

7. Keeping Your Data Secure

We use reasonable technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, loss, or destruction. These measures may include access controls, secure storage, password protection, staff awareness, and limited access to personal data on a need-to-know basis.

Although we work hard to protect data, no method of transmission or storage is completely secure. If a data incident occurs, we will act responsibly and in line with our legal obligations.

8. Your Rights Under Data Protection Law

As a data subject, you have important rights regarding your personal data. Subject to legal limits and exemptions, you may have the right to:

Access your personal data and receive a copy of the information we hold about you.
Rectification of inaccurate or incomplete data.
Erasure of your data in certain circumstances.
Restriction of processing in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability for information processed by automated means and provided by you, where applicable.
Withdraw consent at any time where processing is based on consent.

You also have the right to raise concerns about how your data is handled. If you believe your rights have been infringed, you may have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

9. Children’s Data

Our services are generally aimed at adult customers and property owners or occupiers. We do not knowingly collect personal data from children unless it is necessary and lawful in the context of a service request. If we become aware that we have collected data from a child without appropriate grounds, we will take steps to delete or restrict it where required.

10. Marketing Communications

We may send service-related communications that are necessary to complete a booking, provide a quote, or manage a customer relationship. These are not marketing messages. If we send optional marketing, we will do so only where permitted by law and, where needed, with your consent or an applicable soft opt-in.

You may opt out of marketing at any time. Opting out will not affect essential service communications.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. When we make updates, we will revise the policy so that it remains accurate and clear. Customers in the Tottenham area should review this policy periodically to stay informed about how their personal data is handled.

12. Summary of Our Privacy Commitment

Gardeners Tottenham respects your privacy and treats personal data with care. We collect only what we need, use it for clear lawful purposes, share it only with trusted processors or when legally required, retain it for no longer than necessary, and protect your rights under UK GDPR. This policy applies to all Gardeners Tottenham customers in area and reflects our commitment to responsible and transparent data protection practices.