Privacy Policy - Gardeners Denmark Hill

This Privacy Policy explains how Gardeners Denmark Hill handles personal data for all customers in the Denmark Hill area. It applies to anyone who uses our gardening services, requests a quote, books an appointment, makes an enquiry, or otherwise interacts with our business in relation to services provided in the area. We are committed to protecting privacy, acting transparently, and processing personal data in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Gardeners Denmark Hill provides gardening and related outdoor maintenance services to customers in and around Denmark Hill. For the purposes of data protection law, we are the data controller for the personal data we collect and use in connection with those services. This means we decide why and how personal data is processed, and we are responsible for making sure that processing is lawful, fair, and secure.

This policy applies to all Gardeners Denmark Hill customers in area, including private households, landlords, tenants, property managers, and other individuals or organisations using our services within the area.

2. What Personal Data We Collect

We may collect and process different categories of personal data depending on how you interact with us and which services you use. The data we collect may include:

Identity details such as your name or title.
Contact details such as telephone number and email address.
Address and property details relating to the site where services are carried out.
Service and booking information such as preferred dates, service requests, job notes, and instructions.
Payment-related information where needed for invoicing and accounting.
Communication records including messages, emails, call notes, and complaint records.
Technical information if you contact us online, such as basic device or browser data, where relevant for security and service administration.
Photographs of gardens, plants, or completed work where they are necessary for service delivery, record-keeping, or quality assurance.

We do not intentionally collect special category data unless it is provided by you and is necessary for a specific lawful purpose. We ask that you do not share sensitive information unless it is directly relevant to the service.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To plan, deliver, and manage gardening services.
To arrange site access, appointments, and scheduling.
To issue invoices, process payments, and maintain accounting records.
To communicate service updates, changes, or follow-up information.
To keep internal records of work completed and customer preferences.
To handle complaints, disputes, and insurance-related matters.
To improve our service quality, operations, and customer experience.
To meet legal, tax, and regulatory obligations.

We only use personal data where it is necessary and relevant for the purpose stated. We do not sell personal data.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing personal data. Gardeners Denmark Hill relies on the following bases depending on the situation:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes handling bookings, service delivery, invoicing, payment administration, and customer communication relating to the services you have requested.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests and where those interests are not overridden by your rights. Examples include maintaining business records, improving our services, preventing fraud, managing appointments, and resolving service issues. We always consider whether the impact on you is appropriate and proportionate.

Legal Obligation

We may process and retain personal data where necessary to comply with legal requirements, including tax law, accounting duties, insurance obligations, and record-keeping requirements.

Consent

In limited cases, we may rely on your consent, for example where you specifically agree to receive certain types of marketing communication. Where consent is used, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

5. How We Share Personal Data

We may share personal data with trusted processors and service providers who assist us in running our business and delivering our services. These parties only process data on our instructions and are required to protect it appropriately.

Examples of processors may include:

IT and cloud service providers used for secure storage, email, or administrative systems.
Accounting and bookkeeping providers who help with invoicing, reporting, and tax compliance.
Payment processing services that handle transactions securely.
Customer communication tools used for appointment management or service updates.
Professional advisers such as insurers, legal advisers, or auditors where required.

We may also disclose data where necessary to comply with the law, enforce our rights, protect our business, or respond to a lawful request from public authorities. Where relevant, we ensure appropriate safeguards are in place.

6. International Transfers

Where any processor stores or accesses data outside the UK, we take steps to make sure appropriate safeguards are in place. These safeguards may include UK adequacy regulations, standard contractual clauses, or equivalent protective measures. Our aim is to keep your information secure and treated in line with applicable data protection law.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods may vary depending on the type of information and the legal or contractual need to keep it.

In general, we retain:

Customer and service records for the period needed to manage the relationship and resolve any issues.
Invoices and accounting records for the length of time required by tax and accounting law.
Communication records for a reasonable period to manage service history and disputes.
Consent records for as long as needed to demonstrate compliance.

When personal data is no longer needed, we delete it securely or anonymise it so that it can no longer identify an individual. Retention is kept under review and we aim to avoid holding information longer than necessary.

8. Data Security

We take appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and limiting access to authorised personnel only. While no system can be guaranteed completely secure, we work to protect data to a standard that is suitable for the nature of the information we hold.

9. Your Rights Under GDPR

You have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these include the right to:

Access a copy of the personal data we hold about you.
Rectification of inaccurate or incomplete information.
Erasure of your data in certain circumstances.
Restriction of processing in certain situations.
Object to processing based on legitimate interests.
Data portability where processing is based on consent or contract and carried out by automated means.
Withdraw consent where we rely on consent for processing.

You also have the right to be informed about how your data is used and the right to raise concerns. If you believe your data has been handled unlawfully, you may complain to the Information Commissioner’s Office (ICO). We encourage you to contact us first so we can try to resolve the matter promptly and fairly.

10. Children’s Data

Our services are generally intended for adults. We do not knowingly collect children’s personal data unless it is necessary for service delivery and provided by a parent, guardian, or authorised adult. If we learn that we have collected data inappropriately, we will take steps to delete it where appropriate.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data practices. Any updated version will apply from the date it is published. We encourage customers to review this policy periodically so they remain informed about how their information is handled.

12. Summary of Our Commitments

Gardeners Denmark Hill is committed to protecting privacy, using personal data fairly, and only collecting information that is necessary for the provision and administration of our services. We process data on a lawful basis, retain it only for as long as needed, use reliable processors under appropriate safeguards, and respect the rights of every customer in the Denmark Hill area.

In short: we keep personal data secure, limited, and lawful, and we aim to ensure that all Gardeners Denmark Hill customers in area can trust us to handle information responsibly and transparently.