Privacy Policy - Gardeners Little Ilford

Last updated: This Privacy Policy explains how Gardeners Little Ilford collects, uses, stores, shares, and protects personal data for all customers in the Little Ilford area.

This policy applies to all Gardeners Little Ilford customers in the area, including individuals who request gardening services, receive quotations, book appointments, or otherwise interact with our services. We are committed to handling personal information in a fair, lawful, transparent, and secure way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Gardeners Little Ilford provides gardening and outdoor maintenance services for residential and commercial customers in Little Ilford and the surrounding area. In providing these services, we may need to collect and process personal data so that we can manage enquiries, deliver services, maintain records, and meet our legal obligations.

We act as a data controller in relation to the personal data we collect directly from customers and prospects. This means we decide why and how your data is used.

2. What Data We Collect

We only collect personal data that is necessary for operating our services, communicating with customers, and meeting contractual and legal requirements. Depending on your interaction with us, we may collect the following:

Identity data such as your name and title.
Contact data such as address, phone number, and email address.
Service details such as property access notes, gardening preferences, requested work, booking history, and service instructions.
Payment and transaction data such as records of payments made, invoices, and billing information.
Communication data such as emails, messages, call notes, complaint records, and service updates.
Technical data such as basic device or browser information if you interact with digital systems used to manage bookings or enquiries.
Any other information you choose to provide when you ask a question, request a quote, or give feedback.

We do not intentionally collect special category data unless it is necessary and you have provided it yourself, or unless we are required to process it for a lawful reason. Where such data is involved, we apply additional safeguards.

3. How We Use Personal Data

We use personal data only for clear and legitimate purposes. These include:

Responding to enquiries and providing quotations.
Managing bookings, visits, and service delivery.
Keeping records of work completed and services requested.
Processing payments and issuing invoices.
Communicating important updates about appointments or service changes.
Handling complaints, feedback, and customer support matters.
Maintaining business records and meeting tax, accounting, and legal requirements.
Improving our services, internal administration, and customer experience.

We only use the information in ways that are compatible with the original purpose for which it was collected, unless we have a valid legal basis to do otherwise.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each processing activity. Gardeners Little Ilford relies on the following lawful bases:

Contract

We process personal data when it is necessary to provide a quote, enter into a service agreement, carry out gardening work, handle bookings, or manage payment and service fulfilment.

Legal obligation

We process certain records to comply with legal duties, including accounting, tax, insurance, record-keeping, and other regulatory requirements.

Legitimate interests

We may process data where it is necessary for our legitimate interests, provided your rights do not override those interests. This may include managing customer relationships, maintaining service records, and improving the way our services are delivered.

Consent

In limited cases, we may rely on your consent, for example if we use optional communications or collect information that is not necessary for service delivery. Where consent is used, you may withdraw it at any time.

Important: We do not use personal data for unrelated purposes without first ensuring that a lawful basis exists.

5. Data Sharing and Processors

We may share personal data with trusted third parties who support our business operations. These parties act as processors when they process data on our instructions, or as separate controllers where they determine their own purposes for processing.

Examples of processors may include:

Booking or scheduling service providers.
Invoice, payment, or accounting service providers.
IT support, data storage, or cloud service providers.
Communication tools used to send messages or manage customer records.

We ensure that processors are bound by appropriate data protection obligations and only handle personal data to the extent necessary to perform their services.

We may also disclose information where required by law, by a court order, or to prevent fraud, protect our legal rights, or safeguard the rights and safety of others.

6. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, and reporting obligations. Retention periods depend on the type of information and the reason it was collected.

As a general approach:

Customer enquiry records are kept for a limited period after the enquiry is resolved.
Service and booking records are kept for the period needed to manage the service relationship and address any follow-up issues.
Financial and invoice records are retained for the period required by tax and accounting law.
Complaints or dispute-related records may be kept longer where necessary to defend legal claims or resolve issues.

When data is no longer needed, we will securely delete or anonymise it.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality expectations, and careful handling of records.

While we take reasonable steps to protect your data, no system can be guaranteed to be completely secure. If a personal data breach occurs and we are required to do so, we will follow the relevant legal obligations to assess and respond to it.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the lawful basis used.

Right of access – you can ask for a copy of the personal data we hold about you.
Right to rectification – you can request correction of inaccurate or incomplete data.
Right to erasure – in some cases, you can ask us to delete your data.
Right to restriction – you can request that we limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests in certain circumstances.
Right to data portability – you may request a copy of data you provided to us in a structured format, where applicable.
Right to withdraw consent – if we rely on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.

9. Children’s Data

Our services are not aimed at children, and we do not knowingly collect personal data from children unless it is necessary in connection with a property service arrangement and provided by an adult acting on their behalf. If we become aware that we have collected data inappropriately, we will take steps to delete it where appropriate.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any revised version will continue to apply to all Gardeners Little Ilford customers in area. We encourage you to review this policy periodically so that you remain informed about how we handle personal data.

11. Summary of Our Commitment

At Gardeners Little Ilford, we believe that privacy and trust are essential. We aim to collect only the data we need, use it only for lawful and clear purposes, keep it only for as long as necessary, and protect it with appropriate safeguards. We also respect your rights and will respond to requests in line with applicable data protection law.

This Privacy Policy is intended to be clear, fair, and compliant with GDPR principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.