Privacy Policy - Gardeners Cricklewood

Gardeners Cricklewood is committed to protecting the privacy and personal data of all customers in the Cricklewood area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when providing gardening and related services. It applies to all Gardeners Cricklewood customers in the area, including prospective customers, current customers, and anyone who has previously used our services.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is written to help you understand what data we handle, why we handle it, and the rights you have over your information. We aim to keep our practices clear, fair, and proportionate.

1. Information We Collect

We only collect personal data that is necessary to provide our services, manage our business, and meet legal obligations. The type of information we may collect includes:

Identity details such as your name and title.
Contact details such as address, email address, and telephone number.
Service details such as the type of gardening work requested, property access notes, preferred appointment times, and service history.
Billing and payment information where needed for invoicing, payment processing, or record-keeping.
Communication records including emails, messages, enquiries, complaints, and feedback.
Technical information if you contact us electronically, such as device or browser data, where relevant to security and service performance.

We do not collect more information than is reasonably required for the service we provide. We do not intentionally collect special category data unless it is strictly necessary and lawful to do so, and only in limited circumstances.

2. How We Use Your Personal Data

Gardeners Cricklewood uses personal data for specific and legitimate purposes, including:

Responding to enquiries and providing quotations.
Delivering gardening services and managing appointments.
Maintaining service records and customer preferences.
Processing payments, invoices, and refunds where applicable.
Handling complaints, queries, and aftercare.
Improving our services, scheduling, and customer experience.
Meeting legal, tax, accounting, and insurance obligations.
Protecting against fraud, misuse, or unauthorised access.

We will only use your data in ways that are compatible with the purpose for which it was collected. If we need to use it for a new purpose, we will ensure that the use is lawful and, where required, seek your consent or provide appropriate notice.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for every use of personal data. Gardeners Cricklewood may rely on one or more of the following lawful bases:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes providing quotes, confirming services, carrying out gardening work, and handling payment arrangements.

Legal Obligation

We may process and retain certain information to comply with legal duties, including tax, accounting, record-keeping, and insurance requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, improving services, securing systems, and preventing misuse.

Consent

In limited situations, we may rely on your consent, for example for certain optional communications or where consent is required by law. When we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing and Processors

We may share personal data with trusted third parties, but only where necessary and only for legitimate business purposes. These parties may act as processors under GDPR, meaning they handle data on our behalf and under our instructions. Examples may include:

IT and hosting providers that support secure storage or communications systems.
Accounting and bookkeeping processors that help manage invoices, taxes, and financial records.
Payment service providers that process card or electronic payments.
Scheduling or administrative tools used to manage customer bookings and service delivery.
Professional advisers such as insurers, auditors, or legal advisers where required.

We require processors to protect personal data, use it only for authorised purposes, and implement appropriate security measures. We do not sell personal data. Where we disclose information to any third party, we ensure there is a valid legal basis and appropriate safeguards in place.

5. International Transfers

If any processor stores or accesses data outside the UK, we will take appropriate steps to ensure the transfer is lawful and protected. This may include using approved contractual safeguards and assessing the level of protection offered in the destination country. We aim to keep data within secure environments wherever possible.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, and to satisfy legal or operational needs. Retention periods depend on the type of data and the reason it is held. In general:

Customer and service records are kept for as long as required to manage the relationship and provide aftercare.
Financial and tax records are retained for the period required by law.
Enquiry records may be kept for a reasonable period if no service is booked.
Communication records may be retained to evidence instructions, complaints, or service history.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. We review retention needs periodically to ensure we do not keep information for longer than necessary.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include restricted access, secure storage, password protection, staff awareness, and regular review of data handling practices. While no system can be guaranteed completely secure, we take reasonable and proportionate steps to protect information entrusted to us.

8. Your Rights

As a data subject, you have important rights under GDPR. Subject to legal limitations, you may have the right to:

Access the personal data we hold about you.
Rectification of inaccurate or incomplete information.
Erasure of your data in certain circumstances.
Restriction of processing in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability for information you provided to us, where applicable.
Withdraw consent where processing is based on consent.

You also have the right to raise concerns about how we handle your data. We encourage you to tell us if anything is unclear, inaccurate, or requires review so we can address it appropriately.

9. Automated Decision-Making

Gardeners Cricklewood does not use fully automated decision-making or profiling in a way that produces legal or similarly significant effects on customers. If this changes in the future, we will update this policy and ensure that appropriate rights and safeguards are provided.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or the way we process data. Any changes will take effect when published in the updated policy. We encourage customers to review this policy periodically to stay informed about how their personal data is handled.

11. Summary of Our Commitment

At Gardeners Cricklewood, privacy is built into the way we operate. We collect only necessary information, use it for clear and lawful purposes, retain it for limited periods, and share it only with trusted processors when needed. Our approach is designed to respect your rights while allowing us to provide reliable gardening services across Cricklewood.

By using our services, you acknowledge this Privacy Policy applies to all Gardeners Cricklewood customers in the area. We are committed to handling your information responsibly, securely, and in a manner that is fair, lawful, and transparent.