Privacy Policy - Gardeners Hendon

Gardeners Hendon is committed to protecting the privacy and personal data of all customers in the Hendon area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when we provide gardening and related services. It applies to all Gardeners Hendon customers in the area, including existing, prospective, and former customers, as well as anyone who makes an enquiry or otherwise interacts with us.

1. Who We Are

For the purposes of data protection law, Gardeners Hendon acts as the data controller in relation to the personal data we collect and use in connection with our services. This means we decide how and why your personal data is processed, and we are responsible for ensuring that processing is lawful, fair, and transparent.

This policy applies where we provide gardening services, arrange quotations, manage bookings, complete work at your property, handle customer administration, and deal with any follow-up communication or service-related matters.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our services. Depending on the nature of your interaction with us, this may include:

Identity data such as your name or title.
Contact data such as address details and other communication details.
Service details such as information about the work requested, property access needs, and preferences related to the gardening service.
Transaction and administration data such as booking records, invoicing records, service notes, and payment-related information.
Communication data such as messages, enquiries, feedback, complaints, and records of correspondence.
Technical data such as basic website or device information if you interact with our digital systems, where applicable.

We do not intentionally collect unnecessary sensitive information. If sensitive or special category data is ever provided to us, it will only be processed where there is a valid legal reason and where it is relevant to the service.

3. How We Use Personal Data

We process personal data for specific and limited purposes connected to our services. These include:

responding to enquiries and preparing quotations;
arranging and delivering gardening services;
maintaining service records and customer administration;
managing payments, invoices, and accounting;
communicating about appointments, schedule changes, or service updates;
handling customer feedback, complaints, and dispute resolution;
meeting legal, tax, insurance, and regulatory obligations;
improving the quality, efficiency, and reliability of our services.

We always aim to use personal data in a way that is relevant, proportionate, and limited to the purpose for which it was collected.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each use of personal data. Gardeners Hendon relies on the following lawful bases where appropriate:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotes, confirming services, carrying out gardening work, and managing service administration.

Legal Obligation

We may process personal data where we are required to do so by law, including for tax recordkeeping, accounting requirements, insurance matters, or compliance with lawful requests from authorities.

Legitimate Interests

We may process certain personal data where it is necessary for our legitimate interests, provided these are not overridden by your rights and freedoms. This may include improving our services, managing customer communications, preventing fraud, or maintaining internal records. When relying on legitimate interests, we always consider whether the processing is necessary and balanced fairly.

Consent

In limited cases, we may rely on your consent, particularly where it is required for a specific optional purpose. If consent is used, you may withdraw it at any time. This will not affect processing already carried out before withdrawal.

5. Data Sharing and Processors

We do not sell personal data. However, we may share personal information with trusted third parties where necessary for business operations, service delivery, or legal compliance. Such third parties may act as data processors or independent controllers depending on the circumstances.

Examples of processors and service providers may include:

accounting or bookkeeping providers;
payment processing services;
customer administration or scheduling systems;
IT and data storage providers;
professional advisers such as insurers, lawyers, or accountants where necessary;
subcontractors or service partners assisting with gardening work, where relevant and subject to appropriate safeguards.

Where we use processors, we require them to protect personal data through appropriate contractual and security obligations. They are only permitted to process data on our instructions and for the agreed purpose.

We may also disclose personal data if required by law, to protect our rights, to prevent unlawful activity, or to respond to legitimate requests from public authorities.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer period is required by law. Retention periods depend on the type of data, the nature of the service, and our legal or business obligations.

In general:

customer enquiry records may be kept for a limited period if no service is booked;
service and transaction records are retained for the period required for administration, accounting, and legal compliance;
complaint or dispute records may be retained longer if needed to resolve issues or defend legal claims;
data that is no longer needed is securely deleted, anonymised, or otherwise disposed of.

We review retention periodically to ensure data is not kept longer than necessary. Retention is always linked to a legitimate purpose, and we minimise storage wherever possible.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, or alteration. These measures are designed to reflect the nature of the data we process and the risks involved. Although no system can be guaranteed completely secure, we work to maintain a high standard of protection and limit access to personal data to those who need it for legitimate business purposes.

8. Your Rights Under GDPR

You have rights in relation to your personal data. Depending on the circumstances, these may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit the processing of your data in certain cases.
Right to data portability – to receive data you provided to us in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests, including direct marketing where relevant.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. Some rights may not apply in every situation, particularly where we must keep data to comply with legal obligations or establish, exercise, or defend legal claims.

9. Automated Decision-Making

Gardeners Hendon does not make decisions about customers based solely on automated processing that produce legal or similarly significant effects. If this changes in the future, we will update this policy and provide the required information.

10. International Transfers

If personal data is transferred outside the UK or EEA, we will only do so where appropriate safeguards are in place to protect the information in line with data protection law. Any such transfer will be assessed to ensure a suitable level of protection.

11. Children’s Data

Our services are intended for adults arranging gardening work for their property or premises. We do not knowingly collect children’s personal data unless it is incidentally provided in the course of a service-related interaction and there is a lawful reason to process it. Where this happens, we handle the data carefully and only for the relevant purpose.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updates will take effect when the revised policy is made available. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

13. Summary of Our Commitment

Gardeners Hendon respects your privacy and processes personal data lawfully, fairly, and transparently. We collect only the information needed to provide and manage our services, use it for clear and legitimate purposes, retain it only for as long as necessary, and protect it with suitable safeguards. We also recognise and support your GDPR rights, and we are committed to handling your data responsibly at all times.

This Privacy Policy applies to all Gardeners Hendon customers in the area and is intended to give a clear explanation of how personal data is used in connection with our gardening services.