Privacy Policy - Gardeners Loxford

Gardeners Loxford is committed to protecting personal data and respecting privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal information in connection with our gardening services. It applies to all Gardeners Loxford customers in the area, including prospective customers, active customers, and individuals who enquire about our services.

We aim to process personal data fairly, lawfully, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our services, you acknowledge that this policy describes how your information is handled. This notice is written to be clear and practical, with a focus on the information relevant to our day-to-day gardening work.

1. Information We Collect

We collect only the information needed to provide and manage our services. This may include:

Identity details such as your name, title, and any business or property name you provide.
Contact details including telephone number, email address, and postal address.
Service details such as the type of gardening work requested, preferred appointment times, access instructions, and service history.
Billing and payment information where necessary for invoicing, account management, and payment processing.
Communication records such as messages, call notes, complaint details, and feedback.
Technical data if you interact with our digital systems, including basic device information and usage logs, where applicable.

We do not intentionally collect special category data unless it is strictly necessary and you choose to provide it. If you share any information that is sensitive or not required for the service, we will only process it where there is a lawful reason to do so and where appropriate safeguards are in place.

2. How We Use Your Data

We use personal data to provide reliable, safe, and efficient gardening services. The main purposes include:

Responding to enquiries and arranging quotations.
Booking, delivering, and managing gardening services.
Handling invoices, payments, and account administration.
Keeping records of work completed and customer preferences.
Managing service-related communication and customer support.
Improving service quality, training, and internal planning.
Meeting legal, tax, insurance, and regulatory obligations.

We only use your data for purposes that are compatible with the reason it was originally collected. Where a new purpose arises that is not compatible, we will seek a lawful basis before using the data in that way.

3. Lawful Basis for Processing

Under data protection law, we must have a valid lawful basis for each type of processing. Gardeners Loxford may rely on one or more of the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotations, arranging visits, carrying out gardening work, and handling payments.

Legal Obligation

We may process and retain certain information to comply with legal requirements, such as tax records, accounting obligations, and other applicable laws.

Legitimate Interests

We may use personal data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. This may include improving our services, maintaining business records, preventing fraud, and ensuring service continuity.

Consent

In some cases, we may rely on your consent, especially for optional communications or uses that are not covered by other lawful bases. Where consent is used, you can withdraw it at any time, although this will not affect processing that has already taken place.

4. Data Sharing and Processors

We do not sell personal data. However, we may share data with trusted third parties where necessary to operate our business and deliver services. These third parties act as processors or, in some cases, independent controllers.

Examples of processors may include:

Payment providers that handle transactions securely.
Accounting and bookkeeping providers that assist with invoicing and financial records.
IT and cloud storage providers that support secure data storage and communication systems.
Administrative support services that help manage scheduling, record keeping, or correspondence.

Where processors act on our behalf, they are only permitted to process data according to our instructions and must keep it secure. We take reasonable steps to choose providers that offer appropriate technical and organisational safeguards.

We may also disclose information if required by law, by a court order, or to protect our legal rights, property, staff, clients, or the public.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including legal, accounting, and reporting obligations. Retention periods can vary depending on the type of information and the reason for holding it.

As a general approach:

Customer service and communication records are retained for as long as needed to manage the relationship and resolve any issues.
Financial and tax-related records are kept for the period required by law.
Inactive records may be archived or securely deleted when they are no longer needed.

When personal data is no longer required, we will take reasonable steps to ensure it is securely deleted, anonymised, or otherwise disposed of safely.

6. Data Security

We use appropriate security measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage practices, limited staff access, and careful selection of trusted processors.

While we work hard to protect your information, no system can be guaranteed completely secure. If a personal data incident occurs that presents a risk to your rights and freedoms, we will respond in line with applicable legal requirements.

7. Your Rights

You have a number of rights under data protection law. Subject to legal conditions and exemptions, these may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent.

To help protect your privacy, we may need to verify your identity before responding to a rights request. We will respond within the timeframe required by law and will let you know if additional information is needed.

8. Children’s Data

Our services are intended for adults acting for themselves or for a property they manage. We do not knowingly collect personal data from children in the ordinary course of business. If we become aware that child data has been collected without appropriate consent or legal basis, we will take steps to delete or protect it as required.

9. International Transfers

Where personal data is processed or stored outside the UK, we will only do so where appropriate safeguards are in place. These safeguards may include adequacy decisions, contractual protections, or other lawful transfer mechanisms recognised by data protection law.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their personal data is used.

11. Complaints and Concerns

If you have concerns about the way your personal data is handled, you have the right to raise the issue with the appropriate data protection authority. You may also contact us through our normal service communication channels to request clarification or to exercise your rights. We take privacy seriously and will always aim to address concerns fairly and promptly.

12. Summary of Our Approach

Gardeners Loxford processes personal data only when it is needed, lawful, and proportionate. We collect information to provide gardening services, manage customer relationships, meet legal duties, and maintain accurate business records. We use processors only where necessary, retain data for appropriate periods, and respect the rights of every customer in the area. Our goal is to handle information with care, transparency, and accountability at every stage.