Privacy Policy - Gardeners Aldgate

Gardeners Aldgate is committed to protecting the privacy and personal data of everyone who uses our services. This Privacy Policy explains how we collect, use, store, share, and protect personal information in connection with our gardening services in the Aldgate area. It applies to all Gardeners Aldgate customers in the area, including individuals who enquire about, book, receive, or pay for our services, as well as those who interact with us for quotes, scheduling, or customer support.

We handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is written to be clear, transparent, and easy to understand. It explains what data we collect, the lawful bases we rely on, how long we keep information, who may process it on our behalf, and the rights available to you.

1. Personal Data We Collect

We only collect information that is necessary to provide our services, manage our relationship with you, and meet legal or administrative obligations. The types of information we may collect include:

Identity information: your name and, where relevant, the name of the person responsible for a property or booking.
Contact details: address, email address, and telephone number.
Service information: details about the gardening services requested or provided, property access notes, preferred dates, and service instructions.
Billing and payment information: records relating to invoices, payments received, payment status, and transaction references. We do not intentionally store full payment card details where payment processing is handled securely by a third party.
Communication records: emails, messages, notes from calls, complaint details, and any feedback you provide.
Technical data: limited information such as device or browser data if you contact us digitally, where required for security or service administration.

We do not seek to collect more personal data than we need. If you provide additional information voluntarily, we will only use it where it is relevant to your service or our legal obligations.

2. How We Use Your Data

Gardeners Aldgate uses personal data for the following purposes:

to respond to enquiries and provide quotes;
to arrange and deliver gardening services;
to manage bookings, cancellations, and scheduling;
to communicate about service updates, appointments, or relevant account matters;
to issue invoices and record payments;
to deal with complaints, service issues, and follow-up requests;
to maintain business records and improve service quality;
to comply with tax, accounting, and other legal obligations;
to protect our business, customers, and staff from fraud or misuse.

Where we use personal data for these purposes, we always aim to limit access and use information only on a need-to-know basis. We take a data-minimisation approach and avoid unnecessary collection or retention.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the situation, Gardeners Aldgate may rely on one or more of the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering services, sending invoices, and handling service-related communications.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer records, preventing misuse, improving service administration, and keeping appropriate internal records. We always consider whether the processing is fair, necessary, and proportionate.

Legal Obligation

Some data must be processed to comply with legal obligations, such as tax laws, accounting rules, record-keeping requirements, or responding to lawful requests from authorities.

Consent

In limited cases, we may rely on your consent, for example where we seek permission to use information for a specific optional purpose. If we rely on consent, you can withdraw it at any time. This will not affect any processing already carried out before withdrawal.

4. Data Sharing and Processors

We do not sell your personal data. However, we may share it with trusted third parties that help us operate our business. These parties act as processors or independent data controllers depending on the nature of the service.

Examples of processors may include:

IT and cloud service providers: for secure storage, messaging, or business administration;
accounting or bookkeeping providers: to support invoicing, tax, and financial administration;
payment processing services: to handle transactions securely;
customer communication tools: to help manage service-related correspondence;
professional advisers: where needed for legal, accounting, or insurance matters.

Where a processor handles personal data on our behalf, we require appropriate contractual safeguards and only allow access to the information necessary for their task. We expect all processors to maintain suitable security, confidentiality, and lawful handling practices.

We may also disclose data where required by law, regulation, court order, or to protect the rights, property, or safety of our business, customers, or others.

5. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, or as required by law. Retention periods depend on the category of data and the reason we hold it.

Customer and service records: retained for the period needed to manage the service relationship and any follow-up queries.
Financial and tax records: kept for the duration required by applicable accounting and tax laws.
Correspondence and complaints: retained for a reasonable period to resolve issues and maintain accurate records.
Consent-based records: kept until consent is withdrawn or the information is no longer needed.

When personal data is no longer needed, we will securely delete, anonymise, or archive it as appropriate. Retention is reviewed regularly to ensure we do not keep information longer than necessary.

6. Data Security

We take security seriously and use reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and careful handling of records.

Although no system can be guaranteed completely secure, we work to reduce risk and respond appropriately if a data incident occurs. Where required, we will take steps to assess any risk and notify affected individuals or regulators in line with legal obligations.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the legal basis we rely on.

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: in certain cases, you may ask us to delete your personal data.
Right to restriction: you may ask us to limit how we use your information in specific situations.
Right to object: you may object to processing based on legitimate interests in certain circumstances.
Right to data portability: where applicable, you may ask for your data in a structured, commonly used format.
Right to withdraw consent: if we rely on consent, you may withdraw it at any time.

You also have the right to raise concerns with the UK data protection regulator if you believe your data has not been handled properly. We encourage you to contact us first so we can try to resolve any issue promptly and fairly.

8. Children’s Data

Our services are intended for adult customers or individuals authorised to arrange property services. We do not knowingly collect personal data from children unless it is incidental and necessary for service delivery or administrative purposes, and only where lawful to do so.

9. International Transfers

Where personal data is processed by third-party services outside the UK, we will ensure appropriate safeguards are in place to protect that information in accordance with applicable law. We only use transfer mechanisms that are legally permitted and suitable for the level of risk involved.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any revised version will apply from the date it is made available. We encourage customers to review the policy periodically so they remain informed about how their data is handled.

11. Final Statement

Gardeners Aldgate respects your privacy and aims to process personal data fairly, lawfully, and transparently. This policy applies to all Gardeners Aldgate customers in the area and forms part of our commitment to responsible data protection. By using our services, you acknowledge that your information may be handled in the ways described above, always in accordance with applicable data protection law.