Privacy Policy - Gardeners South Wimbledon

Gardeners South Wimbledon is committed to protecting the privacy and personal data of all customers in the South Wimbledon area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you enquire about, receive, or manage gardening services with us. It also explains the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Gardeners South Wimbledon customers in the area, including individuals who contact us for an estimate, book a service, receive ongoing garden maintenance, or communicate with us in connection with any gardening work. By using our services, you acknowledge that your personal data will be handled in accordance with this policy and applicable data protection law.

1. Personal Data We Collect

We collect only the information needed to provide our services effectively, manage our relationship with you, and meet our legal obligations. Depending on your interaction with us, the data we may collect includes:

Identity details such as your name and title.
Contact details such as address, email address, and telephone number.
Service information including the type of gardening work requested, property access details, preferred appointment times, and service notes.
Billing and transaction data such as payment status, invoice records, and service history.
Communication records including messages, call notes, and any feedback or complaints you provide.
Technical data if you interact with our digital systems, such as basic device or usage information used for security and service administration.

We do not intentionally collect special category personal data unless it is strictly necessary and you have provided it voluntarily, or we are required to process it for a lawful purpose. We ask that you do not share unnecessary sensitive information with us.

2. How We Use Personal Data

We use your information for the following purposes:

To respond to enquiries and provide quotations.
To schedule and deliver gardening services.
To manage customer accounts and service preferences.
To issue invoices, record payments, and maintain financial records.
To communicate about appointments, service updates, and operational matters.
To handle complaints, disputes, and customer support requests.
To maintain internal records and improve the quality of our services.
To comply with legal, tax, accounting, and regulatory requirements.
To protect the security of our systems, staff, and customers.

We process personal data only where it is necessary and relevant to the service relationship. We use a data minimisation approach, meaning we aim to collect and retain only the information required for a specific purpose.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each use of personal data. The lawful bases we rely on are:

Contract

We process personal data when it is necessary to enter into or perform a contract with you, such as arranging gardening services, preparing quotations, or managing ongoing work.

Legitimate Interests

We may process data where it is reasonably necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This includes managing customer relationships, maintaining records, improving services, preventing fraud, and ensuring operational efficiency. Where appropriate, we assess these interests to make sure our use of data is proportionate and fair.

Legal Obligation

We may process and retain certain information to comply with laws and regulations, including tax, accounting, insurance, and business recordkeeping duties.

Consent

In limited cases, we may ask for your consent, for example if we need to use information for a purpose not covered by another lawful basis. When consent is used, you can withdraw it at any time.

We do not use personal data in ways that are incompatible with these lawful bases.

4. Sharing and Processors

We may share personal data with trusted third parties where this is necessary to operate our business and provide services. These third parties act as processors when they handle data on our behalf and under our instructions.

Examples of processors may include:

Administrative and bookkeeping service providers.
Payment processing providers.
Cloud storage and secure data hosting providers.
IT support and cybersecurity service providers.
Communication tools used for email, messaging, or scheduling.

We require processors to protect personal data, use it only for the agreed purpose, and follow appropriate security measures. We do not sell personal information. We do not share data with third parties for their own marketing purposes unless you have clearly agreed to such use.

We may also disclose information if required by law, court order, regulatory request, or to protect our legal rights, staff, customers, or property.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or for as long as we are legally required to retain it. Retention periods vary depending on the type of information and the purpose of processing.

Customer and service records are retained for the duration of the service relationship and for a reasonable period afterwards to manage follow-up queries or disputes.
Financial and invoicing records are retained for the period required by tax and accounting law.
Communication records are retained as needed for customer support, complaint handling, and business administration.
Security-related records may be retained for a limited time to protect systems and prevent misuse.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer be linked to you.

6. Data Security

We take the security of personal data seriously. We use reasonable technical and organisational measures to help protect information from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access restrictions, secure storage, password protection, and procedures designed to limit data exposure.

No system is completely secure, but we review our practices regularly and aim to maintain a level of protection appropriate to the nature of the data we process.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and legal exemptions available.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can request deletion of your data in certain situations.
Right to restriction – you can ask us to limit processing in certain cases.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the UK data protection authority if you are concerned about how your data has been handled. We encourage customers to raise concerns with us first so we can try to resolve the matter promptly and fairly.

8. International Transfers

Where personal data is processed outside the United Kingdom, we will take steps to ensure an appropriate level of protection is in place, such as recognised transfer safeguards or contractual protections. We aim to keep data within secure environments and only use services that meet suitable privacy standards.

9. Children’s Data

Our services are generally aimed at adult customers and property owners or occupiers. We do not knowingly collect personal data from children for marketing or service administration purposes. If we become aware that we have collected data unlawfully or unnecessarily, we will take appropriate steps to remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or the way we process personal data. Any revised version will apply from the date it is published. We encourage customers to review the policy periodically so they remain informed about how their data is handled.

11. Summary of Our Commitment

Gardeners South Wimbledon respects the privacy of every customer in the South Wimbledon area. We collect only the information needed to provide reliable gardening services, process it under a valid lawful basis, keep it secure, retain it only for as long as necessary, and give you meaningful control over your data. Our approach is designed to be fair, transparent, and consistent with GDPR principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.