Privacy Policy - Gardeners Pinner

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected when you use services provided by Gardeners Pinner. It applies to all Gardeners Pinner customers in the area, including prospective customers, current customers, and people who have previously used our gardening services. We are committed to handling personal data fairly, transparently, and in line with the General Data Protection Regulation (GDPR) and applicable UK data protection laws.

We understand that privacy matters. Whether you request a quotation, arrange a garden maintenance visit, or communicate about a service, we process only the personal data needed to deliver our work responsibly. This policy explains what data may be collected, why it is collected, how long it is kept, and the rights you have over it.

1. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity details such as your name and, where relevant, the name of a business or property manager.
Contact details such as address, email address, and phone number.
Service information including your garden preferences, requested works, appointment times, access notes, and service history.
Billing and transaction details such as records of invoices, payment status, and payment-related correspondence.
Communication records including messages, call notes, complaints, feedback, and enquiries.
Technical information if you communicate electronically, such as device or email metadata where necessary for service administration.

We do not intentionally collect special category data unless it is necessary and lawful to do so. If such information is ever shared with us accidentally, we will handle it carefully and restrict its use as required by law.

2. How We Use Personal Data

We use personal data for clear and limited purposes connected with our gardening services. These may include:

Responding to enquiries and providing quotations.
Arranging and delivering gardening services.
Managing customer accounts and service records.
Handling invoices, payments, and administrative tasks.
Maintaining accurate records of completed work.
Improving service quality and customer experience.
Dealing with complaints, disputes, or legal claims.
Meeting legal, tax, accounting, and regulatory obligations.

We only process data that is relevant, adequate, and limited to what is necessary for the stated purpose. We will not use your personal data for unrelated purposes without first ensuring that we have a lawful basis to do so.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis before processing personal data. Gardeners Pinner relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging visits, providing the services you requested, sending service updates, and managing payment-related matters.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. Examples include record keeping, service improvement, responding to customer queries, fraud prevention, and maintaining business security. We always consider whether the processing is proportionate and respectful of your privacy.

Legal Obligation

Some information must be retained or processed to comply with legal duties, such as tax records, accounting requirements, or obligations arising from consumer and business law.

Consent

In limited cases, we may rely on your consent, for example where an optional communication preference requires it. If consent is used, you may withdraw it at any time. Withdrawal will not affect processing already carried out lawfully before withdrawal.

4. Sharing Data and Processors

We may share personal data only when necessary and only with trusted third parties acting on our instructions or where required by law. These may include:

Service processors who help with administration, scheduling, storage, email handling, or record management.
Payment and invoicing providers used to manage transactions and financial records.
Professional advisers such as accountants, auditors, or legal advisers where needed.
Regulators, courts, or public authorities where disclosure is legally required.

Where a third party processes data on our behalf, that party acts as a data processor. We require processors to handle data securely, use it only for the agreed purpose, and apply appropriate technical and organisational safeguards. We do not sell your personal data.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods vary depending on the type of record and the reason it is held.

Customer service records are usually kept for the duration of the customer relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law.
Communications and complaints may be retained for as long as needed to resolve the issue and protect legal interests.
Marketing preferences are retained until you change your preferences or withdraw consent, where applicable.

When data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

6. Data Security

We take reasonable steps to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, limited staff access, and careful selection of processors. While no system can be guaranteed completely secure, we review our practices regularly to reduce risk and maintain confidentiality.

We also encourage anyone handling our services to use secure communication and to share only the information necessary for us to provide assistance.

7. Your Rights Under GDPR

You have important rights over your personal data. Subject to legal conditions and exemptions, these rights may include:

Right of access – to ask for a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to ask us to limit how we use your data in some situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

You also have the right to lodge a complaint with a relevant data protection authority if you believe your rights have been infringed. We encourage you to raise concerns promptly so that we can address them fairly and transparently.

8. Children’s Data

Our services are intended for adults and property-related clients. We do not knowingly collect personal data from children unless it is required incidentally and lawfully in the course of service delivery. If we become aware that we have collected data from a child without appropriate permission or legal basis, we will take steps to delete it where required.

9. International Transfers

Where any processor or service provider stores data outside the United Kingdom or European Economic Area, we will ensure appropriate safeguards are in place. These may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms, depending on the circumstances. We only allow transfers where an adequate level of protection is maintained.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. The latest version will always apply to the services provided by Gardeners Pinner. We recommend reviewing the policy periodically so that you remain informed about how your data is used.

11. Our Commitment to Privacy

Gardeners Pinner is committed to processing personal data responsibly, securely, and in a manner that respects your rights. We aim to be clear about what data we hold, why we hold it, and how long we keep it. Privacy, transparency, and accountability are central to the way we manage customer information.

If you continue to use our services, communicate with us, or provide information necessary for gardening work, you acknowledge that this Privacy Policy applies to your data processing relationship with Gardeners Pinner. We will always seek to handle your information in a fair, lawful, and privacy-conscious way.