Privacy Policy - Gardeners Chelsfield

Gardeners Chelsfield is committed to protecting the personal data of all customers in the Chelsfield area and to handling that information in a lawful, fair, and transparent manner. This Privacy Policy explains what personal data we collect, how we use it, the legal grounds on which we process it, how long we keep it, who may process it on our behalf, and the rights available to you under data protection law. This policy applies to all Gardeners Chelsfield customers in the area, including anyone who enquires about, receives, or has previously received our gardening services.

1. Information We Collect

We collect only the personal data necessary to provide our services, manage customer relationships, and meet legal obligations. Depending on how you interact with us, we may collect:

Identity details such as your name or title.
Contact details such as address, email address, telephone number, and service location.
Service information including the type of gardening work requested, appointment preferences, site notes, and relevant instructions.
Communication records including messages, emails, call notes, and customer feedback.
Transaction details relating to invoices, payments, quotes, and service history.
Technical data that may be collected when you interact with digital systems used to manage bookings or communications, such as basic device and usage information.

We do not intentionally collect special category data unless it is strictly necessary and a lawful basis applies. If such information is ever needed, we will handle it with additional care and only where permitted by law.

2. How We Use Personal Data

We use personal data for clear and limited purposes connected to our services. These include:

Responding to enquiries and providing quotations.
Arranging and delivering gardening services.
Managing bookings, scheduling, and service updates.
Processing payments and maintaining business records.
Handling customer support and resolving issues.
Meeting legal, accounting, tax, and regulatory obligations.
Improving the quality, safety, and reliability of our services.

We will not use your data in a way that is incompatible with the original purpose for which it was collected unless we have a valid legal reason to do so.

3. Lawful Basis for Processing

Under the UK GDPR and the Data Protection Act 2018, we must have a lawful basis before processing personal data. Gardeners Chelsfield relies on the following lawful bases where appropriate:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. For example, we need your contact and service details to provide a gardening service, issue a quotation, or manage a booking.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include responding to enquiries, maintaining service records, improving our operations, preventing fraud, and ensuring the security of our systems.

Legal Obligation

Some information must be retained or processed to comply with law, such as accounting, tax, or record-keeping requirements.

Consent

Where required by law, we will rely on consent, for example for certain types of marketing communication. If processing is based on consent, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

4. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law. Retention periods depend on the type of record and the purpose of processing.

Customer service and booking records are kept for the duration of the service relationship and for a reasonable period afterwards.
Financial and accounting records are retained for the period required by tax and accounting laws.
Communication records may be kept for a period needed to manage queries, disputes, or follow-up service matters.
Marketing preferences are retained until you opt out or request deletion, where applicable.

When data is no longer needed, we will securely delete, anonymise, or otherwise dispose of it in a safe and appropriate manner.

5. Processors and Third Parties

We may share personal data with trusted third parties who act on our behalf as data processors or, in limited cases, as independent controllers. These parties are only permitted to process data in accordance with our instructions or their own legal obligations. Typical processors may include:

Payment service providers to handle transactions securely.
IT and cloud service providers that support storage, communications, and system maintenance.
Accounting and bookkeeping providers for financial administration and compliance.
Scheduling, administration, or customer management providers that help organise service delivery.
Professional advisers such as insurers, legal advisers, or auditors where necessary.

We take reasonable steps to ensure processors protect your information with appropriate technical and organisational safeguards. We do not sell personal data.

6. Data Security

We use appropriate security measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality expectations, and careful management of digital and paper records. While no system can be guaranteed completely secure, we work to reduce risk and respond promptly to any suspected data incident.

7. Your Rights

You have a number of rights in relation to your personal data. These rights may be subject to legal limitations and exemptions, but we will always consider each request carefully. Your rights include:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete information.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restriction - to ask us to limit how we use your data in certain situations.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent - where processing relies on consent.

If you wish to exercise any of these rights, we will respond in line with applicable data protection law. We may need to verify your identity before acting on your request.

8. International Transfers

If any of our processors store or access personal data outside the UK, we will only allow this where appropriate safeguards are in place, such as recognised transfer mechanisms or equivalent protection standards required by law.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their information is used.

10. Summary of Our Commitment

Gardeners Chelsfield processes personal data only when necessary, uses it fairly and transparently, and keeps it only for as long as needed. We respect your privacy, protect your information, and aim to ensure that all data practices remain compliant with applicable data protection law. This policy applies to all Gardeners Chelsfield customers in the area and is intended to give a clear explanation of how your information is handled.