Privacy Policy - Gardeners North Ockendon

Gardener North Ockendon is committed to protecting the privacy and personal data of all customers in the North Ockendon area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when we provide gardening services. It applies to all Gardeners North Ockendon customers in the area, including prospective customers, active customers, and anyone who has previously used our services.

We process personal data in accordance with the UK GDPR and the Data Protection Act 2018. This means we handle information fairly, lawfully, and transparently, and we only collect data that is relevant to the services we provide. We aim to keep our records accurate, secure, and retained only for as long as necessary.

1. Information We Collect

We collect only the information needed to manage enquiries, deliver services, and meet legal or operational obligations. The types of information we may collect include:

Identity information such as your name or the name of a business or property owner.
Contact details such as telephone number, email address, and service address.
Service information such as details of the gardening work requested, preferences, access instructions, and scheduling information.
Billing and payment information such as invoicing records, payment status, and transaction references.
Communication records including messages, notes, and feedback relating to enquiries or completed work.
Technical information where relevant, such as basic website or device data if you contact us electronically.

We do not seek to collect special category data unless it is necessary and lawful to do so. If such data were ever required, we would ensure an additional lawful condition applies and would only process it where appropriate safeguards are in place.

2. How We Use Personal Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to arrange and carry out gardening services;
to manage appointments, access arrangements, and work records;
to issue invoices and manage payments;
to maintain internal records and service history;
to handle complaints, follow-up requests, or customer support;
to comply with legal, tax, accounting, or insurance obligations;
to improve our service delivery and operational efficiency.

We only use personal information for legitimate business purposes connected to our services. We do not sell personal data and we do not use it in a way that is incompatible with the original purpose for which it was collected.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the situation, Gardeners North Ockendon may rely on the following bases:

Contract

We process data where it is necessary to take steps at your request before entering into a contract or to perform a contract for gardening services. This may include arranging visits, confirming work, and issuing invoices.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include maintaining records, managing service quality, preventing fraud, and ensuring appropriate communication about scheduled work.

Legal Obligation

We may process and retain certain information when required by law, including records for tax, accounting, insurance, or regulatory purposes.

Consent

In limited cases, we may rely on your consent, for example where it is required for a specific optional activity. Where consent is used, it will be freely given, specific, informed, and you can withdraw it at any time.

4. Data Sharing and Processors

We may share personal data only where necessary and only with trusted third parties acting as processors or independent controllers under data protection law. Processors are organisations that process personal data on our behalf and under our instructions.

Examples of processors may include:

Booking and scheduling tools used to manage appointments and work diaries;
IT and cloud service providers used for secure storage, email, and document management;
Accounting or invoicing providers used for financial administration;
Payment service providers used to process customer payments;
Professional advisers such as accountants, insurers, or legal advisers where necessary.

We require processors to handle personal data securely, to use it only for the agreed purpose, and to implement appropriate technical and organisational safeguards. Where personal data is shared with independent controllers, such as HM Revenue & Customs or law enforcement authorities, those parties will be responsible for their own processing.

We do not permit processors to use customer data for their own marketing purposes.

5. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes set out in this policy, or for as long as required by law. Retention periods may vary depending on the type of information and the reason it is held.

Enquiry records may be kept for a reasonable period to manage follow-up and service continuity.
Customer service records may be retained while the relationship remains active and for a short period afterwards.
Invoice, accounting, and tax records may be retained for the legally required period.
Correspondence and complaint records may be retained where needed to resolve disputes or demonstrate compliance.

When data is no longer needed, it is securely deleted or anonymised. We periodically review the information we hold to ensure it is not kept for longer than necessary.

6. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the lawful basis for processing.

Right of access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete information.
Right to erasure - you can request deletion of your data in certain circumstances.
Right to restriction - you can ask us to limit how we use your data in certain situations.
Right to object - you can object to processing based on legitimate interests.
Right to data portability - you may request a copy of certain data in a structured format where applicable.
Right to withdraw consent - where processing is based on consent, you can withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled incorrectly. We encourage you to raise concerns with us first so that we can address them promptly and fairly.

7. Security of Personal Data

We take the security of personal data seriously and use appropriate measures to protect it against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful handling of records.

Although no system can be guaranteed completely secure, we review our security practices and seek to maintain a level of protection appropriate to the risk and the nature of the data we process.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updated version will apply from the date it is published or communicated. We recommend reviewing the policy periodically to stay informed about how your data is handled.

9. Summary of Our Commitment

Gardeners North Ockendon respects your privacy and is committed to handling personal information responsibly. We collect only the data needed to provide and manage gardening services, we use clear lawful bases for processing, we share data only with suitable processors or other authorised recipients, and we retain information only for as long as necessary. We also recognise and support your rights under data protection law.

This policy is intended to provide clear and lawful information to all customers in the North Ockendon area whose personal data we process in connection with our gardening services.