Privacy Policy - Gardeners Hornchurch

This Privacy Policy explains how Gardeners Hornchurch collects, uses, stores, shares, and protects personal data for all customers in the Hornchurch area. It applies to every customer, prospective customer, and website or service user who engages with Gardeners Hornchurch in this area, whether enquiries are made by phone, email, online form, social media message, or through a direct service booking. We are committed to handling personal information in a lawful, fair, and transparent way, in line with the UK GDPR and the Data Protection Act 2018.

We understand that privacy matters. This policy is written to explain what personal data we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your information. By using our services, you acknowledge that your personal data may be processed as described in this policy.

1. Who This Policy Applies To

This policy applies to all Gardeners Hornchurch customers in the area, including private homeowners, landlords, tenants, property managers, and business clients who request or receive gardening services. It also covers individuals who contact us for quotations, ask for availability, submit feedback, or otherwise communicate with us in relation to our services.

Where we act on behalf of a customer at a property occupied by other individuals, we will only process personal data that is necessary for the service arrangement or for lawful business administration.

2. Data We Collect

We only collect personal data that is relevant to providing gardening services, managing enquiries, meeting legal obligations, and maintaining accurate business records. The types of data we may collect include:

Identity information such as your name, title, and, where relevant, the name of a business or property owner.
Contact details such as address, telephone number, and email address.
Property and service information such as garden access notes, service preferences, instructions, quotes, site visit details, and work history.
Billing and transaction information such as payment status, invoice records, and service purchase history.
Communication records such as emails, messages, calls, complaint notes, and correspondence relating to service delivery.
Technical information where relevant, such as basic device or browser details if you use digital forms or online communication tools.

We do not seek to collect special category data unless it is strictly necessary and lawful. Special category data includes information about health, religion, race, political views, or similar sensitive matters. If such information is accidentally provided to us, we will only process it where a lawful condition applies and it is necessary to do so.

3. How We Use Personal Data

Gardeners Hornchurch uses personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange and deliver gardening services.
To manage customer accounts, schedules, and service records.
To issue invoices and process payments.
To communicate about appointments, changes, or service updates.
To handle complaints, disputes, and feedback.
To maintain internal records and support business administration.
To comply with legal, accounting, and tax obligations.
To protect our legitimate business interests, including the prevention of fraud or misuse.

We always aim to ensure that data use is proportionate, relevant, and limited to what is necessary for the purpose involved.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing personal data. Gardeners Hornchurch relies on the following lawful bases where appropriate:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes handling your details to provide a quote, carry out agreed gardening work, manage scheduling, and handle billing.

Legitimate Interests

We may process personal data where it is in our legitimate interests and where those interests are not overridden by your rights and freedoms. This may include maintaining service records, answering customer enquiries, improving our service delivery, preventing misuse, and protecting our business operations.

Legal Obligation

We may process and retain certain information to comply with legal duties, including accounting, recordkeeping, and tax requirements. In some situations, we may also need to retain information for insurance, dispute resolution, or regulatory purposes.

Consent

Where we rely on consent, we will make this clear at the time of collection. For example, this may apply to certain marketing communications or optional data uses. You may withdraw consent at any time where consent is the lawful basis for processing.

5. Sharing and Processors

We do not sell personal data. However, we may share personal information with trusted third parties, known as processors, who help us operate our business. These processors only act on our instructions and are required to keep your data secure and confidential.

Examples of processors may include:

Payment service providers who process card or electronic payments.
Accounting and bookkeeping providers who assist with invoices, tax records, and financial administration.
IT and cloud storage providers who host or back up business records.
Communication service providers who help manage email, messaging, or appointment systems.
Professional advisers such as insurers, legal advisers, or auditors where necessary.

We may also disclose data where required by law, court order, or a lawful request from a public authority. In addition, if a business restructuring or transfer were ever to occur, personal data may be shared as part of that process, subject to applicable data protection requirements.

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods may vary depending on the type of information and the reason it was collected.

Enquiry records may be kept for a reasonable period to support follow-up, quotations, or service history.
Customer service and job records may be retained for the length of the relationship and for a period afterwards in case of queries or disputes.
Financial and tax records are kept for the period required by law and standard accounting practice.
Complaint or legal records may be retained longer where necessary to establish, exercise, or defend legal claims.

When data is no longer needed, it is securely deleted, anonymised, or destroyed in a safe manner. We review retention regularly to ensure information is not held for longer than necessary.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures are designed to be suitable for the nature and sensitivity of the information we hold.

Security controls may include restricted access, password protection, secure storage, staff awareness measures, and careful management of shared systems. While no system can be guaranteed completely secure, we work to reduce risks and respond appropriately if an issue arises.

8. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to legal limits or exceptions, but we will always consider your request carefully.

Right of access - you may request a copy of the personal data we hold about you.
Right to rectification - you may ask us to correct inaccurate or incomplete information.
Right to erasure - you may request deletion of your data in certain circumstances.
Right to restrict processing - you may ask us to limit how we use your data in certain situations.
Right to object - you may object to processing based on legitimate interests or direct marketing.
Right to data portability - you may request transfer of certain data in a structured, commonly used format.
Right to withdraw consent - where consent is used, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the time limits required by law. We may need to verify your identity before acting on a request to protect your information.

9. International Transfers

Where personal data is processed by service providers outside the UK, we will take steps to ensure that suitable safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other legally recognised transfer mechanisms.

10. Marketing Communications

We only send marketing messages where we have a lawful basis to do so. If you have given consent or where another lawful basis applies, you may receive occasional service-related updates or information about our offerings. You can object to direct marketing at any time, and we will stop such communications promptly where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our data handling practices. Any updated version will apply from the date it is published or otherwise brought into effect. We encourage customers in the Hornchurch area to review this policy periodically.

12. Summary of Our Commitments

Gardeners Hornchurch is committed to protecting customer privacy, using personal data only for clear and lawful purposes, and keeping information no longer than necessary. We aim to be transparent about how we work, careful with the information we hold, and respectful of your rights under data protection law.

This policy is intended to support fair, lawful, and accountable handling of personal data for every Gardeners Hornchurch customer in the area.