Privacy Policy - Gardeners Noak Hill

This Privacy Policy explains how Gardeners Noak Hill collects, uses, stores, shares, and protects personal data when providing gardening services. It applies to all Gardeners Noak Hill customers in the area, including prospective customers, active customers, and individuals who enquire about our services. We are committed to handling personal information lawfully, fairly, and transparently in line with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Gardeners Noak Hill provides gardening and related outdoor maintenance services to domestic and commercial customers within the Noak Hill area and surrounding locations. In this policy, references to “we”, “us”, and “our” mean Gardeners Noak Hill. References to “you” and “your” mean any individual whose personal data we process.

We act as a data controller for personal data collected in the course of delivering services, handling enquiries, managing bookings, invoicing, customer support, and maintaining our business records.

2. Personal Data We Collect

We collect only the information needed to provide our services effectively and manage our business responsibly. The data we may collect includes:

Identity data such as your name and title.
Contact data such as address, email address, and telephone number.
Service information such as property details, garden preferences, service instructions, appointment dates, and job history.
Payment and transaction data such as invoice records, payment status, and billing details.
Communication data such as messages, call notes, and records of enquiries or complaints.
Technical data if you contact us electronically, including basic device or usage information supplied by systems that support communication.
Special category data only where strictly necessary and usually only if you voluntarily provide it, for example information relating to access needs or health-related requirements that affect service delivery.

We do not intentionally collect more data than is needed. If you provide information that is not necessary for the service, we will not use it unless there is a lawful reason to do so.

3. How We Use Personal Data

We use personal data to deliver a reliable and professional gardening service. This may include:

responding to enquiries and providing quotations;
booking and managing appointments;
performing gardening, maintenance, clearance, or related services;
issuing invoices and processing payments;
keeping records of work completed and services requested;
handling customer support, complaints, and follow-up communication;
meeting legal, tax, insurance, and accounting obligations;
improving our services and maintaining business records; and
protecting our customers, staff, and business from fraud or misuse.

We will only use your personal data for the purposes stated in this policy or for purposes that are compatible with them. If we need to use data for a new and unrelated purpose, we will explain this to you and identify the lawful basis before doing so.

4. Lawful Basis for Processing

Under GDPR, we must have a valid legal reason to process personal data. Gardeners Noak Hill relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotes, managing bookings, carrying out services, and handling payments.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include maintaining customer records, improving service quality, managing internal administration, and protecting our business against fraud or misuse. We always consider whether the impact on your privacy is proportionate.

Legal Obligation

We may process and retain personal data where required to comply with legal obligations, such as tax rules, accounting requirements, insurance obligations, or lawful requests from authorities.

Consent

Where required by law, we will rely on your consent. For example, if we ever need to process optional information that is not necessary for the service, we will ask for your clear and informed consent. You can withdraw consent at any time, where consent is the basis used.

Vital Interests and Special Category Data

In rare circumstances, we may process information to protect someone’s vital interests, or we may process limited special category data if you provide it and it is needed to support service delivery. In such cases, we will ensure appropriate safeguards are in place and only process the minimum necessary information.

5. Data Sharing and Processors

We do not sell your personal data. We may share it only when necessary and only with trusted third parties that help us operate our services. These organisations act as processors or independent controllers depending on the service they provide.

Examples of processors may include:

IT and cloud storage providers that support secure data storage and communication;
accounting or bookkeeping providers used for invoicing and financial records;
payment service providers that handle transactions securely;
administrative support tools used for scheduling, record keeping, or customer management;
professional advisers such as insurers, auditors, or legal advisers where needed.

Where processors act on our behalf, they are required to process data only according to our instructions, protect it appropriately, and use it for no other purpose. We also require suitable contractual safeguards and security controls.

We may also share personal data if required by law, to prevent fraud, to protect legal rights, or in connection with an insurance claim or dispute. If personal data is transferred outside the UK, we will ensure that appropriate legal safeguards are used.

6. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including to meet legal, accounting, tax, or insurance requirements. Retention periods may vary depending on the nature of the data and the reason for processing.

As a general approach:

customer and service records are kept for the duration of the customer relationship and for a reasonable period afterwards;
financial and invoice records are retained for the period required by tax and accounting laws;
enquiry records may be kept for a limited period if no service is booked;
complaints, claims, or dispute-related records may be retained longer where needed to defend or establish legal claims.

When personal data is no longer needed, we will delete it securely or anonymise it so it can no longer identify you. If we cannot delete certain data immediately because of legal obligations, we will restrict its use to those obligations only.

7. Data Security

We take the security of personal data seriously. We use reasonable technical and organisational measures to help protect information against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, data minimisation, and staff confidentiality obligations.

Although no system can be guaranteed completely secure, we work to reduce risk and review our safeguards regularly. Where appropriate, we will also limit access to personal data on a need-to-know basis.

8. Your Rights

You have important rights under data protection law. Subject to legal limits, you may have the right to:

Access the personal data we hold about you;
Rectification of inaccurate or incomplete data;
Erasure of your data in certain circumstances;
Restriction of processing in certain circumstances;
Object to processing based on legitimate interests;
Data portability where processing is based on consent or contract and carried out by automated means;
Withdraw consent at any time where consent is the lawful basis;
Complain to the relevant data protection authority if you believe your rights have been infringed.

We may need to verify your identity before responding to a rights request. We will respond within the time limits set by law and will explain if an exemption applies or if we need more information to process your request.

9. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is necessary in the context of household service arrangements and only with appropriate care. If we become aware that we have collected data that is not appropriate to retain, we will take steps to remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is published. We encourage you to review this policy periodically so you remain informed about how we protect your data.

11. Summary of Our Commitment

Gardeners Noak Hill is committed to processing personal data fairly, lawfully, and transparently. We collect only what is needed, use it for clear and legitimate purposes, retain it for a sensible period, and protect it with appropriate safeguards. We also respect your rights and aim to handle every customer’s information with care and professionalism.

This Privacy Policy applies to all Gardeners Noak Hill customers in area.