Privacy Policy - Gardeners Penge

Gardeners Penge is committed to protecting the privacy and personal data of all customers in the Penge area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Gardeners Penge customers in the area, including people who enquire about services, request quotes, book gardening work, or otherwise interact with us.

We aim to keep this policy clear and transparent so you can understand what happens to your information and the choices you have. By using our services, you acknowledge that your data may be processed as described below.

1. Information We Collect

We only collect personal data that is necessary for providing and managing our services. The information we may collect includes:

Identity details such as your name and title.
Contact details such as address, email address, and telephone number.
Service details such as the type of gardening service requested, property access notes, preferred visit times, and job history.
Billing and payment information where relevant to invoicing and payment handling.
Communication records including emails, messages, call notes, and complaint correspondence.
Technical data such as basic website or device information if you submit an online enquiry, including IP address and browser details, where applicable.

We do not seek to collect more information than is reasonably required. We are careful to limit our processing to what is relevant and proportionate for the services requested.

2. How We Use Your Data

Gardeners Penge uses personal data for the following purposes:

To respond to enquiries and provide quotes.
To arrange and deliver gardening services.
To manage appointments, changes, and service updates.
To issue invoices, process payments, and maintain financial records.
To keep internal records and service histories.
To handle complaints, queries, and customer support matters.
To meet legal, tax, accounting, and insurance obligations.
To improve the quality, efficiency, and safety of our services.

Where we use information for these purposes, we always aim to do so in a fair, lawful, and transparent manner.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing personal data. The lawful bases we rely on are:

Contract

We process data when it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes providing quotes, booking services, carrying out work, and managing payments.

Legal Obligation

We may process and retain certain records to comply with legal duties, including tax, accounting, and record-keeping requirements, and where necessary to meet insurance or regulatory obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include maintaining service records, improving customer service, preventing fraud, and managing business operations efficiently.

Consent

In limited situations, we may rely on your consent, for example for optional communications or specific uses that are not covered by another lawful basis. Where consent is used, you can withdraw it at any time.

Special category data is not normally collected by Gardeners Penge. If such data is ever provided voluntarily, it will only be handled where a lawful condition applies and appropriate safeguards are in place.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our services. These parties act as processors or, in some cases, independent controllers. We only share data where necessary and with appropriate safeguards.

Examples of processors may include:

Payment providers that handle transactions securely.
Accounting software providers used for invoicing and financial administration.
IT and cloud hosting providers that store or support our records and systems.
Communication services used to send emails, messages, or appointment updates.
Professional advisers such as accountants, insurers, or legal advisers where needed.

These organisations are only permitted to use your data in line with our instructions and for the specific services they provide. We do not sell personal data.

We may also disclose data if required by law, court order, or to protect our rights, property, staff, customers, or the public.

5. Data Retention

Gardeners Penge keeps personal data only for as long as necessary for the purpose it was collected, and in line with legal and operational requirements.

Enquiry records are generally kept for a limited period after the enquiry ends, unless a longer period is needed for follow-up or dispute handling.
Customer and service records may be retained for the duration of the working relationship and for a reasonable period afterwards.
Invoices, payment records, and accounting information are kept for the period required by tax and financial law.
Complaint and correspondence records may be kept for as long as necessary to resolve issues and maintain evidence of communications.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, restricted internal access, and careful handling of records.

Although we work to protect your information, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we will respond appropriately if a data incident occurs and will meet our legal obligations in such cases.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to ask us to limit how your data is used in certain situations.
Right to data portability – to receive certain information in a structured, commonly used format, where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

Some rights may be limited where legal obligations apply or where we have compelling legitimate grounds to continue processing. We will always assess requests carefully and respond in accordance with the law.

8. Children’s Data

Our services are intended for adult customers and property holders. We do not knowingly collect personal data from children as part of normal service provision. If we become aware that such data has been collected without appropriate consent or lawful basis, we will take steps to delete it where required.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal duties, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their information is used.

10. Contact and Complaints

If you have concerns about how your personal data is handled, you may raise them with us through our usual service channels. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

We welcome the opportunity to resolve concerns fairly and promptly. Our aim is to process all personal information responsibly, lawfully, and with respect for your privacy.

In summary: Gardeners Penge processes personal data only where there is a lawful reason to do so, keeps it only as long as needed, uses trusted processors where appropriate, and respects the rights of all customers in the Penge area.