Privacy Policy - Gardeners Ickenham

This Privacy Policy explains how Gardeners Ickenham collects, uses, stores, and protects personal data belonging to customers, prospective customers, and other individuals whose information we process in connection with our gardening services. It applies to all Gardeners Ickenham customers in the area, including anyone who requests a quotation, books a service, receives a service, or communicates with us about our work. We are committed to handling personal data in a lawful, fair, transparent, and secure manner in line with the UK GDPR and the Data Protection Act 2018.

We believe privacy should be handled with the same care and attention as the services we provide. This policy sets out what information may be collected, why it is collected, the lawful basis for processing, how long it is kept, who may process it on our behalf, and the rights available to you under data protection law.

1. Information We Collect

We may collect personal data directly from you when you make an enquiry, request a quote, place a booking, communicate with us, or use our services. The information we collect may include:

Identity information such as your name or title.
Contact details such as your address, email address, and telephone number.
Service information such as the type of gardening work requested, property access instructions, preferred dates, and notes relevant to the service.
Billing and payment information where required for invoices, receipts, or account management.
Communication records including messages, complaints, feedback, and service-related correspondence.
Technical information if you interact with digital systems we use, such as basic device or usage data where relevant to security and service administration.

We normally only collect information that is necessary for the performance of our services and the proper running of our business. We do not intentionally collect special category data unless it is necessary and we have a lawful basis to do so. If such information is ever provided to us incidentally, we will handle it with additional care and only where required for a legitimate service or legal purpose.

2. How We Use Your Data

Gardeners Ickenham uses personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange appointments and deliver gardening services.
To manage customer records and service history.
To issue invoices, process payments, and maintain financial records.
To communicate about bookings, changes, cancellations, or follow-up matters.
To handle complaints, disputes, and customer support matters.
To maintain security, prevent fraud, and ensure the proper functioning of our systems.
To meet our legal, tax, accounting, and regulatory obligations.

We may also use limited data to improve our services, monitor quality, and understand how our business operates. Where possible, this will be done using the minimum amount of personal data necessary.

3. Lawful Basis for Processing

We only process personal data where the law allows us to do so. Depending on the situation, our lawful basis may be one or more of the following:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes providing quotes at your request, managing bookings, and carrying out gardening work.

Legal Obligation

We may process certain information to comply with legal obligations, including record-keeping, tax compliance, accounting duties, and responding to lawful requests from public authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This can include managing customer relationships, improving our services, protecting our business from fraud or misuse, and maintaining internal administration. We always assess whether the processing is necessary and proportionate.

Consent

In some limited cases, we may rely on your consent, for example where you choose to receive certain types of optional communication. If we rely on consent, you may withdraw it at any time.

4. Data Sharing and Processors

We do not sell your personal data. However, we may share data with trusted third parties where necessary for the operation of our services or where required by law. These third parties may act as processors on our behalf or as independent controllers in their own right.

Examples of processors may include:

IT and cloud service providers that help us store and secure records.
Administration and booking tools used to organise customer jobs and communications.
Payment and invoicing providers assisting with billing or financial administration.
Professional advisers such as accountants or legal advisers where necessary.

Where we use processors, they are required to handle personal data only on our instructions, keep it secure, and comply with applicable data protection requirements. We take reasonable steps to ensure that any third party acting on our behalf meets appropriate standards of confidentiality and data security.

We may also disclose personal data if necessary to comply with a legal obligation, enforce our rights, protect our business, or prevent unlawful activity.

5. International Transfers

Where a processor or service provider stores or accesses data outside the United Kingdom, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms permitted under data protection law. Our aim is to keep personal data protected to a standard equivalent to that required in the UK.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting obligations. Retention periods will vary depending on the type of data and the reason for processing.

Customer and service records are retained for a period appropriate to manage the ongoing relationship and any follow-up issues.
Financial and invoicing information is kept for the period required by tax and accounting law.
Communication records may be retained for a reasonable period to manage queries, complaints, or disputes.

When data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices. We aim to keep personal data no longer than necessary.

7. Security of Your Data

We take appropriate technical and organisational measures to protect personal data against accidental loss, misuse, unauthorised access, alteration, or disclosure. These measures may include restricted access controls, secure storage, staff confidentiality expectations, and regular review of our procedures.

While no system can be guaranteed to be completely secure, we work to reduce risks and maintain the confidentiality and integrity of personal information. If a data breach occurs that poses a risk to your rights and freedoms, we will act in accordance with applicable legal requirements.

8. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to request transfer of certain data to you or another organisation.
Right to withdraw consent – where consent is the basis for processing, you may withdraw it at any time.

Some rights may not apply in all circumstances. For example, we may be required to keep certain information for legal or contractual reasons. We will respond to requests in accordance with applicable law and explain any limitations where relevant.

9. Children’s Data

Our services are generally intended for adults who are able to contract for gardening work. We do not knowingly collect personal data from children for marketing or service administration purposes. If we become aware that data belonging to a child has been provided without appropriate authority, we will take reasonable steps to address the situation.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their data is used.

11. Summary of Our Commitment

Gardeners Ickenham is committed to handling personal data responsibly and transparently. We collect only the information needed to deliver and manage our services, use it for clearly defined purposes, retain it for appropriate periods, and share it only where necessary with trusted processors or where required by law. We respect your rights and aim to process all personal information in a way that is lawful, secure, and fair.

This Privacy Policy applies to all Gardeners Ickenham customers in the area. By engaging with our services, you acknowledge that your personal data may be processed as described in this policy and that we will handle it in accordance with applicable data protection legislation.