Privacy Policy - Gardeners Harlesden

This Privacy Policy explains how Gardeners Harlesden handles personal data for all customers in the Harlesden area. It sets out what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and the rights individuals have under the UK GDPR and the Data Protection Act 2018. This policy applies to all Gardeners Harlesden customers in area, including prospective customers, existing customers, and people who enquire about our services.

1. Who We Are

Gardeners Harlesden provides gardening and related outdoor maintenance services to residential and commercial customers in the local area. For the purposes of data protection law, we act as the data controller for the personal information we collect and use in connection with our services. This means we decide how and why your personal data is processed, and we are responsible for ensuring that it is handled lawfully, fairly, and transparently.

2. Personal Data We Collect

We only collect personal data that is necessary for the provision of our services, business administration, and legal compliance. Depending on your relationship with us, we may collect the following categories of information:

Identity details such as your name and, where relevant, the name of your business or property management company.
Contact details such as your address, email address, telephone number, and preferred communication method.
Service details such as information about the gardens, outdoor spaces, or properties we are asked to maintain, including access notes and job instructions.
Billing and payment information such as invoice details, payment records, and transaction references.
Communication records such as enquiries, feedback, complaints, and correspondence relating to bookings or completed work.
Technical information if you contact us electronically, including basic device or message delivery information where needed for security and service management.

We do not intentionally collect special category data unless you provide it to us voluntarily and it is necessary for a particular request, for example if you share information about access needs or health-related circumstances linked to service delivery. When such information is provided, we process it only where lawful and appropriate safeguards are in place.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotes.
To arrange, deliver, and manage gardening services.
To keep records of work completed and customer preferences.
To issue invoices, process payments, and manage accounts.
To handle customer support, complaints, and follow-up communication.
To meet legal, accounting, and tax obligations.
To protect our business, staff, and customers from fraud or misuse.

We will never use personal data in a way that is incompatible with the original purpose for which it was collected, unless we have a lawful basis to do so and the new use is reasonably expected.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis to process personal data. Gardeners Harlesden relies on one or more of the following bases depending on the context:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotes, scheduling work, delivering services, and managing payments.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include service administration, record keeping, quality control, and responding to customer enquiries. We always consider whether our interests are proportionate and whether your privacy rights require stronger protection.

Legal Obligation

We process certain data to comply with legal requirements, including tax records, accounting obligations, and other statutory duties.

Consent

In limited situations, we may rely on your consent, particularly where the processing is optional and not required for a contract or legal obligation. If we rely on consent, you may withdraw it at any time. Withdrawal of consent will not affect processing already carried out lawfully before it was withdrawn.

5. Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as processors when they handle data on our instructions and only for agreed purposes. Typical processors may include:

Accounting and bookkeeping providers for invoicing, tax, and financial administration.
IT and email service providers for secure storage, communication, and system maintenance.
Payment service providers for handling card or bank-related transactions.
Administrative support providers where necessary for booking, scheduling, or record management.

We require processors to keep personal data secure, to use it only for our instructions, and to comply with relevant data protection laws. We may also disclose information where required by law, court order, or a lawful request from a public authority.

We do not sell personal data.

6. International Transfers

If any of our processors store or access personal data outside the UK, we will ensure appropriate safeguards are in place, such as standard contractual protections or other lawful transfer mechanisms recognised under UK data protection law. We take steps to ensure that your data remains protected to a standard that is equivalent to UK requirements.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, and operational requirements. Retention periods depend on the type of information and the reason for processing.

Customer and service records are typically retained for the duration of the business relationship and for a further period where needed for queries or disputes.
Financial and tax records are kept for the period required by law.
Communication records may be retained for a reasonable period to support customer service and business administration.

When personal data is no longer needed, we will delete it or anonymise it securely. We regularly review retention needs to ensure data is not kept longer than necessary.

8. Your Rights

As a data subject under UK GDPR, you have important rights in relation to your personal data. Subject to legal limits and applicable exemptions, these rights include:

The right to be informed about how your data is used.
The right of access to request a copy of the personal data we hold about you.
The right to rectification if information is inaccurate or incomplete.
The right to erasure in certain circumstances, also known as the right to be forgotten.
The right to restrict processing where appropriate.
The right to data portability for data you have provided to us, where applicable.
The right to object to processing based on legitimate interests or direct marketing.
Rights relating to automated decision-making, if ever applicable, though Gardeners Harlesden does not rely on automated decisions that produce legal or similarly significant effects.

If you wish to exercise any of these rights, we will respond in line with legal requirements. We may need to verify your identity before acting on a request. In some cases, we may not be able to comply fully if an exemption applies or if retaining the data is required by law.

9. Security of Your Data

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures are designed to be proportionate to the nature of the data we hold and the risks involved. While no system can be guaranteed to be completely secure, we work to maintain a strong level of protection and to limit access to data on a need-to-know basis.

10. Children’s Data

Our services are generally aimed at adults and property managers. We do not knowingly collect personal data from children unless it is necessary in a limited and lawful context, such as where a parent or guardian provides information relevant to a service request. If we become aware that we have collected data from a child without a valid legal basis, we will take appropriate steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. The latest version will apply to all Gardeners Harlesden customers in area. We encourage customers to review this policy periodically to stay informed about how personal data is managed.

12. Summary of Our Commitment

Gardeners Harlesden is committed to handling personal data responsibly, lawfully, and transparently. We collect only what we need, use it for clear and legitimate purposes, protect it with appropriate safeguards, and keep it only as long as necessary. We also respect your rights and aim to make our data practices straightforward and fair. If you are a customer in the Harlesden area, this policy applies to you whenever we process your personal data in connection with our services.