Privacy Policy - Gardeners Barnsbury

Gardeners Barnsbury is committed to protecting the privacy and personal data of all customers in the Barnsbury area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Gardeners Barnsbury customers in the area, including individuals who make enquiries, request services, receive quotations, or otherwise interact with our gardening services.

1. Who We Are

Gardeners Barnsbury provides gardening and related outdoor maintenance services to residential and commercial customers in the Barnsbury area. For the purposes of data protection law, we act as the data controller for personal information collected in connection with our services. This means we determine why and how your personal data is used.

2. Personal Data We Collect

We only collect information that is necessary for service delivery, administration, and legal compliance. The types of personal data we may collect include:

Identity details such as your name and title.
Contact details such as your email address, telephone number, and service address.
Service information relating to the work you request, preferences, site access, scheduling, and property-specific instructions.
Billing information such as invoice details, payment records, and transaction references.
Communication records including messages, feedback, complaints, and service notes.
Technical data where relevant, such as basic website or device usage information collected through cookies or similar technologies, if applicable.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, for example if health-related access requirements affect service delivery. Where such data is processed, we apply additional safeguards.

3. How We Use Your Data

Gardeners Barnsbury uses personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange, deliver, and manage gardening services.
To process payments and maintain accounting records.
To communicate about appointments, updates, and service-related matters.
To handle complaints, queries, and customer support requests.
To meet legal, tax, and regulatory obligations.
To improve our services, internal operations, and customer experience.

We will not use your personal data in a way that is incompatible with the original purpose for which it was collected, unless a lawful basis under data protection law permits us to do so.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis to process personal data. Depending on the context, Gardeners Barnsbury relies on one or more of the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes managing bookings, delivering services, issuing invoices, and communicating about agreed work.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided your interests and rights do not override them. Examples include maintaining service records, improving operations, managing enquiries, preventing fraud, and ensuring service quality. We always consider whether the processing is proportionate and respectful of your privacy.

Legal Obligation

Some information must be retained or processed to comply with tax law, accounting duties, health and safety requirements, or other legal obligations.

Consent

In limited situations, we may rely on your consent, for example where you have agreed to receive certain types of optional communication. Where consent is used, you may withdraw it at any time.

5. Sharing Your Personal Data

We do not sell personal data. However, we may share information with carefully selected third parties where necessary for business operations, legal compliance, or service delivery. These may include:

Service processors who support appointment management, communications, invoicing, or payment handling.
Accountants and professional advisers for compliance and financial administration.
IT and system providers that help us securely store and manage records.
Legal or regulatory authorities where disclosure is required by law.

All processors are required to act only on our instructions, maintain appropriate security measures, and process personal data in accordance with data protection law.

6. Data Retention

We keep personal data only for as long as necessary for the purposes described in this policy. Retention periods vary depending on the type of information and the reason for holding it. In general:

Customer service and contract records are retained for the duration of the service relationship and for a reasonable period afterwards.
Financial and invoice records are typically retained for the period required by tax and accounting law.
Communication records may be retained for as long as needed to resolve issues, maintain service history, or defend legal claims.

When data is no longer required, we will securely delete, anonymise, or otherwise dispose of it.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, restricted permissions, and staff awareness procedures. While no system can be guaranteed completely secure, we strive to use robust safeguards that are proportionate to the nature of the information we hold.

8. International Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or approved contractual protections. This is done only where necessary and with privacy protection in mind.

9. Your Rights

As a data subject, you have a number of rights under the UK GDPR. These rights may be subject to legal conditions or exemptions, depending on the circumstances.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – in some cases, you can request deletion of your data.
Right to restrict processing – you can ask us to limit how we use your data in certain situations.
Right to data portability – where applicable, you can request transfer of your data in a structured format.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

We will respond to valid requests within the time limits required by law.

10. Cookies and Similar Technologies

If we use a website or digital platform, we may use cookies or similar technologies for basic functionality, analytics, and user experience improvements. Where required, we will provide appropriate information and obtain consent for non-essential cookies. You can usually manage cookies through your browser settings.

11. Children’s Data

Our services are generally intended for adults. We do not knowingly collect personal data from children unless it is necessary in connection with a household service request and provided by an adult responsible for the account or property. If we learn that data has been collected inappropriately, we will take steps to delete it where required.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. The latest version will apply to your use of Gardeners Barnsbury services in the area from the date it is published.

13. How to Exercise Your Rights

If you wish to exercise any of your rights, or if you have questions about how we use personal data, please contact us using the usual service communication channels. We may need to verify your identity before responding to certain requests. This is to protect your personal information and ensure that data is only disclosed to the correct person.

14. Complaints

If you are unhappy with how we handle your personal data, you have the right to raise a concern with the relevant data protection authority. We would, however, appreciate the opportunity to address your concerns directly first, so that we can resolve the issue promptly and fairly.

15. Summary of Our Commitment

Gardeners Barnsbury values privacy, transparency, and responsible data handling. We collect only the information needed to provide and manage our services, use it on a lawful basis, retain it for no longer than necessary, and share it only with trusted processors or where required by law. We aim to treat all customer data with care and respect, ensuring that our privacy practices remain clear, proportionate, and compliant.