Privacy Policy for Gardeners Elephant and Castle
This Privacy Policy explains how personal data is collected, used, stored, shared, and protected by Gardeners Elephant and Castle. It applies to all Gardeners Elephant and Castle customers in the area, including people who contact us, request a quote, book a gardening service, receive a visit from us, or otherwise use our services. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
Personal Data We Collect
We may collect personal data directly from you when you make an enquiry, request a quotation, book a service, provide instructions, or communicate with us about your garden. This can include your name, address, service location, billing details, service preferences, access instructions, and details of the work requested. We may also collect correspondence records and notes relating to your project so that we can respond properly and deliver the agreed service.
Where you use our services, we may also collect information about your property relevant to the work we carry out, such as garden size, layout, condition, and any special requirements or hazards. If you provide photographs or other materials to help describe the work needed, those materials may also form part of our records. We do not intentionally collect special category personal data unless you voluntarily provide it and it is necessary for a specific reason connected to your service.
How We Use Your Data
We use personal data to respond to enquiries, prepare quotations, arrange appointments, carry out gardening services, manage customer accounts, issue invoices, receive payment, and handle follow-up communication. We also use data to keep records of services performed, to manage complaints or queries, and to improve the quality and consistency of our services. In limited cases, we may use data to comply with legal obligations, such as accounting or tax record-keeping requirements.
We do not sell your personal data. We only use it for the purposes described in this policy or for closely related purposes that are reasonably expected in the course of providing gardening services. Where required, we will notify you if we intend to use your data for a new purpose that is not compatible with the original reason for collection.
Lawful Basis for Processing
Under data protection law, we must have a lawful basis before processing your personal data. We usually rely on one or more of the following bases. First, we process data because it is necessary for the performance of a contract or to take steps at your request before entering into a contract, such as providing a quote or arranging a service. Second, we process data where it is necessary for our legitimate interests, such as managing customer relationships, maintaining service records, improving operations, and protecting our business, provided those interests are not overridden by your rights and freedoms.
We also process data where necessary to comply with a legal obligation, including keeping financial and accounting records. In rare situations, we may rely on consent, for example where you voluntarily agree to receive certain types of communication or where consent is otherwise required by law. If we rely on consent, you may withdraw it at any time, although this will not affect processing that has already taken place.
Sharing Your Data and Processors
We may share personal data with trusted third parties who act as processors on our behalf. These may include service providers that support booking management, document storage, accounting, payment processing, IT support, and other administrative functions. Processors only process personal data according to our instructions and are required to keep it secure and confidential. They are not allowed to use your data for their own independent purposes.
We may also share data where necessary with professional advisers, insurers, banks, or public authorities if required by law or needed to protect our legal rights. If a third party is used to support the delivery of a gardening service, they will only receive the information needed to carry out their role. We take reasonable steps to ensure that any third party handling personal data applies appropriate safeguards and complies with data protection obligations.
Data Retention
We keep personal data only for as long as necessary for the purposes for which it was collected, including meeting legal, accounting, and reporting requirements. The length of time we retain data depends on the type of information, the nature of the service provided, and any legal obligations that apply. For example, customer records related to quotations, invoices, and completed services may be kept for a period needed to manage the customer relationship and to comply with tax and financial record rules.
When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. If retention is required because of a legal claim, dispute, or regulatory obligation, we may keep the relevant data for longer than usual, but only for as long as necessary for that purpose.
Data Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures are designed to reflect the nature of the information we hold and the risks involved. While no system can be guaranteed to be completely secure, we work to reduce the risk of accidental or unlawful processing and to ensure that access to personal data is limited to those who need it.
Your Rights
Under data protection law, you have a number of rights in relation to your personal data. These include the right to access the data we hold about you, the right to request correction of inaccurate or incomplete data, the right to request deletion in certain circumstances, and the right to restrict or object to certain types of processing. You may also have the right to data portability where processing is based on consent or contract and carried out by automated means.
If we process your data on the basis of legitimate interests, you may object to that processing, and we will consider your request carefully. If we process data on the basis of consent, you may withdraw your consent at any time. You also have the right to complain to the UK Information Commissioner’s Office if you believe your data protection rights have not been respected. We encourage you to contact us first so that we can try to resolve any concern promptly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is published. We recommend reviewing this policy periodically so that you remain informed about how your personal data is handled.
This Privacy Policy is intended to provide a clear summary of our data protection practices for Gardeners Elephant and Castle customers in the area. If you use our services, you acknowledge that your personal data may be processed as described above and in line with applicable data protection law.
