Privacy Policy - Gardeners Orpington

This Privacy Policy explains how Gardeners Orpington collects, uses, stores, shares, and protects personal data when providing gardening services to customers in the Orpington area. It applies to all Gardeners Orpington customers in the area, including individuals who enquire about our services, request quotes, book work, or receive ongoing garden maintenance. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who This Policy Applies To

This policy applies to anyone who uses our services in Orpington and surrounding local areas, including homeowners, tenants, landlords, property managers, and commercial clients. It also applies to people who communicate with us on behalf of someone else, such as family members or authorised representatives. If you share personal data with us, this policy explains how we process that data and the choices available to you.

2. Information We Collect

We collect only the information needed to provide and manage our gardening services effectively. The types of personal data we may collect include:

Identity details such as your name and, where relevant, the name of a business or property manager.
Contact details such as telephone number and email address.
Service and property details such as your address, garden size, access notes, service preferences, and instructions for the work requested.
Communication records including messages, enquiry details, quotations, complaints, feedback, and service updates.
Billing and payment information where necessary for invoicing, payment tracking, and financial administration.
Technical information such as limited device or usage information if you interact with us through digital systems, forms, or email records.

We may also receive information from third parties where you have asked them to contact us on your behalf, or where a property manager, letting agent, or contractor provides details needed to carry out the service. We do not intentionally collect special category data unless it is necessary and lawful to do so, and only in rare circumstances.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange, deliver, and manage gardening services.
To record service preferences, site instructions, and access arrangements.
To issue invoices, process payments, and maintain business records.
To handle customer service matters, complaints, and follow-up requests.
To improve our services, planning, scheduling, and operational efficiency.
To meet legal, tax, insurance, and regulatory obligations.

We will only use your data for purposes that are compatible with the original reason it was collected. Where we need to use data for a new purpose, we will ensure that a valid legal basis applies.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Gardeners Orpington relies on the following lawful bases depending on the circumstance:

Performance of a Contract

We process personal data where it is necessary to take steps at your request before entering into a contract, or to perform a contract once services have been agreed. This includes managing bookings, carrying out gardening work, and handling customer instructions.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing enquiries, improving our services, keeping internal records, preventing fraud, and maintaining secure business operations. We always consider whether our interests are balanced against your privacy rights.

Legal Obligation

We may process and retain personal data where required to comply with legal obligations, including accounting, tax, insurance, or record-keeping duties.

Consent

In limited situations, we may rely on your consent, for example where you have agreed to receive certain types of communication not necessary for service delivery. Where consent is used, you may withdraw it at any time.

5. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors or independent controllers, but only where necessary for the operation of our services or legal compliance. These may include:

IT and email service providers that support communication, data storage, or system administration.
Accounting and bookkeeping providers that help manage invoices, payments, and financial records.
Payment service providers where payment processing is required.
Subcontractors or service partners who assist with gardening work under our instructions.
Professional advisers such as accountants, insurers, or legal advisers where necessary.
Public authorities if disclosure is required by law or to protect our rights and interests.

Where a third party processes data on our behalf, they are required to protect it and only use it according to our instructions. We seek appropriate safeguards to help ensure personal data remains secure and confidential.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the reason for collecting it.

Enquiry records may be kept for a reasonable period to manage follow-up communication and future service requests.
Customer and service records may be retained for the duration of the service relationship and for a period afterwards to support administration, dispute handling, and continuity of service.
Financial records are generally kept for the period required by tax and accounting law.
Complaint or legal records may be kept longer where needed to resolve issues or comply with legal obligations.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and careful handling of records. While no system can be guaranteed completely secure, we work to keep your information protected and to reduce risks wherever possible.

8. Your Rights

As a data subject, you have rights under data protection law. These rights may apply depending on the circumstances and the legal basis for processing.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in certain cases, you can request deletion of your personal data.
Right to restriction – you can ask us to limit how we use your data in some situations.
Right to object – you can object to processing based on legitimate interests, and in some cases to direct marketing.
Right to data portability – you may request certain data in a structured, commonly used format.
Right to withdraw consent – where processing relies on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We will respond within the timeframe required by law unless an extension is permitted.

9. International Transfers

Where personal data is transferred outside the United Kingdom, we will take appropriate steps to ensure that adequate protections are in place in line with applicable data protection law. This may include using approved contractual safeguards or relying on countries recognised as providing adequate protection.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how personal data is used.

11. Summary of Our Approach

Gardeners Orpington respects your privacy and handles personal data with care, transparency, and legal compliance. We collect only the information needed to deliver services, use it on a proper lawful basis, retain it only as long as necessary, and share it only with trusted processors or where required by law.

Key Commitments

We process data fairly and lawfully.
We limit collection to relevant service information.
We retain records only for necessary periods.
We use appropriate safeguards for processors and sharing.
We respect your rights and privacy choices.

This policy is intended to give clear information about how we manage personal data for customers across Orpington. By using our services, you acknowledge that your information may be processed as described above, subject always to your rights under applicable law.