Gardeners Orpington Privacy Policy

This Privacy Policy explains how Gardeners Orpington collects, uses, stores and protects personal data relating to customers and prospective customers in the Orpington area. It also explains your rights under the UK General Data Protection Regulation GDPR and the Data Protection Act 2018, and how you can exercise those rights.

This policy applies to all Gardeners Orpington customers and people who contact or interact with Gardeners Orpington in the Orpington area, whether in person, by post, by messaging services, through social media or by any other means.

Who we are and scope of this policy

Gardeners Orpington is a local gardening and grounds maintenance service provider operating in and around the Orpington area. For the purposes of data protection law, Gardeners Orpington is the data controller in respect of the personal data described in this Privacy Policy. This means that Gardeners Orpington decides how and why your personal data is used.

This Privacy Policy covers personal data relating to individual customers, prospective customers, and individual contacts at business customers within the Orpington area. It does not apply to information that cannot be used to identify an individual.

Personal data we collect

Gardeners Orpington may collect and process the following categories of personal data when you engage with our services or contact us:

Identification and contact details, such as your name, residential address, service address, and any alternative contact person you provide.

Communication details, such as your preferred methods of contact and the content of messages you send to us or that we send to you.

Service information, including details of the gardening or grounds maintenance services you request or receive, property access notes you choose to provide for carrying out services, and any photographs of garden areas that you share with us to obtain a quote or demonstrate work required.

Billing and transaction information, such as the amounts charged, payment status, and limited payment-related information required to confirm that a payment has been made. Payment details are normally processed by third-party payment providers and are not retained in full by Gardeners Orpington.

Technical and usage information, to the limited extent that it relates to how you interact with our online presence where applicable, such as basic device information and pages or content you access. This is generally collected through your browser or device when you visit any online pages we operate.

You may choose to provide other information voluntarily, for example specific instructions, feedback, testimonials or information relevant to particular gardening projects. Where such information can identify you, it will be treated as personal data and handled in line with this Privacy Policy.

Lawful bases for processing your data

Gardeners Orpington only processes your personal data where we have a lawful basis under the UK GDPR. Depending on the context, we rely on one or more of the following lawful bases:

Contractual necessity. We process your personal data where it is necessary to enter into a contract with you or to perform a contract for gardening services. This includes providing quotations, scheduling and delivering services, communicating about appointments, and managing billing and payments.

Legitimate interests. We may process your personal data where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. This includes managing our business operations, maintaining records of the services we provide, improving our services, handling enquiries, and pursuing or defending legal claims.

Legal obligation. We process certain personal data to comply with legal and regulatory obligations, for example keeping records required by tax or accounting laws.

Consent. In limited circumstances, we may rely on your consent, for example where you specifically agree to receive certain types of marketing communications. When we rely on consent, you have the right to withdraw it at any time.

How we use your personal data

Gardeners Orpington uses the personal data described above for the following purposes:

To respond to enquiries, provide quotations, and arrange consultations.

To plan, schedule, and deliver gardening and grounds maintenance services at your property or at locations you specify.

To manage our relationship with you, including handling questions, updates, and requests relating to existing or future services.

To issue invoices, confirm payments, and maintain financial and taxation records.

To improve our services, for example by reviewing feedback and analysing service history.

To send you service-related communications and, where permitted, marketing messages about services we believe may be relevant to you. You can object to or opt out of marketing at any time.

To protect our business and customers, including preventing fraud, resolving disputes, and establishing, exercising or defending legal claims.

Data retention

Gardeners Orpington keeps personal data only for as long as it is reasonably necessary for the purposes described in this Privacy Policy and as required by applicable laws and regulations.

Customer records, such as your contact details, service history and invoices, are generally kept for up to seven years after the end of your last contract or interaction with us, to comply with legal, tax and accounting obligations and to allow us to respond effectively to queries about past work.

Enquiry records where no contract is formed may be kept for up to two years from the date of last contact, so that we can respond to follow-up questions and manage our business records.

In some cases, we may retain personal data for longer where it is necessary in connection with actual or potential disputes, investigations, or legal claims. When data is no longer needed, it will be securely deleted or anonymised.

Data sharing and processors

Gardeners Orpington does not sell your personal data. We only share your personal data where it is necessary and lawful to do so.

We may share your personal data with carefully selected service providers acting as data processors on our behalf. These may include providers of payment processing services, accounting or bookkeeping services, IT and cloud storage services, and communication tools. These processors are only allowed to process your personal data in accordance with our instructions and for the purposes we specify, and they are required to keep it secure.

We may also share personal data with professional advisers, such as accountants, insurers or legal advisers, where this is necessary in the course of the professional services they provide to us.

In limited circumstances, we may be required to share personal data with public authorities, regulators, law enforcement agencies or courts if we are legally required to do so, or if it is necessary to protect our rights or the rights of others.

Where any data transfers take place outside the United Kingdom, they will be carried out in compliance with applicable data protection laws, using appropriate safeguards such as recognised data protection agreements or standard contractual clauses, where these are required.

How we protect your data

Gardeners Orpington takes appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction or damage. These measures may include restricted access to personal data, the use of passwords or encryption where appropriate, and regular reviews of our data handling practices.

While no method of transmission or storage is completely secure, we aim to ensure that the level of protection applied to your personal data is appropriate to the risks involved and in line with legal requirements.

Your data protection rights

Under the UK GDPR, individuals in the Orpington area whose personal data is processed by Gardeners Orpington have a number of rights in relation to their personal data. These rights include:

The right of access. You can request confirmation of whether we process your personal data and obtain a copy of that personal data, together with certain additional information.

The right to rectification. You can ask us to correct personal data that is inaccurate or complete information that is incomplete.

The right to erasure. In some circumstances, you can ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis to continue processing.

The right to restrict processing. You can ask us to restrict the processing of your personal data in certain situations, such as while we verify its accuracy or consider an objection you have raised.

The right to object. You can object to processing that is based on our legitimate interests, including profiling, and we will stop unless we have compelling legitimate grounds that override your interests or the processing is required for legal claims. You can always object to direct marketing, and we will stop sending you such communications.

The right to data portability. In some cases, you can ask us to provide your personal data in a structured, commonly used and machine-readable format, and to transmit it to another controller where technically feasible.

The right to withdraw consent. Where we rely on your consent for specific processing, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew consent.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact Gardeners Orpington first so that we can try to resolve your concerns directly.

Updates to this Privacy Policy

Gardeners Orpington may update this Privacy Policy from time to time, for example to reflect changes in our services, how we handle personal data, or updates to legal and regulatory requirements. When we make significant changes, we will take reasonable steps to inform you. The updated version will apply from the date it is published. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.