Privacy Policy - Gardeners Highgate

Gardeners Highgate is committed to protecting the privacy and personal data of all customers in the Highgate area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Gardeners Highgate customers in the area, including individuals who enquire about our services, receive quotations, or instruct us to carry out gardening work.

1. Who We Are

For the purposes of data protection law, Gardeners Highgate acts as the data controller for the personal information we collect and use in connection with our services. This means we determine why and how your personal data is processed. We take our responsibilities seriously and only use personal information where we have a lawful and fair reason to do so.

Our approach is based on the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality. We aim to handle personal data in a way that is respectful, secure, and proportionate to the services we provide.

2. Information We Collect

We may collect and process a range of personal data depending on how you interact with us. This may include:

Identity details such as your name and title.
Contact details such as address, email address, and telephone number.
Service information relating to the gardening work you request, including preferences, property details, and job instructions.
Payment information where needed to manage invoicing, records, and payments.
Communication records such as correspondence, enquiries, feedback, and service updates.
Technical data where relevant, including basic online interaction data if you submit an enquiry through a digital form.

We do not intentionally collect special category data unless it is provided to us by you and is strictly necessary for a service-related reason. If such information is ever needed, we will only process it where the law permits and where appropriate safeguards are in place.

3. How We Use Your Data

We use personal information for legitimate business purposes connected with delivering gardening services and managing customer relationships. These purposes may include:

Responding to enquiries and requests for quotations.
Planning, arranging, and carrying out gardening services.
Managing appointments, service schedules, and job updates.
Issuing invoices and recording payments.
Handling customer feedback, complaints, or follow-up queries.
Meeting legal, accounting, and tax obligations.
Maintaining business records and service history.

We only process personal data for the purposes for which it was collected, unless we reasonably need to use it for a compatible purpose. If we need to use data for a new purpose, we will ensure this is allowed under data protection law and that it is explained clearly where required.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Gardeners Highgate relies on the following lawful bases where appropriate:

Contract – when processing is necessary to provide a quotation, enter into an agreement, or carry out services requested by a customer.
Legitimate interests – when we process data to run and improve our business, manage customer relationships, maintain records, or protect our operations, provided these interests do not override your rights and freedoms.
Legal obligation – when processing is required to comply with accounting, tax, record-keeping, or other legal duties.
Consent – where we rely on your permission for a specific purpose, such as certain optional communications. You may withdraw consent at any time where consent is the basis used.

We assess the lawful basis before processing data and only collect information that is relevant and necessary for the purpose involved.

5. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to support our business and deliver our services. These third parties act as processors or, in some cases, separate controllers. We only work with organisations that are expected to handle data securely and in accordance with applicable law.

Examples of processors may include:

Payment service providers used to process transactions.
Accounting or bookkeeping providers supporting financial records.
IT and cloud storage providers that host business systems or data backups.
Communication service providers used to send or receive messages.

Where data is shared with processors, we put appropriate contractual and organisational measures in place. These measures are intended to protect your data and ensure it is used only on our instructions and only for agreed purposes. We do not sell personal data.

We may also disclose data if required by law, court order, or a lawful request from a public authority. In such cases, we will only disclose the minimum amount of information required.

6. Data Retention

We keep personal data only for as long as it is needed for the purposes for which it was collected, or for as long as required by law. Retention periods vary depending on the type of record and the reason for keeping it.

Customer and service records are retained for as long as necessary to manage our business relationship and service history.
Financial and tax-related records are kept for the period required by law.
Enquiry records may be kept for a limited time where they help us respond to follow-up requests or manage future services.

When data is no longer needed, we will securely delete, anonymise, or otherwise dispose of it. We review retention requirements regularly to make sure we are not keeping personal data for longer than necessary.

7. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your personal data in certain circumstances.
Right to restriction – to request that we limit the processing of your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing where applicable.
Right to data portability – to receive certain data in a structured, commonly used, machine-readable format, where the right applies.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

We will respond to valid requests in accordance with data protection law. Some rights may not apply in every situation, and we may need to retain certain information where we have a legal obligation or another valid basis to do so.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and limited data access on a need-to-know basis.

While no system can be guaranteed to be completely secure, we work continuously to maintain a level of protection that is reasonable and appropriate for the nature of the data we process.

9. Children’s Data

Our services are generally aimed at adult customers and property holders. We do not knowingly collect data from children unless it is provided by a parent, guardian, or authorised adult in connection with a service request. If we become aware that we have collected personal data from a child without proper authorisation, we will take appropriate steps to remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service arrangements. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

11. Our Commitment to Privacy

Gardeners Highgate values trust, discretion, and responsible data handling. We believe that privacy is an important part of providing a reliable service experience. Whether you contact us for a quotation, arrange work at your property, or maintain an ongoing service relationship, we will treat your information with care and use it only where there is a lawful basis to do so.

In summary, we collect only the personal data needed to deliver and manage our services, we process it under clear lawful bases, we limit retention to what is necessary, we use trusted processors where appropriate, and we respect your rights under data protection law.