Privacy Policy - Gardeners Frognal

This Privacy Policy explains how Gardeners Frognal collects, uses, stores, and protects personal data when providing gardening services. It applies to all Gardeners Frognal customers in the area and is designed to meet the standards of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to handling personal information fairly, lawfully, and transparently.

By using our services, requesting a quotation, making an enquiry, or entering into a service arrangement, you acknowledge that your personal data may be processed in accordance with this policy. We only collect data that is necessary for delivering our services, managing customer relationships, meeting legal obligations, and improving service quality.

1. Data We Collect

We may collect and process the following categories of personal data:

Identity details such as your name and title.
Contact details such as address information and any communication details you provide in connection with our services.
Service information including the type of gardening work requested, appointment preferences, property access instructions, and notes relevant to delivering the service.
Payment and billing records where needed to manage invoicing, payments, and accounting.
Communication records including messages, service updates, complaints, feedback, and records of correspondence.
Technical data if you interact with our digital systems, such as basic device and usage information necessary for security and performance monitoring.

We do not seek to collect unnecessary information. Where we receive data that is not needed for service delivery, it will be handled securely and deleted or anonymised where appropriate.

2. How We Use Personal Data

Gardeners Frognal uses personal data for the following purposes:

to provide quotes, arrange bookings, and deliver gardening services;
to manage customer accounts and service records;
to issue invoices and process payments;
to respond to enquiries, feedback, and complaints;
to maintain records required for tax, legal, and regulatory purposes;
to improve service delivery, planning, and administration;
to protect our business, customers, and staff from fraud, misuse, or security risks.

We only use personal information where we have a lawful reason to do so. This means we do not process data arbitrarily or for purposes that are incompatible with the original reason it was collected.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing personal data. The lawful bases we rely on include:

Contract

We process data when it is necessary to enter into or perform a contract with a customer. This includes preparing quotations, carrying out gardening work, arranging visits, issuing invoices, and managing customer requests related to the agreed service.

Legal Obligation

We may process certain personal data to comply with legal obligations, including accounting, tax record keeping, and responding to lawful requests from authorities where required.

Legitimate Interests

We may process data based on our legitimate interests where doing so is necessary for running and protecting our business, provided those interests do not override your rights and freedoms. Examples include service administration, record keeping, improving customer experience, and managing communications. When relying on this basis, we assess whether the processing is proportionate and whether your privacy impact is limited.

Consent

In limited situations, we may rely on your consent, for example where you explicitly agree to optional communications or the use of information that is not strictly required for service delivery. If consent is used, you may withdraw it at any time.

4. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. The retention period depends on the type of data and the reason for processing.

Customer service and contract records are kept for the duration of the service relationship and for a reasonable period afterwards in case of disputes, follow-up work, or record-keeping needs.
Financial and tax records are retained for the period required by law.
Communication records are kept only as long as needed to manage service matters and resolve issues.
Supplied sensitive or incidental information is deleted or anonymised when it is no longer required.

When data is no longer needed, we will securely delete, anonymise, or archive it in a way that prevents unauthorised access or use.

5. Processors and Third Parties

To operate efficiently, we may use trusted third-party service providers who act as data processors on our behalf. These processors are permitted to handle personal data only in accordance with our instructions and are required to implement appropriate security measures.

Examples of processors may include:

payment service providers;
accounting or bookkeeping systems;
secure data storage or cloud service providers;
communication and scheduling tools;
IT support or security service providers.

We may also share information with professional advisers, insurers, or authorities where necessary and permitted by law. We do not sell personal data. Any sharing is limited to what is relevant, necessary, and proportionate.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage practices, staff awareness, and limiting access to personal data on a need-to-know basis.

Although no system can be guaranteed completely secure, we work to reduce risk and maintain a strong privacy-focused approach. If a data incident occurs, we will assess it promptly and take action in line with legal obligations.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to legal limitations, these include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to data portability – to receive data you provided to us in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests, including profiling where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data has been handled unlawfully. We encourage you to raise concerns directly so that we can try to resolve them promptly and fairly.

8. Children’s Data

Our services are intended for adult customers and property-related service arrangements. We do not knowingly collect personal data from children unless it is provided incidentally by an adult customer and is necessary for service delivery. Where such information is not required, it will be minimised or removed.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, service arrangements, or operational practices. The most current version will apply to the way we process personal data. We encourage customers to review the policy periodically so they remain informed about how their information is used.

10. Summary of Our Approach

Gardeners Frognal values privacy and aims to process personal data in a lawful, fair, and transparent manner. We collect only the data needed to provide and manage our gardening services, rely on clear lawful bases, retain information for appropriate periods, use trusted processors responsibly, and respect your rights under data protection law. This policy applies to all Gardeners Frognal customers in area and reflects our commitment to protecting personal information at every stage of service delivery.