Privacy Policy - Gardeners Southborough

Gardeners Southborough is committed to protecting the privacy and personal data of all customers in the Southborough area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when we provide gardening services. It applies to all Gardeners Southborough customers in the area, including residential and commercial clients who enquire about, book, or receive our services.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We aim to handle all information fairly, lawfully, and transparently. This policy explains the types of information we collect, the lawful bases we rely on, how long we keep data, the types of processors we may use, and the rights available to you.

1. Information We Collect

We only collect personal data that is necessary to deliver our services, manage our relationship with customers, and meet legal obligations. The information we may collect includes:

Identity details such as your name or business name.
Contact details such as postal address, email address, and telephone number.
Service information such as the type of gardening work requested, property access notes, preferred dates, and service history.
Billing and payment records such as invoices, payment status, and transaction references.
Communication records including enquiries, messages, complaints, feedback, and service updates.
Site and operational notes such as garden conditions, scheduling requirements, and health and safety considerations relevant to the service.

We generally collect data directly from you when you make an enquiry, request a quote, book a service, or communicate with us. We may also receive information from third parties where necessary for service delivery, for example where a property owner, tenant, landlord, or managing agent provides details relevant to access or instructions.

We do not intentionally collect special category data unless it is strictly necessary and you provide it yourself, or it is otherwise required for safety or legal reasons. If such data is shared with us accidentally, we will handle it carefully and only for the limited purpose for which it was disclosed.

2. How We Use Personal Data

We use personal data to provide reliable gardening services and manage our business effectively. Typical uses include:

responding to enquiries and providing quotations;
arranging appointments and delivering services;
issuing invoices and recording payments;
maintaining customer service records and preferences;
handling complaints, requests, or follow-up questions;
meeting insurance, accounting, and legal requirements;
improving service quality, operational planning, and customer experience.

We will not use your personal data for purposes that are incompatible with the reasons it was collected unless we have a valid lawful basis to do so and, where required, your consent.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing personal data. Gardeners Southborough relies on the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotations, scheduling visits, delivering gardening services, and managing payment arrangements.

Legal Obligation

We may process and retain certain information where required to comply with legal obligations, including tax records, accounting rules, insurance obligations, and regulatory requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing customer relationships, improving services, maintaining records, preventing fraud, and ensuring the safe operation of our business. We always consider whether the processing is proportionate and limited to what is necessary.

Consent

In some situations, we may rely on your consent, particularly where a processing activity is optional and not required for the service. If consent is used, you have the right to withdraw it at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.

4. Sharing Data with Processors

We may share personal data with carefully selected third-party processors who help us operate our services. Processors act on our instructions and are only allowed to use personal data for specified purposes. These may include:

accounting and bookkeeping providers;
payment service providers;
email and communication service providers;
cloud storage and IT support services;
customer management or scheduling systems;
professional advisers such as insurers, auditors, or legal advisers where necessary.

We require processors to apply appropriate security measures and to protect data in accordance with data protection law. We do not sell personal data. We do not share information with unrelated third parties for their own marketing purposes.

In limited circumstances, we may also disclose information where required by law, to establish or defend legal claims, to protect the rights of Gardeners Southborough, or to prevent harm or unlawful activity.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, or for as long as required by law. Retention periods depend on the nature of the data and the reason it is held.

Customer enquiry records may be kept for a reasonable period to manage follow-up communication and service continuity.
Service and contract records may be kept for the duration of the service relationship and for a period afterwards in case of disputes or repeat bookings.
Financial and tax records are typically retained for the period required by accounting and tax law.
Complaint and correspondence records may be retained to evidence how matters were handled and to improve service management.

When personal data is no longer required, we will securely delete, anonymise, or archive it in a way that prevents unnecessary access. We periodically review the information we hold to ensure retention remains appropriate.

6. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and limiting data access to those who need it for their role.

While no system can be guaranteed completely secure, we work to maintain appropriate safeguards and review our practices regularly. If a personal data breach occurs and it is likely to result in a risk to your rights and freedoms, we will take appropriate action in line with our legal obligations.

7. Your Rights

You have several rights under data protection law in relation to the personal data we hold about you. These rights may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests in some cases.
Right to data portability – to request transfer of certain data to you or another provider where applicable.
Right to withdraw consent – where processing is based on consent.

You also have the right to raise concerns with the UK Information Commissioner’s Office if you believe your data has been handled unlawfully. We encourage you to contact us first so we can try to resolve any issue promptly and fairly.

8. Cookies and Similar Technologies

If we use any digital tools that involve cookies or similar technologies, these are only used where necessary for basic functionality, performance, or security. Any optional tracking tools would be used only in compliance with applicable law. Where consent is required, it will be requested before any non-essential cookies are activated.

9. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children as part of ordinary service arrangements. If we become aware that child-related information has been provided without a valid reason, we will take appropriate steps to remove or protect it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service delivery. Any revised version will continue to apply to all Gardeners Southborough customers in the area. We encourage customers to review this policy periodically so they remain informed about how personal data is handled.

11. Summary of Our Commitment

Gardeners Southborough respects your privacy, uses data only where necessary, and applies safeguards to ensure personal information is handled responsibly, lawfully, and transparently. We collect only what we need, rely on clear lawful bases, retain information for appropriate periods, work with trusted processors, and support your rights under data protection law.