Privacy Policy - Gardeners Burnt Oak

Gardeners Burnt Oak is committed to protecting personal data and respecting privacy. This Privacy Policy explains how we collect, use, store, share, and protect information relating to our customers, prospects, and website users. It applies to all Gardeners Burnt Oak customers in the area and is designed to meet the requirements of the UK GDPR and the Data Protection Act 2018.

Scope of this Privacy Policy

This policy applies whenever you request a gardening service, make an enquiry, receive a quotation, book an appointment, or otherwise interact with Gardeners Burnt Oak. It also applies to information gathered during ongoing service delivery, billing, and customer support. We only process personal data that is relevant, necessary, and proportionate to the service we provide.

We do not sell personal data. We also do not use personal data for unrelated purposes without a lawful basis and, where required, appropriate notice.

What Data We Collect

We may collect the following types of personal data:

Identity information such as name and title.
Contact information such as address, email address, and telephone number.
Service information such as property access notes, garden preferences, work instructions, and scheduling details.
Billing and payment information such as invoice records and payment status.
Communication records such as emails, messages, and notes from phone calls.
Technical information where applicable, such as basic device and usage data used to maintain security and improve our service systems.

We may also receive data from third parties where you have asked them to share it with us, or where it is necessary to deliver a service you have requested. We aim to collect only the minimum information needed.

How We Use Personal Data

Gardeners Burnt Oak uses personal data for the following purposes:

To provide quotations and manage customer enquiries.
To schedule, deliver, and manage gardening services.
To communicate about appointments, service changes, and customer requests.
To issue invoices, process payments, and maintain financial records.
To manage customer accounts and service history.
To comply with legal and regulatory obligations.
To protect against fraud, misuse, or security incidents.
To improve our internal operations and service quality.

We do not process personal data in a way that is incompatible with these purposes.

Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Gardeners Burnt Oak relies on the following lawful bases where appropriate:

Contract

We process personal data when it is necessary to take steps before entering into a contract, or to perform a contract with you. This includes handling bookings, providing services, and managing payment arrangements.

Legal Obligation

We may process data to meet legal obligations, such as tax, accounting, record-keeping, and compliance requirements.

Legitimate Interests

We may process data for our legitimate business interests, such as maintaining service records, improving operations, preventing fraud, and responding to customer queries, provided these interests do not override your rights and freedoms.

Consent

In limited cases, we may rely on consent, for example where it is required for certain optional communications. When consent is used, you may withdraw it at any time.

Vital Interests

In rare circumstances, we may process information to protect someone’s vital interests, such as in an emergency.

Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations. Retention periods depend on the type of data and the reason for processing.

For example, service and invoice records may need to be kept for several years to comply with legal and tax requirements. Enquiry information that does not lead to a service arrangement may be kept for a shorter period before being securely deleted or anonymised.

When data is no longer needed, we take reasonable steps to delete, destroy, or anonymise it securely.

Sharing Personal Data and Processors

We may share personal data with trusted third parties that help us operate our business. These third parties act as data processors or, in some cases, separate controllers. We only share the information necessary for the relevant purpose.

Examples of processors may include:

IT and cloud storage providers.
Accounting and invoicing software providers.
Payment service providers.
Customer communication and scheduling tools.
Professional advisers such as accountants or legal advisers.

Where processors handle personal data on our behalf, they are required to act under written terms that protect confidentiality, security, and lawful processing. We remain responsible for ensuring that such processors are selected carefully and used appropriately.

We may also disclose data where required by law, to public authorities, or to protect our rights, property, staff, or customers.

Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, destruction, or alteration. These measures may include access controls, secure storage, staff confidentiality expectations, and limited access to sensitive records.

Although no system can be guaranteed 100% secure, we take reasonable and proportionate steps to safeguard data. Security is an ongoing responsibility, not a one-time action.

Your Rights

As a data subject, you have rights in relation to your personal data. Subject to legal conditions and exemptions, these rights include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests, and to direct marketing where applicable.
Right to data portability – to request transfer of data you provided to us, where legally applicable.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable data protection laws. We may need to verify your identity before acting on your request. These rights are not absolute and may be subject to lawful exceptions.

Children’s Data

Gardeners Burnt Oak does not knowingly collect personal data from children in the ordinary course of its services. If we become aware that we have collected such data without appropriate authority, we will take steps to address the matter promptly.

International Transfers

Where any processor or service provider stores or processes data outside the UK, we will take steps to ensure that suitable safeguards are in place, such as approved contractual protections or other lawful mechanisms.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. The updated version will apply from the time it is made available. We encourage customers to review this policy periodically so they remain informed about how their information is used.

Our Commitment

Gardeners Burnt Oak treats privacy as an important part of our relationship with customers. We aim to be transparent, fair, and lawful in how we handle personal data. Our approach is based on the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

By using our services, you acknowledge that your personal data may be processed in accordance with this Privacy Policy and applicable data protection laws. If you do not agree with any part of this policy, you may choose not to provide the relevant data, although this may affect our ability to deliver certain services.

Protecting your privacy is central to how Gardeners Burnt Oak operates.