Gardeners Burnt Oak Privacy Policy

This Privacy Policy explains how Gardeners Burnt Oak collects, uses, stores and protects personal data relating to its customers in the local service area. It also sets out the rights that individuals have under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Gardeners Burnt Oak customers and prospective customers within our service area, regardless of how they contact us or engage our services.

Who we are and scope of this policy

Gardeners Burnt Oak is a gardening and grounds maintenance service provider operating in the Burnt Oak area and surrounding neighbourhoods. In the course of providing our services, we act as a data controller in relation to the personal data of our customers and prospective customers. This means we decide how and why your personal data is processed and are responsible for ensuring that such processing complies with data protection law.

This Privacy Policy covers personal data we collect when you contact us, request a quote, enter into a contract, receive our services, or otherwise interact with Gardeners Burnt Oak in the course of our business activities.

Personal data we collect

We may collect and process the following categories of personal data about you:

Identification and contact details, such as your name, postal address, service address, and general location details necessary to attend and maintain your garden or outdoor space.

Communication information, such as records of correspondence and communications with you, including details of enquiries, quotes, instructions, feedback and complaints made by telephone, in writing or in person.

Service and contract information, such as details of the gardening or maintenance services requested or provided, visit dates and times, access instructions, property layout notes relevant to the services, and any photographs taken solely to document the condition of the garden or work completed, if appropriate and agreed.

Billing and payment information, such as invoice history, payment amounts, payment method type and transaction records. We do not store full card details where payment is processed via secure third party providers.

Technical data, where relevant, such as information related to our website usage including basic analytics, device type and general traffic data. We do not seek to identify individual users from this technical information unless necessary for security or legal reasons.

How we collect personal data

We collect personal data directly from you when you contact us to request information, a quote, or to book services; when you sign a contract or accept our terms; when you communicate with us during the course of our services; or when you provide feedback or a testimonial.

We may also obtain personal data indirectly when it is provided by a third party with your knowledge and where they have legitimate authority to share it, for example, a landlord, managing agent, family member or neighbour who arranges gardening services on your behalf.

Lawful basis for processing your data

We will only process your personal data where we have a valid lawful basis under data protection law. Depending on the circumstances, we rely on the following lawful bases:

Contract: We process personal data where it is necessary to enter into or perform a contract with you, for example, to provide gardening services, prepare quotes, issue invoices, and manage your bookings and service visits.

Legitimate interests: We process personal data where it is necessary for our legitimate business interests and these are not overridden by your rights and freedoms. This includes managing our relationship with customers, improving our services, managing our business operations, and maintaining security and fraud prevention measures.

Legal obligation: We process personal data where it is necessary to comply with our legal obligations, such as tax and accounting requirements, record-keeping duties, and responding to valid requests from regulatory or law enforcement authorities.

Consent: In limited situations, we may rely on your explicit consent for specific processing activities that are not covered by the bases above. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing that took place before withdrawal.

How we use your personal data

We use your personal data for the following purposes:

To respond to enquiries and provide quotes for gardening and maintenance services in the Burnt Oak area.

To set up and manage your customer account, schedule visits, and deliver our services safely and efficiently.

To communicate with you about your bookings, any changes to appointments, and other necessary service-related information.

To issue invoices, process payments, and manage billing queries or disputes.

To maintain records of work carried out at your property for quality assurance, health and safety, and business administration.

To improve our services, including through feedback and internal analysis of service usage.

To comply with applicable law, respond to lawful requests and protect our legal rights, for example, in relation to the enforcement or defence of legal claims.

Data sharing and processors

We do not sell your personal data to third parties. However, we may share your personal data with carefully selected third party service providers who act as data processors and assist us in running our business. These may include:

Payment processing providers that securely process your payments.

Accounting or bookkeeping providers that assist with our financial records and statutory reporting obligations.

Information technology and hosting providers that support our systems, data storage and security.

Professional advisers such as accountants, or legal advisers where necessary for legitimate business or legal reasons.

Any third party processors are only permitted to process your personal data in accordance with our written instructions and must implement appropriate technical and organisational measures to protect it. We remain responsible for the protection of your personal data when it is processed by such providers.

We may also share personal data where required by law, for example with law enforcement, courts or regulatory authorities, or where necessary to establish, exercise or defend legal claims.

International transfers

Our intention is to keep your personal data within the United Kingdom or other jurisdictions that provide an equivalent level of data protection. If we are required to transfer personal data outside these regions, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other approved mechanisms that ensure your rights and protections travel with your data.

Data retention

We keep personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to meet legal, accounting or reporting requirements. The exact retention period will vary depending on the nature of the information and the reasons for which it is processed.

Customer and service records are generally kept for the duration of your relationship with Gardeners Burnt Oak and for a reasonable period thereafter to enable us to respond to queries, handle complaints, and maintain proper business records.

Billing and financial records are typically retained for a minimum of six years after the end of the relevant financial period to comply with tax and accounting laws.

Where personal data is no longer required, it will be securely deleted, anonymised or otherwise removed from our active systems in line with our data retention practices.

Security of your personal data

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or damage. Measures may include restricted access controls, secure storage systems, appropriate staff awareness, and the use of reputable service providers with suitable data protection standards.

Your rights under data protection law

As a customer of Gardeners Burnt Oak within our service area, you have various rights in relation to your personal data under data protection law. These include:

The right of access: You can request confirmation of whether we process your personal data and obtain a copy of the personal data we hold about you.

The right to rectification: You can ask us to correct or complete any inaccurate or incomplete personal data we hold about you.

The right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and no other lawful basis for processing applies.

The right to restrict processing: You can ask us to restrict how we use your personal data in certain situations, such as while we verify the accuracy of the data or consider an objection you have raised.

The right to object: You can object to processing based on our legitimate interests where you believe your rights and interests outweigh our reasons for processing.

The right to data portability: In certain circumstances, you can request that personal data you have provided to us be transferred to you or another controller in a structured, commonly used and machine-readable format.

These rights are subject to legal conditions and exemptions. If you choose to exercise any of your rights, we will respond in accordance with applicable data protection law.

Complaints and further information

If you have concerns about how Gardeners Burnt Oak handles your personal data or wish to exercise any of your data protection rights, you can contact us using your usual communication channels with our business. We will endeavour to respond to your request or concern promptly and in line with our legal obligations.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed. Further information about your rights and how to raise a complaint can be obtained from the appropriate data protection regulator.

Changes to this Privacy Policy

We may review and update this Privacy Policy from time to time to reflect changes in the law, our services or our internal practices. Any updated version will apply from the date it is published. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.