Privacy Policy - Gardeners Anerley

This Privacy Policy explains how Gardeners Anerley collects, uses, shares, stores, and protects personal data in connection with the gardening services we provide. It applies to all Gardeners Anerley customers in the area, including prospective customers, current customers, and individuals who contact us on behalf of a home, business, or managed property. We are committed to handling personal information in a lawful, fair, and transparent way, in line with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Gardeners Anerley provides gardening and related outdoor maintenance services to customers in the local area. For the purposes of data protection law, we act as the data controller for the personal data we collect and process about our customers, suppliers, and website or enquiry users where relevant. This means we decide why and how personal data is used and are responsible for ensuring that it is processed safely and lawfully.

2. Information We Collect

We only collect personal data that is relevant to the services we provide, our business administration, and our legal obligations. The type of information we may collect includes:

Identity details such as your name and title.
Contact details such as address, phone number, and email address.
Service information including details about your garden, property access, service preferences, and instructions.
Billing and payment information where required for invoicing and record-keeping.
Communication records such as enquiries, messages, feedback, and complaint information.
Technical data where relevant, such as limited device or usage information used to support service enquiries or security.
Special instructions that may relate to timing, access, or safety considerations connected to the service.

We do not intentionally collect more data than necessary. In most cases, you can choose not to provide certain information, but this may affect our ability to offer services, respond to enquiries, or manage your account properly.

3. How We Use Personal Data

Gardeners Anerley uses personal data only for specific purposes connected to our services and business operations. These purposes may include:

providing quotations and responding to service enquiries;
arranging and delivering gardening work;
maintaining customer records and service histories;
issuing invoices, processing payments, and managing accounts;
handling complaints, queries, and after-service support;
meeting legal, tax, accounting, and insurance obligations;
protecting our business, staff, contractors, and customers;
improving the quality and efficiency of our services;
communicating service updates or important administrative notices.

We will not use personal information for purposes that are incompatible with the reason it was collected unless we have a lawful basis to do so and, where required, your consent.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for every use of personal data. Gardeners Anerley relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, booking services, carrying out gardening work, and managing invoices or service records.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer communications, improving service quality, maintaining business security, and keeping operational records. We always consider the impact on your privacy before relying on this basis.

Legal Obligation

We may process and retain certain information to comply with legal duties, such as tax rules, financial reporting, accounting obligations, insurance requirements, or lawful requests from public authorities.

Consent

In limited situations, we may rely on your consent. If we do, we will explain what the consent relates to and how you can withdraw it. Where consent is not required, we will not rely on it unnecessarily.

5. Sharing Personal Data and Processors

We may share personal data with trusted third parties when necessary and only to the extent required for service delivery, administration, or legal compliance. These third parties may act as processors on our behalf or, in some cases, as independent controllers.

Examples of processors or service providers may include:

accounting or bookkeeping providers;
payment processing providers;
IT support, cloud storage, or software platforms;
communication and scheduling tools;
professional advisers such as insurers or legal advisers where necessary;
subcontractors assisting with specific gardening work under our instructions.

Where a processor handles personal data for us, they are only allowed to act on our documented instructions and must implement appropriate technical and organisational security measures. We do not sell personal data.

We may also disclose information if required by law, to protect our rights, to prevent fraud or misuse, or to respond to lawful requests by public authorities.

6. International Transfers

If any of our service providers store or access data outside the UK, we will take appropriate steps to ensure your information remains protected. This may include using approved contractual safeguards or relying on adequacy arrangements recognised under applicable data protection law.

7. Data Retention

Gardeners Anerley keeps personal data only for as long as necessary for the purposes for which it was collected. Retention periods depend on the type of data, the reason for processing, and legal or business requirements.

In general:

customer enquiry records may be kept for a reasonable period after the enquiry ends;
contract and service records may be retained for the duration of the customer relationship and for a period afterwards;
financial and tax records are kept for the period required by law;
complaint or dispute information may be retained as long as needed to resolve the matter and defend legal claims.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. We review retained data periodically to ensure it is not kept for longer than necessary.

8. Data Security

We take reasonable and appropriate measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and careful management of information shared with processors.

While no system can be guaranteed completely secure, we work to reduce risk and to handle any personal data incidents responsibly. If a data breach occurs that presents a risk to your rights and freedoms, we will take the steps required by law, which may include notifying the relevant authority and affected individuals where appropriate.

9. Your Rights

As a data subject under GDPR, you have a number of rights in relation to your personal data. Subject to legal limits and applicable exemptions, these rights may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain cases.
Right to object – to object to processing based on legitimate interests or direct marketing where applicable.
Right to data portability – to receive certain information in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to raise concerns about how your data is handled. If you believe your data protection rights have not been respected, you may have the right to complain to the UK Information Commissioner’s Office.

10. Children’s Data

Our services are intended for adult customers and property representatives. We do not knowingly collect personal data from children unless it is necessary for a specific service arrangement and is provided by an adult with authority to do so. Where children’s data is processed, we take additional care to ensure that it is handled lawfully and appropriately.

11. Automated Decision-Making

Gardeners Anerley does not use personal data for automated decision-making that produces legal or similarly significant effects on individuals. If this changes in the future, we will update this policy and provide the information required by law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their personal data is used.

13. Summary of Our Commitments

Gardeners Anerley is committed to responsible data handling. We collect only the information we need, use it for clear and lawful purposes, keep it no longer than necessary, and share it only with trusted processors or where required by law. We aim to respect your privacy at every stage and to give you control over your personal information wherever possible.

This policy applies to all Gardeners Anerley customers in the area and reflects our commitment to privacy, transparency, and GDPR compliance.