Privacy Policy - Gardeners Friern Barnet

Gardeners Friern Barnet is committed to protecting the privacy and personal data of all customers in the Friern Barnet area. This Privacy Policy explains how we collect, use, store, share, and protect personal data when providing gardening and related services. It also explains the rights individuals have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Gardeners Friern Barnet customers in the area, including prospective customers, existing customers, and anyone who has requested information, a quotation, or services. By using our services, you acknowledge that your personal data will be handled in accordance with this Privacy Policy.

1. Data We Collect

We only collect personal data that is necessary for providing our services, managing customer relationships, meeting legal obligations, and improving service quality. Depending on how you interact with us, we may collect the following categories of data:

Identity data: name, title, and any details needed to identify you as a customer or property contact.
Contact data: address, email address, and phone number.
Service data: details about the gardening services requested, property access notes, service preferences, and job history.
Payment data: payment confirmation details, invoice records, and transaction information where relevant.
Communication data: emails, messages, call notes, and other correspondence relating to enquiries, bookings, complaints, or feedback.
Technical data: limited information collected through website or digital service interactions, such as device information or browser data, where applicable.
Usage and operational data: service scheduling details, attendance records, and work completion notes.

We do not intentionally collect special category data unless it is provided to us by you and is necessary for a specific lawful purpose. Special category data may include information about health or accessibility requirements that affect service delivery. If such data is shared, it will be handled with additional care and only when strictly necessary.

2. How We Use Personal Data

We use personal data for the following purposes:

to provide and manage gardening services;
to respond to enquiries and provide quotations;
to schedule visits and coordinate service delivery;
to communicate regarding bookings, changes, and service updates;
to process payments and manage accounts;
to maintain records of work completed and customer preferences;
to handle complaints, disputes, and customer support requests;
to comply with legal, tax, and regulatory obligations;
to improve service quality, planning, and customer experience;
to protect against fraud, misuse, or unlawful activity.

We will only use personal data in ways that are compatible with the purposes explained above, unless we are required or permitted by law to do otherwise.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for using personal data. Gardeners Friern Barnet relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering gardening services, issuing invoices, and managing service arrangements.

Legitimate Interests

We may process data for our legitimate business interests, provided that these interests do not override your rights and freedoms. This includes keeping service records, improving operations, managing enquiries, preventing fraud, and maintaining customer relationships.

Legal Obligation

We may process and retain certain information to comply with legal obligations, such as accounting, tax, insurance, or regulatory requirements.

Consent

In limited cases, we may rely on your consent, particularly where consent is required for certain communications or optional data use. Where consent is used, you can withdraw it at any time.

Vital Interests and Public Interest

These bases are unlikely to apply to our routine services, but may be used in exceptional circumstances where necessary.

4. Sharing and Processors

We may share personal data with trusted third parties who act as processors on our behalf. These parties only process data under our instructions and are required to protect it appropriately. Examples may include:

accounting or bookkeeping providers;
payment processing services;
customer record management systems;
email and communication tools;
IT support and data storage providers;
service administration or scheduling tools;
professional advisers such as insurers or legal advisers, where necessary.

We may also share data where required by law, to respond to lawful requests, or to protect our rights, customers, staff, and property. We do not sell personal data.

Where processors are used, we take reasonable steps to ensure that they provide sufficient guarantees regarding security, confidentiality, and compliance with data protection law. All processors are required to process data only for the agreed purpose and to keep it secure.

5. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, including to meet legal, accounting, and reporting requirements. Retention periods depend on the type of data and the reason for processing.

Customer and service records: retained for as long as needed to manage the customer relationship and service history.
Financial and invoice records: retained in line with tax and accounting obligations.
Correspondence and complaints: retained for a reasonable period to support service management and dispute resolution.
Marketing preferences: retained until you opt out or withdraw consent, where applicable.

When data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe manner. We regularly review the information we hold to ensure it is not kept longer than necessary.

6. Security of Personal Data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures may include access controls, secure storage, limited access permissions, and staff awareness procedures. While no system can be guaranteed to be completely secure, we take data protection seriously and continually review our safeguards.

7. Your Rights

Under UK data protection law, you have a number of rights regarding your personal data. These include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restrict processing: to ask us to limit how we use your data in certain situations.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to receive certain data in a structured, commonly used format.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

These rights are not absolute and may be subject to legal exceptions. We will respond to requests in line with applicable law and within the required timeframe.

8. Automated Decision-Making

We do not use personal data for automated decision-making that produces legal or similarly significant effects. If this position changes, we will update this policy and provide appropriate information about the process and your rights.

9. International Transfers

Where personal data is processed by a third-party service provider outside the United Kingdom, we will take steps to ensure suitable safeguards are in place. These may include approved contractual protections or other lawful transfer mechanisms designed to keep your data secure and protected.

10. Children’s Data

Our services are generally directed at adults responsible for property maintenance and gardening arrangements. We do not knowingly collect personal data from children unless it is incidental and necessary for service delivery. If we become aware that we have collected data without appropriate authorisation, we will take steps to delete it where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how personal data is used.

12. Summary of Key Principles

Gardeners Friern Barnet handles personal data responsibly, fairly, and lawfully. We collect only what is necessary, use it for clear business purposes, keep it only as long as needed, and share it only with trusted processors or where required by law. We respect the rights of our customers and are committed to keeping their information secure and confidential.

By engaging Gardeners Friern Barnet, customers in the area can expect their personal information to be managed in accordance with this Privacy Policy and applicable data protection law.