Privacy Policy - Gardeners North Finchley

This Privacy Policy explains how Gardeners North Finchley collects, uses, stores, shares, and protects personal data for all Gardeners North Finchley customers in the area. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to customers, prospective customers, and individuals who interact with our gardening services in North Finchley and the surrounding area. By using our services, requesting a quotation, making an enquiry, or otherwise engaging with us, you acknowledge that your information may be processed as described below.

1. Who We Are

For the purposes of data protection law, Gardeners North Finchley is the data controller for the personal data covered by this policy. This means we decide how and why personal data is processed in connection with our gardening services, customer administration, and service operations.

We take privacy seriously and aim to keep the information we hold accurate, relevant, and limited to what is necessary. We only use personal data for legitimate business purposes connected to our services and our legal obligations.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity information: name, title, and any information needed to confirm who you are.
Contact information: address, email address, telephone number, and service location details.
Service information: details about the gardening services requested, quoted for, provided, or discussed.
Communication records: correspondence, enquiries, instructions, feedback, complaints, and notes from conversations.
Billing and transaction information: payment records, invoices, payment status, and related administration.
Property and access information: details necessary to carry out work safely and efficiently, such as gate access, preferred access arrangements, or site-specific instructions.
Technical information: limited information collected through digital communications, such as device or browser data, where applicable.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily or we are legally required to process it. If such data is ever needed, we will ensure an appropriate lawful basis exists and that additional safeguards are in place.

3. How We Collect Data

We collect personal data in several ways:

Directly from you when you enquire about our services, request a quote, or provide instructions.
When you enter into a service arrangement with us.
Through messages, emails, written notes, or verbal communication relating to your service.
From third parties where necessary for service delivery, billing, or legal compliance.

We aim to keep collection limited to what is needed for proper service provision and administrative purposes. Data minimisation is a key principle in our handling of personal information.

4. Lawful Basis for Processing

We process personal data only when we have a lawful basis under UK GDPR. Depending on the circumstance, our lawful bases may include:

Contract: where processing is necessary to provide a quotation, arrange services, fulfil a service agreement, or manage customer account matters.
Legal obligation: where we must retain records for tax, accounting, insurance, or compliance purposes.
Legitimate interests: where processing is necessary for the running of our business, improving services, handling enquiries, managing records, and protecting against fraud or misuse, provided your rights do not override those interests.
Consent: where we rely on your permission for certain optional uses of data. You may withdraw consent at any time where consent is the lawful basis.

We do not rely on a lawful basis unless it is appropriate and necessary for the specific processing activity. If the basis changes, we will update our practices accordingly.

5. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange, deliver, and manage gardening services.
To communicate with you about appointments, updates, and service-related matters.
To maintain accurate business and customer records.
To process payments and manage invoices.
To comply with legal, accounting, and regulatory duties.
To improve our service quality, administration, and customer experience.
To resolve disputes, complaints, or service concerns.

We will not use your personal data for unrelated purposes without first ensuring that a valid lawful basis exists and, where needed, that you have been properly informed.

6. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods may vary depending on the type of record and the reason for processing.

In general:

Customer service records are kept for the duration of the service relationship and for a reasonable period afterwards.
Financial and tax-related records are retained for the period required by applicable law.
Communication records may be retained where needed to manage ongoing customer relationships, resolve disputes, or maintain accurate business records.
Where data is no longer required, it is securely deleted or anonymised.

We review retained data periodically to ensure it remains necessary and relevant. We do not keep personal data indefinitely without reason.

7. Processors and Data Sharing

We may share personal data with trusted third-party processors who help us operate our business and deliver services. These processors only act on our instructions and are required to protect your data in accordance with data protection law.

Examples of processors may include:

Administrative service providers.
Accounting or bookkeeping services.
Payment processing providers.
IT support and data storage providers.
Communication and record management services.

We may also disclose personal data where required by law, court order, regulatory request, or to protect our legal rights. When sharing information, we take reasonable steps to ensure it is limited, secure, and relevant to the purpose of disclosure.

Where any processor handles personal data on our behalf, we use appropriate contractual and technical safeguards to help keep your information safe and properly managed.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, accidental disclosure, alteration, or destruction. These measures are designed to reflect the nature of the data and the risks involved.

While no system can be guaranteed 100% secure, we take reasonable and proportionate steps to reduce risk. Access to personal data is limited to individuals who need it for legitimate business purposes.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to conditions or exceptions depending on the circumstances.

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: you can request deletion of your data in certain situations.
Right to restrict processing: you can ask us to limit how we use your data in certain cases.
Right to object: you can object to processing based on legitimate interests, and to direct marketing where applicable.
Right to data portability: you can request transfer of certain data to you or another provider, where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law. We may need to verify your identity before fulfilling certain requests to protect your information.

10. International Transfers

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place. This may include relying on adequacy regulations or approved contractual protections. Any such transfer will be handled in a way that preserves the security and lawful treatment of your information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any revised version will apply from the date it is issued. We encourage you to review this policy periodically to stay informed about how we handle personal data.

12. Summary of Our Commitment

Gardeners North Finchley is committed to handling personal data responsibly, transparently, and securely. We only collect what we need, use it for clear and lawful purposes, keep it only as long as necessary, and respect your rights under data protection law.

This policy applies to all Gardeners North Finchley customers in area. By working with us, you can expect your information to be handled with care, confidentiality, and respect for your privacy.