Privacy Policy - Gardeners Malden Rushett

Gardeners Malden Rushett is committed to protecting the privacy and personal data of all customers in the Malden Rushett area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when we provide gardening services. It applies to all Gardeners Malden Rushett customers in the area, including current, former, and prospective customers who enquire about or receive our services.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We aim to keep your information safe, use it fairly and transparently, and ensure that only relevant data is collected for lawful business purposes.

1. Information We Collect

We may collect and process the following types of personal data when you contact us, request a quote, book a service, or use our gardening services:

Identity details such as your name or title.
Contact details such as your address, email address, and phone number.
Service information such as garden requirements, preferences, service history, and appointment notes.
Billing and transaction details where relevant to invoicing, payments, and record-keeping.
Communication records including messages, calls, complaints, feedback, and correspondence.
Technical information if you visit our digital services, such as IP address, browser type, and usage data, where applicable.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, or where another legal condition applies. We also avoid collecting more data than we need. In line with the principle of data minimisation, we only use information that is relevant to the service.

2. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To deliver gardening services and manage appointments.
To maintain service records and customer preferences.
To handle payments, billing, and administration.
To communicate about changes, updates, or service-related issues.
To deal with complaints, queries, and disputes.
To improve our services, quality control, and customer experience.
To comply with legal and regulatory obligations.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose. If we need to use your data for an unrelated purpose, we will explain the legal basis for doing so.

3. Lawful Basis for Processing

We process personal data only when we have a lawful basis under data protection law. Depending on the situation, we rely on one or more of the following:

Contract

We process your information when it is necessary to enter into or perform a contract with you. This includes providing quotes, carrying out garden work, managing bookings, and handling payments.

Legal Obligation

We may process and retain certain information to comply with legal obligations, such as tax, accounting, insurance, or record-keeping requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. This may include improving our services, maintaining business records, preventing fraud, and handling customer communications.

Consent

In some circumstances, we may rely on your consent, for example where you agree to certain forms of optional communication. When consent is used, you may withdraw it at any time.

Important: If we rely on consent, you have the right to withdraw it easily and at any time, without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing Your Information

We may share personal data with trusted third parties who help us deliver and manage our services. These recipients act as processors or, in some cases, independent controllers. We only share information when necessary and only under appropriate safeguards.

Processors We May Use

IT and hosting providers who support secure data storage and communication systems.
Payment service providers who process transactions and related payment data.
Accounting or bookkeeping processors who assist with invoicing, tax, and financial records.
Customer administration systems used to manage bookings, notes, and service records.
Professional advisers such as accountants or legal advisers where necessary.

All processors are required to handle personal data securely, use it only for permitted purposes, and comply with data protection obligations. We do not sell your personal data. We do not share your data for unrelated marketing by third parties.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. The exact retention period may vary depending on the type of data and the reason it was collected.

Customer service records are generally retained for the duration of the service relationship and for a reasonable period afterwards.
Financial records are retained for the period required by tax and accounting laws.
Correspondence and enquiry records may be retained for evidence of communication and service management.
Consent records are kept as long as needed to demonstrate compliance.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. We review retention regularly to ensure information is not kept for longer than necessary.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, restricted permissions, and staff confidentiality obligations.

While we work to protect your information, no system is completely secure. If we become aware of a personal data breach that affects your rights and freedoms, we will deal with it in line with legal requirements and take appropriate steps to reduce the impact.

7. Your Rights

Under data protection law, you have several rights regarding your personal data. These rights may apply in different circumstances and may be subject to legal exceptions.

Right of access - you may request a copy of the personal data we hold about you.
Right to rectification - you may ask us to correct inaccurate or incomplete data.
Right to erasure - you may request deletion of your data in certain cases.
Right to restriction - you may ask us to limit how we use your data in certain situations.
Right to object - you may object to processing based on legitimate interests or direct marketing.
Right to data portability - you may request that certain data be provided to you or another organisation in a structured format.
Right to withdraw consent - where consent is the lawful basis, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We will respond within the time limits required by law, usually within one month, unless the request is complex.

8. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place. These may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms. Any transfer will be carried out in a way that seeks to protect your rights and maintain a comparable level of data security.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, service practices, or data handling arrangements. Any updated version will apply from the date it is published. We encourage customers to review this policy periodically so they remain informed about how their personal data is used.

10. Fair Processing Commitment

Gardeners Malden Rushett is committed to processing personal data in a fair, lawful, and transparent manner. We respect your privacy and recognise the importance of handling information responsibly. We will only collect data that is relevant, retain it only for as long as needed, and use trusted processors who are bound by appropriate obligations.

By using our services, you acknowledge that your personal data may be processed as described in this policy. If you wish to exercise your rights or have concerns about the way your data is handled, you are entitled to raise the matter under applicable data protection law.

Summary of Our Privacy Principles

Transparency: we explain clearly how data is used.
Purpose limitation: we use data only for legitimate service purposes.
Security: we protect data with appropriate safeguards.
Retention control: we keep data only as long as needed.
Choice and rights: you can access, correct, or request deletion of your information where applicable.

This Privacy Policy is intended to support lawful, careful, and respectful handling of customer information for all Gardeners Malden Rushett customers in the area.