Privacy Policy - Gardeners Shacklewell

Gardeners Shacklewell is committed to protecting the privacy and personal data of our customers, prospective customers, suppliers, and website visitors. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable privacy laws.

This policy applies to all Gardeners Shacklewell customers in area, including anyone who requests, receives, or enquires about our gardening services. By engaging with our services, you acknowledge the practices described in this policy.

1. Data We Collect

We only collect personal data that is necessary for operating our services, responding to enquiries, managing appointments, and meeting legal obligations. The categories of information we may collect include:

Identity details such as your name.
Contact details such as your address, email address, and telephone number.
Service information such as property access notes, gardening preferences, service history, and job instructions.
Payment information such as billing records and payment status. We do not store card details unless handled securely by a payment processor.
Communications such as messages, feedback, complaints, and enquiries you send to us.
Technical data such as IP address, browser type, and device information where applicable for security or website functionality.
Marketing preferences where you have chosen to receive updates or promotions.

We do not intentionally collect special category data unless you provide it voluntarily and it is necessary for a specific service or legal purpose. Where such information is received, we apply additional safeguards.

2. How We Use Personal Data

We use your information to deliver reliable, professional gardening services and to support our business operations. Common uses include:

Providing quotes and managing bookings.
Delivering gardening services and maintaining service records.
Communicating about appointments, changes, or service updates.
Processing invoices, payments, refunds, and account records.
Responding to questions, complaints, and customer support requests.
Meeting tax, accounting, and regulatory obligations.
Protecting our services, staff, and customers from fraud or misuse.
Improving service quality and planning future work.

We only use your personal data for the purposes for which it was collected, unless we reasonably determine that we need to use it for another compatible purpose and the law allows it.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Gardeners Shacklewell relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing a quotation, scheduling work, delivering services, and managing payment arrangements.

Legal Obligation

We may process personal data where needed to comply with legal duties, such as accounting, tax, record-keeping, and responding to lawful requests from authorities.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing service records, preventing fraud, improving operations, and maintaining security. Where we rely on legitimate interests, we take care to limit the impact on privacy.

Consent

Where required, we may ask for your consent, particularly for certain marketing communications or optional processing activities. If processing is based on consent, you can withdraw that consent at any time.

4. Sharing and Processors

We may share personal data only when necessary and only with trusted third parties that support our services. These parties act either as processors or as independent data controllers depending on the service they provide.

Examples of processors and service providers may include:

IT and hosting providers that store or secure records.
Accounting and bookkeeping providers that assist with invoicing and tax compliance.
Payment processors that handle secure payment transactions.
Customer management software providers that help schedule and track services.
Professional advisers such as auditors, insurers, or legal advisers where necessary.

All processors are required to act under written contracts, process data only on our instructions, and implement appropriate security measures. We do not sell personal data.

In limited situations, we may disclose personal data if required by law, to protect our rights, or to prevent serious harm or unlawful activity.

5. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, including for legal, accounting, or reporting requirements. Retention periods depend on the type of information and the reason for processing.

Customer service records are retained for the period needed to manage the relationship and resolve disputes.
Financial and accounting records are retained for the period required by tax and accounting law.
Communication records are retained for a reasonable period to support service continuity and customer support.
Marketing data is retained until you opt out or withdraw consent.

When data is no longer required, we delete it securely or anonymise it so it can no longer identify you.

6. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and careful management of third-party systems.

While we work hard to protect your data, no system can be guaranteed to be completely secure. If a personal data breach occurs, we will assess it promptly and take the action required by law.

7. Your Rights

Depending on the circumstances and the legal basis for processing, you may have the following rights under data protection law:

Right of access to request a copy of the personal data we hold about you.
Right to rectification to ask us to correct inaccurate or incomplete data.
Right to erasure in certain circumstances, sometimes known as the right to be forgotten.
Right to restriction to request limited use of your data in certain situations.
Right to object to processing based on legitimate interests or direct marketing.
Right to data portability where processing is based on consent or contract and carried out by automated means.
Right to withdraw consent at any time where consent is the basis for processing.

To exercise these rights, you may submit a request through the appropriate channels we provide in our service communications. We may need to verify your identity before responding. We will respond within the time limits required by law unless an extension is permitted.

8. Marketing Preferences

If you receive optional marketing messages from us, you may opt out at any time. We will respect your preferences and stop sending promotional communications where you have objected or withdrawn consent. Service-related messages that are necessary for the delivery of our services may still be sent.

9. International Transfers

Where personal data is processed outside the UK, we take steps to ensure an adequate level of protection. This may involve using approved contractual safeguards or transferring data only to countries with appropriate data protection standards.

10. Children’s Data

Our services are intended for adults and property-related customers. We do not knowingly collect personal data from children unless it is necessary in exceptional circumstances and with appropriate legal basis and safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. The revised version will apply from the date it is published or otherwise communicated. We encourage you to review this policy periodically so you remain informed about how your information is used.

12. Summary of Our Commitment

Gardeners Shacklewell handles personal data responsibly, transparently, and only for lawful purposes. We collect only what we need, keep it secure, share it carefully with trusted processors, and retain it only for as long as necessary. Most importantly, we respect your rights and aim to ensure that all Gardeners Shacklewell customers in area receive fair, lawful, and privacy-conscious service.

By using our services, you can expect your information to be treated with care, confidentiality, and respect.