Privacy Policy - Gardeners Downham

Gardeners Downham is committed to protecting the privacy and personal data of every customer and prospective customer in the Downham area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK GDPR and the Data Protection Act 2018. It applies to all Gardeners Downham customers in the area, including individuals who enquire about our services, request quotations, book appointments, or receive ongoing garden maintenance.

We aim to be clear and transparent about our data practices. This policy sets out what information we collect, the lawful bases we rely on, how long we keep information, the third parties who may process data on our behalf, and the rights available to you under data protection law.

1. Who We Are

Gardeners Downham provides gardening and outdoor maintenance services to local customers in and around Downham. For the purposes of data protection law, we act as the data controller for the personal data we collect and use in the course of providing our services, handling enquiries, managing customer relationships, and fulfilling legal obligations.

This means we decide why and how your personal data is processed. We take our responsibilities seriously and only use personal data where we have a valid legal basis to do so.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for our services. The information we may collect includes:

Identity details such as your name and title
Contact details such as address, email address, and telephone number
Service details including the type of gardening work requested, property access notes, and service preferences
Quotation and booking information such as appointment dates, job instructions, and estimates
Billing and payment information where needed to process invoices or payments
Communication records including emails, messages, notes from calls, and customer feedback
Technical data if you contact us online, such as IP address or device-related information where relevant for security and administration

We do not intentionally collect special category data unless it is absolutely necessary and you have provided it voluntarily, or unless we are required to process it for a specific legal reason. If such information is ever needed, we will handle it in line with data protection law and appropriate safeguards.

3. How We Use Your Data

Gardeners Downham uses personal data for the following purposes:

To respond to enquiries and provide quotations
To manage bookings and deliver gardening services
To communicate about appointments, changes, or service updates
To issue invoices, receive payments, and maintain financial records
To keep internal records of services provided
To improve the quality and efficiency of our services
To handle complaints, disputes, or insurance matters
To comply with legal, regulatory, and tax obligations
To protect our business, staff, and customers from fraud or misuse

We use personal data only for legitimate service-related purposes and do not sell customer data to third parties.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for every use of personal data. Gardeners Downham may rely on the following lawful bases:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes providing a quotation, scheduling work, carrying out garden services, and processing payment.

Legal Obligation

We may process personal data when required to meet legal responsibilities, such as maintaining tax records, accounting records, or responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is in our legitimate interests to do so and where those interests are not overridden by your rights and freedoms. This may include record keeping, service improvement, business administration, fraud prevention, and communication about existing services.

Consent

In limited cases, we may rely on your consent, for example where it is needed for optional marketing or for the processing of certain information you choose to provide. Where consent is used, you may withdraw it at any time.

We always consider the nature of the data, the purpose of processing, and the impact on you before deciding which lawful basis applies.

5. How We Share Personal Data

We only share personal data where necessary and appropriate. Gardeners Downham may use trusted third-party processors to support our operations. These may include:

Payment providers who help process customer payments securely
Accounting or bookkeeping services used for financial administration and tax compliance
IT and cloud storage providers that support secure storage and communication systems
Communication service providers that help us send emails or manage customer correspondence
Scheduling or administrative tools used to organise appointments and work records

These processors act only on our instructions and are required to protect your data, keep it confidential, and use it only for the purposes we specify. We do not allow them to use personal data for their own unrelated purposes.

We may also disclose data if required by law, to enforce our legal rights, or to protect the safety, rights, or property of our customers, staff, or business.

6. International Transfers

Where personal data is transferred outside the UK, we will take appropriate steps to ensure that it remains protected. This may include using approved safeguards such as adequacy regulations, standard contractual clauses, or equivalent legal mechanisms. We only use service providers that provide appropriate security and compliance standards.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected. Retention periods depend on the type of data and the reason it is held. In general:

Customer enquiry data may be kept for a limited period if no service is booked
Service and job records may be kept while the customer relationship remains active and for a reasonable period afterwards
Financial and tax records are retained for the period required by law
Communication records are retained as needed to resolve queries, complaints, or disputes

When data is no longer needed, we will securely delete it or anonymise it so that it can no longer be linked to you.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, careful record handling, and limiting access to data on a need-to-know basis.

Although no system can be guaranteed completely secure, we take reasonable steps to reduce risk and to respond quickly if a security issue occurs.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These include:

The right to be informed about how your data is used
The right of access to request a copy of the personal data we hold about you
The right to rectification to correct inaccurate or incomplete information
The right to erasure in certain circumstances, sometimes called the “right to be forgotten”
The right to restrict processing in certain situations
The right to object to processing based on legitimate interests or direct marketing
The right to data portability where applicable
The right to withdraw consent where processing is based on consent

To exercise your rights, you may need to provide sufficient information to verify your identity. We will respond within the time limits required by law and will do our best to address your request fairly and promptly.

Please note that some rights may not apply in every situation, for example where we must keep data to comply with a legal obligation or to establish, exercise, or defend legal claims.

10. Complaints

If you are concerned about how your data has been handled, we encourage you to raise the issue so it can be reviewed. You also have the right to lodge a complaint with the UK data protection authority if you believe your rights have been infringed.

We value privacy and will take complaints seriously, investigating them carefully and working to resolve issues in a timely manner.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updates will take effect when published. We encourage customers to review the policy periodically to stay informed about how their information is handled.

12. Scope of This Policy

This Privacy Policy applies to all Gardeners Downham customers in the area, including residential and commercial clients, one-time service users, regular maintenance customers, and anyone who contacts us regarding our gardening services. By using our services, you acknowledge that your personal data may be processed in line with this policy and applicable law.

We believe privacy should be handled with care, clarity, and respect. Gardeners Downham is committed to using personal data responsibly so that customers can feel confident when arranging services with us. We only process what is needed, keep it secure, and retain it for no longer than necessary.