Gardeners Downham Privacy Policy

This Privacy Policy explains how Gardeners Downham collects, uses, stores and protects personal data relating to our customers and prospective customers in the local Downham area and surrounding neighbourhoods. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act. This Privacy Policy applies to all Gardeners Downham customers in the area, whether you contact us online, by post or in person.

Who we are and scope of this policy

Gardeners Downham is a local gardening services provider offering garden maintenance, landscaping and related services to residential and commercial customers. For the purposes of data protection law, Gardeners Downham is the data controller for the personal data described in this Privacy Policy. This means we decide how and why your personal data is used and are responsible for ensuring it is handled lawfully.

Types of personal data we collect

We only collect personal data that is relevant to providing and managing our gardening services and running our business. The categories of data we may collect include:

Identification and contact details, such as your name, postal address, service address if different, and general location in the Downham area.

Communication details, such as the method you use to contact us and the content of your messages, enquiries or feedback.

Service and contract information, such as details of the gardening or landscaping services you request, site access information, visit notes, photos of areas of your garden that relate to work to be carried out, and records of quotes and invoices.

Payment and billing information, such as payment status, transaction records and billing history. We do not store full card details when payments are processed by third party payment providers.

Usage and preference information, such as your preferred service times, frequency of visits, and any specific instructions regarding your garden or property that are necessary to provide the service.

Technical information, where relevant, such as basic information about the device or platform you use to contact us online. We do not seek to identify you from this information unless it is necessary for security or fraud prevention.

How we collect your data

We collect personal data directly from you when you contact us for a quote, make a booking, enter into or manage a service contract, or communicate with us in any way. We may also collect information when you interact with us at your property during site visits.

We may receive limited personal data indirectly from third parties where it is necessary to provide our services, for example from payment processors that confirm a payment, or from platforms you use to request quotes or services, where you have chosen to share your details with us through those platforms.

Lawful basis for processing

Gardeners Downham will only process your personal data when we have a lawful basis to do so. Depending on the activity, we rely on one or more of the following lawful bases:

Contract: where processing your personal data is necessary to take steps at your request before entering into a contract, to provide gardening services, to manage your bookings, or to perform our obligations under a service agreement.

Legal obligation: where we need to retain certain information for tax, accounting, or other legal requirements, such as invoices and transaction records.

Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. This may include scheduling visits efficiently across the Downham area, responding to your enquiries, improving our services, maintaining security and preventing fraud.

Consent: in limited situations, we may ask for your consent, for example to send you certain types of direct marketing communications. Where we rely on consent, you can withdraw it at any time.

How we use your personal data

We use your personal data for the following purposes:

To provide and manage gardening and landscaping services, including assessing your requirements, issuing quotes, scheduling and carrying out work, and managing ongoing maintenance or seasonal services.

To communicate with you about your enquiries, bookings, appointments, service updates, feedback and any issues or complaints.

To manage our business operations, including maintaining records, accounting, budgeting, forecasting and internal reporting.

To improve and develop our services, including monitoring service quality and understanding customer preferences in the Downham area.

To comply with legal and regulatory obligations, such as maintaining financial records and responding to lawful requests from authorities.

To protect our rights, property and safety, and those of our customers and the public, including detecting and preventing fraud or misuse of our services.

Data sharing and processors

We do not sell your personal data. We only share it when this is necessary for the lawful purposes set out in this Privacy Policy, or when we are legally required to do so.

We may share your personal data with third party service providers who act as data processors on our behalf. These may include providers of payment processing services, accounting or invoicing systems, secure data storage and backup, and IT support. These processors are only permitted to process your data in accordance with our instructions and for the purposes described in this Privacy Policy, and they must implement appropriate security measures.

We may also share your data with professional advisers such as accountants or legal advisers where this is necessary for our legitimate interests and to comply with our legal obligations.

Where required by law, we may disclose personal data to public authorities or law enforcement agencies.

International transfers

Where any of our processors or service providers are located outside the United Kingdom or the European Economic Area, or use servers in other countries, we will ensure that appropriate safeguards are in place to protect your personal data. These safeguards may include reliance on adequacy regulations or the use of standard contractual clauses approved by relevant authorities.

Data retention

We keep your personal data only for as long as it is reasonably necessary for the purposes described in this Privacy Policy, and to meet legal, accounting or reporting requirements.

Service and contract records, including basic contact details, service details and invoices, are generally retained for a period that allows us to manage our relationship with you and to comply with tax and legal obligations.

Enquiry records and quote information are kept for a period that enables us to respond to your enquiry, follow up if appropriate, and understand demand for our services in the Downham area. If no contract is formed, we will not retain your data longer than necessary for these purposes.

When data is no longer required, we will delete it or anonymise it so that it can no longer be linked to you.

Security of your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures are proportionate to the nature of the data and the risks associated with processing it and may include restricted access, secure storage and appropriate staff procedures.

Your data protection rights

As a data subject, you have a number of rights concerning your personal data under data protection law. These rights apply to all Gardeners Downham customers in the area, subject to certain limitations and exemptions. You have the right to:

Access: request confirmation of whether we process your personal data and receive a copy of that data.

Rectification: ask us to correct or complete inaccurate or incomplete personal data.

Erasure: request deletion of your personal data where it is no longer needed, where you withdraw consent and there is no other lawful basis, or where your data has been unlawfully processed.

Restriction: ask us to restrict the processing of your personal data in certain circumstances, for example while we verify accuracy or consider an objection.

Objection: object to processing based on our legitimate interests, including certain types of direct marketing. We will stop processing unless we have compelling legitimate grounds that override your interests or where processing is required for legal claims.

Data portability: where processing is based on consent or contract and carried out by automated means, request that we provide your personal data in a structured, commonly used, machine readable format, or transfer it to another controller where technically feasible.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your data protection rights have been infringed.

Children

Our services are not specifically directed at children. We do not knowingly collect personal data from children without the involvement of a parent or guardian. If we become aware that we have inadvertently collected such data, we will take steps to delete it where appropriate.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. When we make changes, we will revise the date of the most recent version and make the updated policy available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.