Privacy Policy - Gardeners Sydenham

This Privacy Policy explains how Gardeners Sydenham collects, uses, stores, and protects personal data. It applies to all Gardeners Sydenham customers in the area, including current, prospective, and former customers, as well as individuals who enquire about our gardening services. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We may collect personal data directly from you when you request a quote, book a service, make an enquiry, or communicate with us. The information we collect may include:

Identity details such as your name.
Contact information such as your telephone number, email address, and service address.
Service information relating to the gardening work requested, preferences, access details, and scheduling requirements.
Billing and payment details where needed to process invoices and payments.
Communication records including messages, notes from calls, and service feedback.
Technical data such as basic website usage information if you interact with online forms or digital services.

We may also receive data from third parties where you have authorised them to share it with us, or where it is necessary to complete the service you have requested. For example, this may include property management contacts, referral partners, or payment providers.

2. How We Use Your Data

We use personal data only where we have a valid legal basis to do so. The main purposes for which we process data are:

to respond to enquiries and provide quotations;
to arrange and deliver gardening services;
to manage bookings, scheduling, and job administration;
to issue invoices, receive payment, and maintain financial records;
to communicate about service updates, changes, or follow-up matters;
to handle complaints, feedback, or service concerns;
to improve our services and maintain internal records;
to meet legal, accounting, and regulatory obligations.

We do not use your personal information for unrelated purposes without informing you and, where required, obtaining permission or relying on another lawful basis.

3. Lawful Basis for Processing

Under data protection law, we must identify a lawful basis before processing personal data. Gardeners Sydenham relies on the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing a quote, confirming a booking, carrying out gardening work, and managing payment.

Legal Obligation

We may process and retain certain records to comply with legal and tax requirements, including bookkeeping and accounting duties.

Legitimate Interests

We may process data where it is reasonably necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include maintaining service records, improving customer service, preventing fraud, and managing operational matters.

Consent

In limited situations, we may rely on your consent, particularly where we need to send optional marketing messages or process information beyond the scope of a contract. If consent is used, you may withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties who act as data processors on our behalf. These processors are only permitted to use your information under our instructions and must apply appropriate security measures. Examples may include:

payment service providers;
accounting or bookkeeping software providers;
IT and cloud storage providers;
email and communication tools;
administrative support services;
subcontractors assisting with gardening work, where necessary for service delivery.

We may also disclose information where required by law, such as to public authorities, regulators, or law enforcement agencies. Any sharing will be limited to what is necessary and proportionate.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods depend on the type of information and the reason for processing.

In general:

Customer and service records may be retained for the duration of the business relationship and for a reasonable period afterwards.
Financial and tax records are usually retained for the period required by law.
Enquiry data may be kept for a limited time if no service is booked.
Marketing consent records are retained until consent is withdrawn or no longer needed.

When data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a safe and lawful manner.

6. Data Security

We take the security of personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures may include restricted access, secure storage, password protection, and careful management of digital records.

While no system can be guaranteed to be completely secure, we take reasonable steps to reduce risks and review our practices regularly.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to legal limits, these include the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete data;
erase your data in certain circumstances;
restrict how we process your data;
object to processing based on legitimate interests;
data portability for information you provided to us in a structured format, where applicable;
withdraw consent where processing relies on consent.

You also have the right to raise a concern with the Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to contact us first so that we can try to resolve any issue promptly and fairly.

8. Cookies and Online Data

If you use an online form or digital service associated with Gardeners Sydenham, limited technical data may be collected automatically for security, functionality, and performance purposes. This may include device information, browser type, and basic usage data. Where cookies or similar technologies are used, they will be handled in accordance with applicable law and any required preferences or permissions.

9. Children’s Data

Our services are intended for adults and property-related customers. We do not knowingly collect personal data from children in the ordinary course of business. If we become aware that such data has been collected without appropriate authorisation, we will take steps to delete it as soon as reasonably practicable.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We recommend reviewing this policy periodically to stay informed about how your data is handled.

11. Summary of Our Commitment

Gardeners Sydenham respects your privacy and handles personal data with care, transparency, and responsibility. We collect only the information needed to provide and improve our services, use it on a valid lawful basis, share it only with appropriate processors or where legally required, and retain it only for as long as necessary. Our approach is designed to protect your rights while supporting reliable and professional gardening services for customers throughout the area.