Privacy Policy - Gardeners Northolt

Gardeners Northolt is committed to protecting the privacy and personal data of all customers in the Northolt area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when we provide gardening services. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Gardeners Northolt customers in the area, including prospective customers, current customers, and individuals who have previously used our services. By using our services, making an enquiry, or interacting with us, you acknowledge the practices described in this policy.

1. Who We Are

Gardeners Northolt provides gardening and outdoor maintenance services to households, landlords, businesses, and other clients in Northolt and nearby locations. In the context of data protection law, we act as the data controller for the personal data we collect and use for our own business purposes.

We take data privacy seriously and only process personal data that is necessary, relevant, and handled fairly. We also require any third parties who support our operations to meet appropriate standards of confidentiality and security.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity details such as your name and title
Contact details including address, email address, and telephone number
Service information such as the type of gardening work requested, property details, service preferences, and scheduling information
Payment information such as transaction records and billing details
Communication records including messages, enquiry notes, complaint details, and feedback
Technical data where relevant, such as basic website usage information if you interact with our online services
Legal or compliance information needed for contracts, invoicing, tax, or dispute resolution

We do not intentionally collect special category data unless it is strictly necessary and you have chosen to provide it, or we are legally required to do so. Where such data is processed, we will apply additional safeguards.

3. How We Collect Personal Data

We collect personal data directly from you when you:

request a quote or make an enquiry
book or amend a service
communicate with us by phone, email, or other means
provide feedback or make a complaint
enter into a service agreement or pay for services

We may also receive limited information from third parties where necessary for service delivery, administration, or legal obligations. For example, this may include contact details from a property manager, landlord, or representative acting on your behalf.

4. Purposes of Processing

We use personal data for the following purposes:

to respond to enquiries and provide quotes
to deliver gardening and maintenance services
to manage bookings, schedules, and service delivery
to process payments and issue records of transactions
to communicate with customers about appointments or service updates
to maintain internal records and business administration
to handle complaints, claims, and customer care matters
to comply with tax, accounting, legal, and regulatory duties
to protect our business, staff, and customers against fraud, misuse, or unlawful activity

We only use personal data for the purposes for which it was collected, unless we reasonably determine that another compatible purpose applies under data protection law.

5. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis to process personal data. Depending on the context, Gardeners Northolt relies on one or more of the following lawful bases:

Contract – when processing is necessary to provide services, manage bookings, or fulfil an agreement with you
Legitimate interests – when processing is necessary for our business operations, customer service, record keeping, or service improvement, provided your rights do not override those interests
Legal obligation – when we must keep records or share information to comply with applicable laws, including tax and accounting rules
Consent – when we rely on your clear permission for a specific activity, such as optional communications where consent is required

Where we rely on legitimate interests, we assess whether the processing is necessary and proportionate, and we consider your reasonable expectations and privacy rights.

6. Data Sharing and Processors

We may share personal data with carefully selected third parties who support our operations. These parties act as processors when they handle data on our behalf and under our instructions. Examples may include:

payment service providers
accounting and bookkeeping providers
IT and cloud storage service providers
administrative systems and communication tools
professional advisers such as legal or financial advisers

We may also disclose personal data where necessary to comply with the law, enforce agreements, protect our rights, or respond to lawful requests from public authorities.

All processors are required to handle personal data securely, only for specified purposes, and in accordance with data protection law. We aim to ensure that appropriate contractual and technical safeguards are in place before any processor is engaged.

7. International Transfers

If any processor or service provider stores or accesses data outside the United Kingdom, we will take steps to ensure that suitable safeguards are in place. These may include approved contractual protections and other legally recognised transfer mechanisms designed to protect your personal data.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods may vary depending on the type of data and the reason it is held.

In general, we keep:

customer and service records for as long as needed to manage the service relationship and handle follow-up matters
financial and transaction records for the periods required by tax and accounting law
complaint or dispute records for as long as necessary to resolve issues and protect our legal position
consent-based records until consent is withdrawn or the information is no longer required

When personal data is no longer required, we will securely delete, anonymise, or archive it in line with our retention practices.

9. Data Security

We use appropriate technical and organisational measures to help protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality expectations, and regular review of processing practices.

Although no method of transmission or storage is completely secure, we work to reduce risks and maintain a responsible approach to data protection.

10. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These may include:

The right of access – to request a copy of the personal data we hold about you
The right to rectification – to ask us to correct inaccurate or incomplete information
The right to erasure – to request deletion of personal data in certain circumstances
The right to restriction – to request limited processing in certain situations
The right to object – to object to processing based on legitimate interests or direct marketing
The right to data portability – to request transfer of certain data in a structured, commonly used format where applicable
The right to withdraw consent – where we rely on consent, you may withdraw it at any time

You also have the right to make a complaint to the Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to raise any concern with us first so we can try to resolve it promptly and fairly.

11. Automated Decision-Making

We do not use personal data for automated decision-making that produces legal or similarly significant effects without human involvement. If this position changes, we will update this policy and provide appropriate information about the process.

12. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is necessary for a service arrangement and provided by a parent, guardian, or authorised adult. Where relevant, we will process such data carefully and only for legitimate service-related purposes.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any revised version will apply from the date it is published or otherwise communicated. We recommend reviewing this policy periodically so you remain informed about how your information is used.

14. Summary of Our Commitment

Gardeners Northolt only collects personal data that is needed for legitimate service, business, and legal purposes. We use clear lawful bases, limit retention, work with trusted processors, and respect your rights. This policy applies to all Gardeners Northolt customers in the area, and we aim to handle every customer’s data with fairness, transparency, and care.