Privacy Policy - Gardeners Wembley

Gardeners Wembley is committed to protecting the privacy of all customers and website visitors in the Wembley area. This Privacy Policy explains how personal data is collected, used, shared, stored, and protected when you use our gardening services. It applies to all Gardeners Wembley customers in the area, including residential and commercial clients, and it is designed to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We believe privacy should be clear, fair, and transparent. This policy sets out what information we collect, why we collect it, the legal reasons we rely on to process it, how long we keep it, the third parties that may handle it on our behalf, and the rights available to you as a data subject. By using our services, you acknowledge that we may process your personal data in accordance with this policy.

1. Who We Are

Gardeners Wembley provides gardening and related outdoor property services to customers in Wembley and the surrounding area. For the purposes of data protection law, we act as the data controller for the personal information we collect and use for our own business purposes. This means we decide how and why your personal data is processed when you request a quote, book a service, receive a service, or communicate with us.

This policy covers all customer interactions, whether they are made in person, by phone, by email, through online forms, or through any other lawful communication method used by Gardeners Wembley.

2. Information We Collect

We collect only the information necessary to provide services, manage our business, and comply with legal obligations. The types of data we may collect include:

Identity data: name, title, and any relevant account or customer reference information.
Contact data: address, phone number, email address, and service location details.
Service data: details of requested gardening work, service history, job notes, site access instructions, and preferences.
Payment data: payment status, billing records, and limited transaction details needed for invoicing and accounting.
Communication data: messages, queries, complaints, feedback, and correspondence with our team.
Technical data: basic device and usage information where collected through digital systems, such as IP address or browser-related information used for security and service improvement.

We do not intentionally collect special category data unless it is strictly necessary and permitted by law. Special category data includes information such as health details, racial or ethnic origin, religious beliefs, or other sensitive personal information. If such data is ever provided to us incidentally, it will be handled with additional care and only where lawful grounds exist.

3. How We Use Your Data

We use personal data for the following purposes:

to provide quotes and arrange gardening services;
to carry out contracted work at the correct property;
to manage bookings, schedules, and customer records;
to issue invoices and process payments;
to handle complaints, disputes, and customer support requests;
to maintain security, prevent fraud, and protect our business;
to meet accounting, tax, and legal record-keeping obligations;
to improve our services, training, and operational efficiency;
to send service-related updates where appropriate and necessary.

We process data only for specified and legitimate purposes. We do not sell your personal information.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the context, Gardeners Wembley relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, confirming bookings, completing gardening services, issuing invoices, and communicating about the work.

Legal Obligation

We may process and retain certain information to comply with legal duties, such as tax, accounting, insurance, and record-keeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. Examples include managing our business, maintaining customer records, preventing fraud, improving our services, and safeguarding our premises and staff. We always assess the impact of such processing carefully.

Consent

In limited cases, we may rely on your consent, for example where it is appropriate to use certain optional communication preferences. If we rely on consent, you have the right to withdraw it at any time.

5. Data Sharing and Processors

We may share your personal data with trusted third parties only where necessary and only to the extent required for business operations, legal compliance, or service delivery. These third parties may act as processors or independent controllers depending on the circumstances.

Examples of processors and service providers may include:

IT and hosting providers: for secure data storage, email services, and system maintenance;
accounting and bookkeeping providers: for financial administration, tax compliance, and invoicing;
payment service providers: for handling transactions and preventing payment fraud;
customer management software providers: for scheduling, record keeping, and service administration;
professional advisers: such as insurers, auditors, or legal advisers where necessary;
delivery or subcontracted service partners: where needed to complete parts of a gardening service on our behalf.

All processors are selected carefully and are expected to protect personal data, use it only for specified purposes, and comply with applicable data protection law. Where personal data is shared with an independent controller, such as a regulator or law enforcement body, that organisation will be responsible for its own lawful use of the data.

We may also disclose personal data if required by law, court order, or lawful request from a public authority. Any sharing is limited to what is necessary and proportionate.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods vary depending on the type of data and the reason it was collected.

As a general rule:

customer and service records are retained for the duration of the customer relationship and for a reasonable period afterwards;
financial and tax records are retained for the period required by law;
enquiry records are kept only as long as needed to respond and manage follow-up;
complaint or dispute records may be retained longer where needed to resolve issues or defend legal claims.

When data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention procedures. We apply retention limits to reduce unnecessary storage of personal information.

7. Data Security

We take reasonable and appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff training, and restricted permissions.

Although no system can be guaranteed as completely secure, we work to maintain a level of protection appropriate to the nature of the data we process and the risks involved. Where appropriate, we also review our systems and processes to help improve data security over time.

8. International Transfers

If any personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place in accordance with data protection law. This may include using approved contractual protections or ensuring the recipient country provides an adequate level of protection.

9. Your Rights

As a data subject, you have rights over your personal data. Depending on the legal basis for processing and the circumstances, these rights may include:

the right to be informed about how your data is used;
the right of access to request a copy of the personal data we hold about you;
the right to rectification to correct inaccurate or incomplete data;
the right to erasure in certain situations, also known as the right to be forgotten;
the right to restrict processing in specific circumstances;
the right to object to processing based on legitimate interests or direct marketing;
the right to data portability where processing is based on consent or contract and carried out by automated means;
the right to withdraw consent where consent is used as the lawful basis;
rights related to automated decision-making where applicable, although we do not normally use such processes.

We will respond to valid requests in accordance with applicable legal requirements. In some cases, we may need to verify your identity before fulfilling a request. We may also refuse or limit requests where the law permits us to do so.

10. Children’s Privacy

Our services are intended for adult customers and property owners or occupiers. We do not knowingly collect personal data from children for marketing or service administration. If we become aware that a child’s data has been collected without appropriate lawful basis, we will take reasonable steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service operations. When we make significant changes, we will revise the policy accordingly. We encourage customers to review this page periodically so they remain informed about how their data is handled.

12. Summary of Our Commitment

Gardeners Wembley respects your privacy and processes personal information responsibly. We collect only what we need, use it for clear and lawful purposes, limit access to trusted processors, retain it for appropriate periods, and protect your rights under data protection law. This policy applies to all Gardeners Wembley customers in the area and forms part of our commitment to fair, transparent, and compliant data handling.

Last updated: This policy should be read together with any service terms or privacy notices provided at the time of booking or enquiry.