Privacy Policy - Gardeners Forest Gate

This Privacy Policy explains how Gardeners Forest Gate collects, uses, stores, shares, and protects personal data when providing gardening services to customers in the Forest Gate area. It applies to all Gardeners Forest Gate customers in the area, including residential, commercial, and one-off service users. We are committed to handling personal information fairly, transparently, and in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, making an enquiry, or communicating with us, you acknowledge that your personal information may be processed in accordance with this policy. We keep this notice clear and accessible so that every customer understands what data is collected, why it is collected, and what rights apply to them.

1. Information We Collect

Gardeners Forest Gate may collect personal data directly from you, from your use of our services, or from third parties where it is lawful and necessary. The type of information we collect depends on the service requested and how you interact with us.

Types of data collected

Identity data such as your name, title, and, where relevant, business name.
Contact data such as address, email address, telephone number, and preferred communication method.
Service data including details of your gardening requirements, property access notes, appointment preferences, and work history.
Transaction data such as payment status, invoices, and service records.
Technical data when you communicate electronically, such as device information, IP address, or browser data, if applicable to service administration.
Correspondence data including messages, requests, feedback, complaints, and notes from discussions.

We do not seek to collect more personal data than is necessary for the relevant purpose. Where we do collect sensitive information, we only do so when there is a clear lawful basis and a specific need, such as access requirements or information relevant to the safety of a site.

2. How We Use Personal Data

We use personal data to deliver our gardening services effectively, manage customer relationships, and meet legal and operational obligations. The exact use of data depends on the nature of the service and the way it is requested or delivered.

Purposes of processing

To provide quotations, schedule visits, and carry out gardening services.
To communicate with customers about bookings, changes, and service updates.
To maintain records of completed work, payments, and service history.
To respond to enquiries, complaints, and follow-up requests.
To manage business operations, quality control, and internal administration.
To comply with legal, tax, accounting, and regulatory obligations.
To protect against fraud, misuse, or unauthorised access.

We only use personal information for reasons that are compatible with the original purpose for which it was provided, unless we have a valid legal basis to use it differently. We also take care to ensure that any processing remains proportionate and relevant.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis before processing personal data. Gardeners Forest Gate relies on one or more of the following lawful bases depending on the situation:

Contract – processing is necessary to provide requested services, prepare quotations, arrange appointments, and fulfil our obligations to customers.
Legal obligation – processing is necessary to comply with tax, accounting, record-keeping, or other legal duties.
Legitimate interests – processing is necessary for the proper operation of our business, such as managing customer records, preventing fraud, improving service quality, and handling general business administration, provided these interests do not override your rights and freedoms.
Consent – where required, for example for certain optional communications or specific data uses. If we rely on consent, you may withdraw it at any time.

In some cases, we may process data to protect vital interests or to support legal claims. Where we rely on legitimate interests, we assess the impact on your privacy and take steps to minimise any risks.

4. Sharing Your Information and Processors

We may share personal data with trusted third parties who help us operate the business and deliver services. These organisations act as data processors when they process information on our behalf, and they are only permitted to use the data according to our instructions and applicable law.

Categories of processors

IT and cloud service providers used for secure storage, email, scheduling, and record management.
Accounting and bookkeeping providers used for invoicing, payments, and financial administration.
Payment service providers used to process card or electronic payments where applicable.
Communication service providers used for sending messages and managing customer correspondence.
Professional advisers such as legal or tax advisers, where necessary for compliance or business protection.

We require processors to have appropriate security measures in place and to process personal data only for agreed purposes. We do not sell personal data. We may also disclose information where required by law, court order, or public authority request, or to establish, exercise, or defend legal claims.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. Retention periods vary depending on the type of information and the nature of the service relationship.

Typical retention approach

Customer and service records are retained for the duration of the relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law, commonly several years after the end of the relevant tax period.
Enquiries and correspondence may be retained for a shorter period if no service is taken forward, unless needed for legal or operational reasons.
Complaint and dispute records may be retained longer where required to resolve issues or defend claims.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. If data is stored in backup systems, it will be deleted in line with our secure deletion cycle.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures are designed to reflect the nature of the data and the risks associated with processing it.

Security controls may include access restrictions, password protection, secure storage, staff confidentiality obligations, and careful management of any paper or electronic records. While no system can be guaranteed to be completely secure, we continually review our safeguards and seek to reduce the risk of data breaches.

7. International Transfers

If any personal data is transferred outside the UK, we will only do so where appropriate safeguards are in place and where the transfer complies with applicable data protection law. This may include the use of approved contractual protections or transfers to countries recognised as providing adequate protection.

8. Your Rights

As a data subject, you have a number of rights under UK GDPR. These rights help you understand and control how your personal information is used. Depending on the circumstances, you may be entitled to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete information.
Erase your personal data in certain circumstances.
Restrict how we process your data in certain cases.
Object to processing based on legitimate interests or direct marketing.
Data portability for data you provided to us where processing is based on consent or contract and carried out by automated means.
Withdraw consent where we rely on consent for processing.

You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been violated. Before doing so, we encourage you to raise any concerns so they can be reviewed and addressed appropriately.

9. Children’s Data

Our services are generally intended for adults. We do not knowingly collect personal data from children unless it is necessary in the context of a service request made by an adult customer and the information is relevant to the work being carried out. Where we become aware that data has been collected improperly, we will take appropriate steps to delete it or obtain the necessary authorisation.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our internal practices. Any revised version will apply from the date it is issued. We encourage customers to review this policy periodically so they remain informed about how personal data is handled.

Gardeners Forest Gate is committed to respecting privacy, handling personal data responsibly, and maintaining the trust of customers throughout the Forest Gate area. We process information only when we have a valid reason, keep it no longer than necessary, and safeguard it with appropriate care. This policy is intended to provide a clear and lawful basis for how we manage your personal information in connection with our gardening services.