Privacy Policy - Gardeners Emerson Park

This Privacy Policy explains how Gardeners Emerson Park collects, uses, stores, shares, and protects personal data. It applies to all Gardeners Emerson Park customers in the Emerson Park area, including prospective customers, active customers, and former customers who have used or enquired about our services. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK GDPR and the Data Protection Act 2018.

By using our services, requesting a quotation, making an enquiry, or entering into a service arrangement with us, you acknowledge that your personal data may be processed in accordance with this policy.

1. Who We Are

Gardeners Emerson Park provides gardening and outdoor maintenance services to customers in the Emerson Park area. For the purposes of data protection law, we act as a data controller when we decide why and how your personal data is processed. This means we are responsible for ensuring that your information is handled properly and that your rights are respected.

This policy applies to information we collect directly from you, information you provide when using our services, and limited information that may be obtained from third parties where lawful and necessary.

2. Personal Data We Collect

We collect only the data that is relevant and necessary for providing our services, managing customer relationships, handling billing, and meeting legal obligations. The categories of personal data we may process include:

Identity information, such as your name and title.
Contact information, such as your address, email address, and telephone number.
Service details, such as the type of gardening work requested, appointment preferences, property access notes, and service history.
Billing and payment information, such as invoice details, payment status, and transaction records.
Communication records, including emails, messages, and notes from phone conversations.
Technical information if you interact with our online systems, such as limited device or usage data where applicable.
Special category data only where strictly necessary and usually only if you choose to share it with us, for example information about access requirements or health considerations relevant to safe service delivery.

We do not intentionally collect unnecessary personal data. We also do not seek to collect sensitive information unless there is a clear operational or legal reason to do so and appropriate safeguards are in place.

3. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To deliver gardening services and manage appointments.
To maintain service records and customer preferences.
To issue invoices, process payments, and manage accounts.
To communicate important updates about services or arrangements.
To comply with legal, tax, accounting, or regulatory obligations.
To resolve disputes, handle complaints, and protect our legitimate interests.
To improve the quality, efficiency, and safety of our services.

We only process personal data for reasons that are compatible with the purposes for which it was collected. Where we wish to use data for a new purpose, we will ensure that a valid lawful basis applies.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Gardeners Emerson Park relies on the following lawful bases, depending on the situation:

Performance of a Contract

We process your data where it is necessary to enter into or perform a contract with you. This includes managing bookings, providing services, issuing invoices, and maintaining service records related to the agreement.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided that your rights and freedoms do not override those interests. Examples include improving service delivery, maintaining customer records, handling enquiries, and protecting against fraud or misuse. We always assess whether our legitimate interests justify the processing and limit the data used to what is necessary.

Legal Obligation

We may process and retain certain information because the law requires it, such as records needed for tax, accounting, or regulatory compliance.

Consent

Where consent is the lawful basis, we will ask for it clearly and specifically. You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Vital Interests and Public Interest

These bases will rarely apply to our everyday operations, but may be relevant in exceptional circumstances where data processing is necessary to protect someone’s life or safety, or where required for a task carried out in the public interest.

5. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, including meeting legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the context in which it is used.

Customer and service records are kept for the duration of the customer relationship and for a reasonable period afterwards.
Financial records are generally retained for the period required by tax and accounting law.
Communication records are kept for as long as needed to manage enquiries, service issues, or disputes.
Consent-based data is retained only until consent is withdrawn or the purpose ends.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. We apply appropriate retention controls to avoid holding information longer than necessary.

6. Processors and Sharing of Data

We may share personal data with trusted third-party service providers who act as processors on our behalf. These organisations only process data according to our instructions and are required to protect it appropriately.

Examples of processors may include:

IT and cloud service providers used to store or manage business data.
Accounting or bookkeeping providers used for invoicing, tax, and financial administration.
Communication service providers used to send messages or manage customer correspondence.
Payment-related providers used to support transaction processing, where applicable.

We may also disclose data where required by law, such as to public authorities, courts, or regulatory bodies. If a business transfer, restructuring, or similar event occurs, personal data may be transferred as part of that process, subject to appropriate safeguards.

Gardeners Emerson Park does not sell personal data.

7. Security of Personal Data

We take the security of your information seriously and use reasonable technical and organisational measures to protect it against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, limited data access, and staff awareness procedures.

While no system can be guaranteed 100% secure, we regularly review our safeguards to maintain an appropriate level of protection. If a personal data breach occurs and we are legally required to do so, we will take the necessary steps to notify the relevant authorities and, where appropriate, affected individuals.

8. Your Rights Under GDPR

You have a number of rights in relation to your personal data. These rights may be exercised free of charge, subject to legal limits and exemptions.

Right of access – You may request a copy of the personal data we hold about you.
Right to rectification – You may ask us to correct inaccurate or incomplete information.
Right to erasure – You may request deletion of your data in certain circumstances.
Right to restriction – You may ask us to limit the way we process your data in certain situations.
Right to data portability – You may request a copy of certain data in a structured, commonly used format.
Right to object – You may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – Where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been breached. We encourage you to raise any concerns with us first so that we can address them promptly and fairly.

9. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other approved legal mechanisms to protect your information to the required standard.

10. Cookies and Similar Technologies

If we use cookies or similar technologies in any digital service, they are used only where necessary or where permitted by law. Such technologies may support basic functionality, improve user experience, or help us understand how our services are used. Where consent is required, it will be requested in advance.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or the way we process personal data. Any revised version will apply from the date it is issued. We encourage customers in the Emerson Park area to review this policy periodically to stay informed about how their information is handled.

12. Summary of Our Commitment

Gardeners Emerson Park is committed to protecting privacy, processing personal data fairly, and using information only for legitimate and lawful purposes. We collect only what we need, retain it only for as long as necessary, use reliable processors under proper safeguards, and respect your GDPR rights at every stage. This policy applies to all customers of Gardeners Emerson Park in the area and is designed to ensure transparency, accountability, and trust.