Privacy Policy - Gardeners Goodmayes

Gardeners Goodmayes is committed to protecting the privacy and personal data of every customer in the Goodmayes area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in connection with our gardening services. It applies to all Gardeners Goodmayes customers in the area, including individuals, households, landlords, tenants, and business clients who use our services.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We aim to be transparent, fair, and secure in everything we do. This policy is written to help you understand what happens to your information when you request a quotation, make a booking, receive a service, or otherwise interact with us.

1. Personal data we collect

We only collect information that is necessary to provide and manage our gardening services. The type of data collected may include:

Identity details such as your name and, where relevant, the name of your organisation or property manager.
Contact details such as your address, email address, and telephone number.
Service information including job instructions, property access notes, preferred appointment times, and service history.
Billing and payment records such as invoice details and payment status.
Communication records including messages, requests, complaints, feedback, and notes from phone or email conversations.
Technical information if you interact with us through digital systems, such as basic device or browser data collected for security and performance purposes.

We do not seek to collect special category data unless it is unavoidable and relevant to a specific legal or operational purpose. If such data is ever required, we will handle it with extra care and only where permitted by law.

2. How we use your personal data

We use personal data for clear and limited purposes connected to our services. These include:

providing quotations, arranging visits, and delivering gardening services;
communicating about bookings, schedules, and service updates;
handling invoices, payments, and account administration;
responding to enquiries, feedback, and complaints;
maintaining internal records and service quality;
meeting legal, tax, accounting, and insurance obligations;
protecting against fraud, misuse, or unlawful activity.

We only use your information where there is a valid legal reason to do so and where the use is consistent with the expectations of our customers. We do not sell personal data.

3. Lawful basis for processing

Under data protection law, we must have a lawful basis before processing personal information. Gardeners Goodmayes relies on the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. For example, we need your name, address, and service details to arrange and complete a gardening job.

Legal obligation

We may process and retain information where we are required to do so by law, including for tax, accounting, insurance, and record-keeping purposes.

Legitimate interests

We may use personal data for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This can include managing customer relationships, improving services, keeping secure records, and preventing misuse of our systems.

Consent

In limited situations, we may rely on your consent, especially where a request goes beyond our normal service relationship. If consent is used, you may withdraw it at any time. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

4. Sharing your information and processors

We may share personal data with trusted third parties that help us operate our business. These parties act as processors or, in some cases, independent controllers. We only share data where necessary and we require appropriate safeguards.

IT and cloud service providers that support data storage, scheduling, and secure communications.
Accounting and invoicing providers that help manage financial records and compliance.
Payment service providers that process transactions securely.
Administrative support providers that assist with record management or service coordination.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

All processors are required to handle data securely, use it only on our instructions, and comply with applicable data protection obligations. We do not permit processors to use your information for their own unrelated purposes.

We may also disclose personal data if required by law, court order, regulator, or law enforcement authority, or where disclosure is necessary to protect our rights, customers, or property.

5. Data retention

We keep personal data only for as long as necessary for the purpose it was collected. Retention periods depend on the type of information and the reason it is held. In general:

customer enquiry records may be kept for a limited period if no service is booked;
service and invoice records are kept for the period required for accounting, tax, and business administration;
communication records may be retained where needed to resolve disputes, maintain service quality, or meet legal obligations;
data that is no longer needed is securely deleted or anonymised.

When deciding how long to keep information, we consider legal requirements, the nature of the service, risk of dispute, and whether retaining the data is still necessary. We do not keep personal data longer than needed.

6. Data security

We use appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, password protection, secure storage, staff awareness, and limited sharing on a need-to-know basis.

While no system can be guaranteed fully secure, we take reasonable steps to safeguard information and to reduce the risk of accidental or unlawful processing.

7. Your rights

Depending on the circumstances and applicable law, you may have the following rights regarding your personal data:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete information.
Right to erasure - to request deletion of your data in certain situations.
Right to restriction - to ask us to limit how we use your data in certain cases.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to receive certain data in a structured, commonly used format.
Right to withdraw consent - where processing relies on consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached. We encourage you to raise concerns with us first where possible so we can resolve matters promptly.

8. Children’s data

Our services are generally intended for adults responsible for properties and service arrangements. We do not knowingly collect personal data from children unless it is unavoidably included in service communications or property instructions. Where such data is received, we will handle it carefully and only to the extent necessary.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their information is used.

10. Our commitment to privacy

Gardeners Goodmayes recognises that privacy is a fundamental right. We aim to handle personal data in a way that is lawful, fair, transparent, and proportionate. Our approach is based on good governance, minimal data collection, and respect for the people we serve. If you are a customer in the Goodmayes area, this policy applies to your interactions with us whether you are arranging one-off work or ongoing gardening services.

In summary: we collect only the information needed to deliver and manage our services, we process it on valid legal bases, we retain it for no longer than necessary, and we share it only with trusted processors or where the law requires it. We are committed to safeguarding your information and respecting your rights at all times.