Privacy Policy - Gardeners Holborn

Gardeners Holborn is committed to protecting the privacy and personal data of every customer in the Holborn area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Gardeners Holborn customers in the area, including current, former, and prospective customers who enquire about or use our gardening services.

This policy is written to be clear and transparent so that you understand what happens to your information when you interact with us. It covers data collection, lawful basis for processing, retention periods, third-party processors, and your rights as a data subject. By using our services, you acknowledge that your personal data may be handled as described below.

1. Information We Collect

We only collect personal data that is necessary for providing gardening services, managing customer relationships, handling enquiries, and meeting legal obligations. The types of information we may collect include:

Identity details such as your name and title.
Contact details such as your telephone number, email address, and service address in the Holborn area.
Service information including details about the gardening work requested, appointment preferences, property access notes, and special instructions.
Billing and payment records such as invoices, payment status, and transaction references.
Communication records including emails, messages, notes from phone calls, and feedback.
Technical data where relevant, such as limited website or device information used for basic security and performance monitoring.

We do not intentionally collect special category data unless it is required and you have provided it to us, or unless another lawful basis applies. If such data is ever needed, we will ensure it is handled with additional care and only for a specific, lawful purpose.

2. How We Use Your Data

Gardeners Holborn uses personal information for the following purposes:

To respond to enquiries and provide quotations.
To arrange, deliver, and manage gardening services.
To maintain service records and customer preferences.
To process invoices, payments, refunds, and account-related matters.
To communicate schedule changes, updates, and important service information.
To deal with complaints, disputes, and service issues.
To comply with legal, tax, accounting, and insurance obligations.
To improve our services, internal processes, and customer experience.

We only use your information in ways that are compatible with the purposes for which it was collected. Where possible, we use the minimum amount of data necessary to complete each task.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing personal data. Gardeners Holborn relies on the following lawful bases:

Contract

We process your data when it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes arranging gardening work, issuing invoices, and managing service delivery.

Legitimate Interests

We may process data where it is in our legitimate interests to do so, provided those interests are not overridden by your rights and freedoms. This may include service administration, maintaining internal records, improving operations, and protecting our business from fraud or misuse.

Legal Obligation

We process certain information where necessary to comply with legal duties, such as tax, accounting, regulatory, or insurance requirements.

Consent

In limited circumstances, we may rely on your consent, for example where you choose to receive certain optional communications. Where consent is used, you can withdraw it at any time.

Vital Interests and Public Task

These bases are unlikely to apply in ordinary customer relationships, but if they ever do, we will only use them in strict accordance with data protection law.

4. Data Sharing and Processors

We may share personal data with trusted third parties that help us operate efficiently and provide services. These organisations act as processors or independent controllers depending on the service involved. We only share data where necessary and under appropriate safeguards.

Examples of processors may include:

Payment service providers who handle card or electronic payment processing.
IT and cloud storage providers that support secure data storage, email, and administration systems.
Accounting or bookkeeping providers that assist with invoicing and financial records.
Customer relationship or scheduling tools used to organise jobs and appointments.
Professional advisers such as insurers, legal advisers, or auditors where required.

All processors are required to protect personal data, act only on our instructions where applicable, and implement suitable technical and organisational measures. We do not sell your personal data.

We may also disclose information if required by law, to protect our rights, or to prevent unlawful activity. If a business restructure or transfer occurs, personal data may be shared with relevant parties under appropriate confidentiality and security terms.

5. Data Retention

We keep personal data only for as long as necessary for the purposes described in this policy, including to meet legal, accounting, and reporting obligations. Retention periods may vary depending on the type of data and why it is held.

Customer and service records are generally retained for the duration of the relationship and for a reasonable period afterwards to manage follow-up issues, warranties, and service history.
Financial and invoice records are kept for the period required by tax and accounting law.
Communication records are retained only as long as needed to resolve queries or maintain accurate business records.
Technical or security logs are kept for short periods unless they are needed for investigation or legal purposes.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. In some cases, we may retain information for a longer period if necessary to establish, exercise, or defend legal claims.

6. Your Rights

As a data subject, you have a number of rights under data protection law. These rights apply to Gardeners Holborn customers in the area, subject to legal limits and exemptions.

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete information.
Right to erasure – in certain circumstances, you may request that we delete your personal data.
Right to restriction – you may ask us to limit the way we use your data in specific situations.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to data portability – where applicable, you may request your data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

We will respond to valid requests within the time limits required by law and may need to verify your identity before acting on a request. Some rights may not apply in all circumstances, especially where we must retain information for legal or operational reasons.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, password protection, secure storage, staff awareness, and limited data access on a need-to-know basis.

While no system can be guaranteed to be completely secure, we take privacy seriously and review our safeguards regularly. If a data incident occurs that poses a risk to your rights and freedoms, we will handle it in line with applicable legal requirements.

8. International Transfers

If any processor stores or accesses data outside the United Kingdom, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent legal protections designed to keep your data secure and properly protected.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is published or made available. We encourage customers to review this policy periodically so they remain informed about how their data is used.

10. Our Commitment to Privacy

Gardeners Holborn respects the trust placed in us by our customers. We aim to process personal data fairly, lawfully, and transparently, with privacy by design and data minimisation at the core of our operations. Our services are intended to support customers in the Holborn area while ensuring that personal information is treated carefully and responsibly.

By using our services, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of it, you should contact us to discuss your concerns before continuing to use our services. This policy is intended to give you confidence that your information is handled in a lawful, secure, and respectful manner at all times.