Privacy Policy - Gardeners Wembley Park

This Privacy Policy explains how Gardeners Wembley Park collects, uses, stores, shares, and protects personal data relating to its customers and service users in the Wembley Park area. It applies to all Gardeners Wembley Park customers in the area, including individuals who request quotes, book gardening services, receive visits from our team, or otherwise interact with us in connection with our services. We are committed to handling personal information in a lawful, fair, transparent, and secure way, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We aim to ensure that every customer understands what data is collected, why it is needed, how long it is kept, and what rights are available to them. This policy is written to be clear and practical, while still reflecting the standards expected of a GDPR-compliant business. By using our services or communicating with us, you acknowledge that your personal data may be processed as described below.

1. Who we are and what this policy covers

Gardeners Wembley Park provides gardening and related outdoor maintenance services to residential and commercial customers in and around Wembley Park. This policy applies to personal data collected in connection with enquiries, bookings, site visits, service delivery, payment processing, customer communications, and lawful business administration.

This policy does not cover third-party websites, platforms, or services that may be linked to or referenced by our business, and it does not apply where another organisation is independently responsible for processing data.

2. Personal data we collect

We only collect personal data that is relevant and necessary for the provision and management of our services. Depending on how you interact with us, we may collect the following categories of information:

Identity information such as your name and, where relevant, the name of a business or property manager.
Contact information such as your address, email address, and telephone number.
Service information including details of the gardening services requested, property access instructions, scheduling preferences, and service history.
Payment and billing information such as transaction records, invoicing details, and payment status.
Communication records including emails, messages, call notes, complaints, feedback, and service-related correspondence.
Technical information where you interact with our digital systems, such as IP address or device-related information necessary for security and administration.
Usage and operational information such as appointment dates, completed work notes, quotations, and customer preferences relevant to future service delivery.

We do not intentionally collect special category data unless it is strictly necessary and you provide it to us voluntarily, or unless there is another lawful basis permitting such processing. If special category information is ever needed, we will handle it with appropriate safeguards and in accordance with the law.

3. How we use personal data

Gardeners Wembley Park uses personal data for specific and legitimate purposes connected to our gardening services and business operations. These purposes include:

Responding to enquiries and providing quotes.
Arranging and delivering gardening services.
Managing bookings, schedules, access arrangements, and customer preferences.
Processing payments, issuing invoices, and maintaining financial records.
Communicating about service changes, follow-up work, or administrative matters.
Handling complaints, service issues, and quality assurance.
Maintaining internal records and meeting legal, tax, and regulatory obligations.
Protecting our staff, customers, and business against fraud, misuse, or security risks.

We do not use personal data for purposes that are incompatible with those outlined in this policy unless required or permitted by law.

4. Lawful basis for processing

Under GDPR, we must have a lawful basis to process your personal data. Gardeners Wembley Park relies on the following lawful bases depending on the context of the processing:

Contract: We process data where it is necessary to enter into or perform a contract with you, such as delivering gardening services, managing bookings, or issuing invoices.
Legitimate interests: We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining records, improving our services, preventing fraud, or communicating about service administration.
Legal obligation: We process data where needed to comply with laws and regulations, including tax, accounting, and record-keeping requirements.
Consent: In limited situations, we may rely on your consent, for example where we wish to send optional marketing messages or process certain information not covered by another lawful basis. You may withdraw consent at any time.

If we rely on legitimate interests, we will carefully consider the impact on your privacy and take steps to ensure that our processing is proportionate and appropriate.

5. Retention of personal data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, and reporting requirements. The retention period varies depending on the type of data and the reason for processing.

Customer enquiry records may be retained for a reasonable period to allow follow-up and service continuity.
Contract, booking, and service history records may be retained for the duration of the service relationship and for a further period where needed for business administration or dispute resolution.
Financial records and invoices may be retained for the period required by law and standard accounting practice.
Complaint and correspondence records may be retained for as long as necessary to resolve issues and demonstrate how matters were handled.

When personal data is no longer needed, we will delete, destroy, or anonymise it securely. Retention periods may vary depending on legal duties, the nature of the service, and whether a record is required for legitimate business purposes.

6. Processors and third parties

Gardeners Wembley Park may use trusted third-party service providers, also known as processors, to help us operate our business efficiently and securely. These processors may handle personal data only on our instructions and must protect it appropriately.

Examples of processors may include:

Payment service providers that process card or electronic payments.
Accounting and bookkeeping providers that support invoicing and tax compliance.
IT and cloud storage providers that host secure business systems and records.
Communication and scheduling tools that help us manage appointments and service updates.

We may also share personal data with other third parties where necessary, such as insurers, legal advisers, or public authorities, but only when there is a lawful reason to do so. We do not sell your personal data.

Where data is transferred to a processor, we seek appropriate contractual safeguards to ensure the data is handled securely, lawfully, and only for the intended purpose.

7. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, destruction, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limiting data access to those who need it for business purposes.

Although no system can be guaranteed to be completely secure, we work to maintain an appropriate level of protection for the nature of the data we process.

8. Your rights under GDPR

As a data subject, you have rights regarding your personal data. Subject to legal conditions and exemptions, you may have the right to:

Access the personal data we hold about you.
Rectification of inaccurate or incomplete data.
Erasure of data in certain circumstances, also known as the right to be forgotten.
Restriction of processing in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability where processing is based on consent or contract and carried out by automated means.
Withdraw consent where we rely on consent to process your data.

You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed. We encourage you to raise concerns directly with us first so we can address them promptly and fairly.

How we handle rights requests

When you exercise your rights, we may need to verify your identity before responding. This helps protect your personal data and ensures that requests are handled securely. We will respond within the time limits required by law, unless an extension is permitted due to complexity or volume.

We will never charge a fee for a standard rights request unless the request is manifestly unfounded, excessive, or repetitive, and any action taken will be consistent with legal requirements.

9. Children’s data

Our services are primarily intended for adults and property holders or managers who arrange gardening services. We do not knowingly collect children’s personal data unless it is incidentally provided in a lawful business context and necessary for service administration. If we become aware that we have collected personal data without an appropriate basis, we will take steps to delete it where required.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any revised version will apply from the date it becomes effective. We encourage customers to review the policy periodically so they remain informed about how their personal data is handled.

Gardeners Wembley Park is committed to respecting privacy and maintaining trust in every customer relationship. By keeping our data practices focused, lawful, and transparent, we aim to provide services in a way that protects personal information while supporting reliable and efficient gardening work throughout Wembley Park.