Privacy Policy
Gardeners South Ruislip Privacy Policy
This Privacy Policy explains how Gardeners South Ruislip collects, uses, stores and shares personal data when providing gardening and related services. It applies to all Gardeners South Ruislip customers in the South Ruislip area, including prospective, current and former customers, as well as individuals who make enquiries about our services on behalf of someone else.
Who we are
Gardeners South Ruislip is a local gardening service provider operating in and around the South Ruislip area. In relation to the personal data we collect, we act as the data controller. This means we decide how and why your personal information is used in connection with our services.
Types of personal data we collect
We may collect and process the following categories of personal data about you:
Identification and contact details, such as your name, postal address, service address, and any other contact details you provide to us for communication about our services.
Service and contract information, such as details of the gardening services you request or receive, visit dates and times, your property type and garden layout information to the extent needed to plan and deliver our services, and notes about your preferences.
Billing and payment information, such as details relating to invoices and records of payments made, and limited payment-related information required for processing transactions. We do not store full payment card details where payment is taken via a third-party payment processor.
Communication records, such as enquiries, quotations, instructions, feedback, complaints or other correspondence you send to us and our records of communications with you.
Technical and usage information, such as limited technical data arising from your interactions with our online presence or digital tools, including basic log information needed to secure our systems and manage enquiries.
How we collect your personal data
We collect personal data directly from you when you contact us to request a quote, make a booking, ask a question, or otherwise communicate with us about our services. This may be done in person, by post, or through digital communication channels.
We may also receive personal data indirectly when another person contacts us on your behalf, for example a family member arranging gardening services for you. In such cases, we will treat the received data in accordance with this Privacy Policy.
Purposes of processing and lawful bases
We process your personal data only when we have a lawful basis to do so under the UK GDPR and related data protection laws. The main purposes and lawful bases are:
To provide our gardening services and manage our relationship with you. This includes handling enquiries, providing quotations, scheduling and carrying out visits, managing contracts, sending service updates and communicating with you about your bookings. Our lawful basis is performance of a contract or taking steps at your request before entering into a contract.
To manage payments and accounting. We use your data to issue invoices, process payments, and maintain accurate financial records. Our lawful basis is performance of a contract and compliance with our legal obligations, in particular tax and accounting requirements.
To respond to questions, feedback or complaints. We process your data so we can address any issues you raise, improve our services and maintain accurate records of communications. Our lawful basis is our legitimate interests in operating and improving our business and ensuring customer satisfaction.
To send service-related messages. This includes sending appointment confirmations, reminders, updates about any schedule changes, and essential notices about health and safety or access to your property. Our lawful basis is performance of a contract and our legitimate interests in delivering services effectively and safely.
To maintain security and prevent misuse. We may use limited technical and communication data to protect our systems, prevent fraud and ensure the security of our operations. Our lawful basis is our legitimate interests in keeping our services and systems secure and complying with applicable law.
To comply with legal and regulatory obligations. We may need to process and retain certain data in order to comply with laws, respond to lawful requests from authorities or defend legal claims. Our lawful basis is compliance with legal obligations and our legitimate interests in protecting our rights.
Data sharing and processors
We do not sell your personal data. We may share your personal data with trusted third parties who act as data processors on our behalf, only where necessary for the purposes described in this Privacy Policy.
These processors may include providers of payment processing services, accounting or bookkeeping support, information technology support services, and providers of tools used to manage customer enquiries, bookings and communications. Each processor is engaged under a written contract requiring them to act only on our instructions, keep your data secure and protect it in accordance with applicable data protection law.
We may also share your data with professional advisers such as accountants or legal advisers where reasonably necessary to obtain advice or manage our legal obligations, and with authorities or law enforcement bodies where required by law or where necessary to protect our rights or the rights of others.
Where any data is transferred or accessed from outside the UK or European Economic Area, we will take appropriate steps to ensure that an adequate level of protection is in place, for example by relying on adequacy regulations or approved contractual safeguards as required by data protection law.
Data retention
We keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including meeting legal, accounting and reporting requirements.
In most cases, we will retain contact, service and billing records for as long as you remain a customer and for a period after our last interaction to handle any queries or disputes. Financial and transaction information may be retained for a longer period where required by tax or accounting laws.
When we no longer need your personal data for the purposes for which it was collected and there is no legal requirement to retain it, we will delete it or anonymise it so that it no longer identifies you.
Your data protection rights
If you are a customer of Gardeners South Ruislip in the South Ruislip area, you have a number of rights under data protection law in relation to your personal data. These include:
The right of access, which allows you to request confirmation of whether we hold personal data about you and to receive a copy of that data, along with certain information about how we use it.
The right to rectification, which allows you to ask us to correct inaccurate personal data or complete incomplete data we hold about you.
The right to erasure, in certain circumstances, which allows you to ask us to delete your personal data where, for example, it is no longer needed for the purposes for which it was collected or you withdraw consent (where consent was the lawful basis) and there is no other lawful basis for processing.
The right to restriction of processing, which allows you to ask us to suspend the use of your data in specific situations, for example while we verify its accuracy or consider an objection you have raised.
The right to object to processing, where we are relying on our legitimate interests as the lawful basis. You can object at any time on grounds relating to your particular situation, and we will stop processing your data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms or where processing is needed for legal claims.
The right to data portability, which allows you, in some circumstances, to receive the personal data you have provided to us in a structured, commonly used and machine readable format and to request that this is transmitted to another controller where technically feasible.
You also have the right to lodge a complaint with a supervisory authority if you are concerned about how we handle your personal data. In the United Kingdom, this is the Information Commissioner's Office. We would, however, welcome the opportunity to address your concerns directly in the first instance.
How we protect your data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures include limiting access to personal data to those who have a genuine business need to know it and requiring any third parties who process data on our behalf to follow appropriate security practices.
Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our data practices or legal requirements. Any updated version will apply to all personal data held by us at the time of the update and to data collected after the update takes effect. You are encouraged to review this Privacy Policy periodically to stay informed about how we protect your information.