Gardeners Blackheath Privacy Policy

This Privacy Policy explains how Gardeners Blackheath collects, uses, stores, and protects personal data belonging to customers and prospective customers in the Blackheath area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. By engaging with our gardening services or contacting us, you acknowledge that you have read and understood this Privacy Policy.

Scope and Data Controller

This Privacy Policy applies to all Gardeners Blackheath customers and prospective customers located in the Blackheath area, including individuals and businesses that enquire about, use, or have used our gardening and related services. Gardeners Blackheath is the data controller of the personal data described in this policy, which means we determine how and why your personal data is processed.

Types of Personal Data We Collect

We collect and process different types of personal data depending on how you interact with us. The main categories of data we collect include:

Identification and contact details: This can include your name, postal address, billing address, and general location within the Blackheath area.

Service and contract information: This can include details about your property such as garden size, layout descriptions, access notes, as well as records of services requested, quotations, bookings, invoices, and payment history.

Communication data: This can include the content of messages you send to us and notes of conversations relating to enquiries, bookings, complaints, or feedback.

Technical and usage data: If you interact with us online, we may collect limited technical information about how you access and use our website or digital services, such as basic device information and general usage patterns. We do not intentionally collect more data than is necessary for the operation of our services.

How We Collect Personal Data

We typically collect personal data directly from you when you contact us to request information or a quote, make a booking, enter into a contract for gardening services, pay for services, or provide feedback. We may also collect data when you interact with us in person in the Blackheath area or when you contact us by post or via online channels.

In some cases, personal data may be obtained from third parties, for example when a family member, neighbour, or property manager provides your details so we can access or maintain a garden at your property. When this occurs, we will only use the data for the purposes described in this Policy and, where appropriate, we will inform you of the source of your data.

Lawful Basis for Processing Personal Data

Gardeners Blackheath processes personal data only where there is a valid lawful basis under the GDPR. Depending on the context, this may include:

Contract: We process personal data when it is necessary to enter into or perform a contract with you, such as providing gardening services, issuing quotes, taking payment, and communicating about work to be carried out at your property.

Legitimate interests: We may process personal data where it is necessary for our legitimate business interests and does not override your interests or fundamental rights and freedoms. This can include managing schedules, improving our services, maintaining records, and protecting our business and customers from fraud or misuse.

Legal obligations: We may process personal data where this is necessary for compliance with legal and regulatory requirements, including maintaining accounting and tax records.

Consent: In limited situations, we may rely on your consent, for example if we send certain forms of optional marketing communications. Where we rely on consent, you are free to withdraw it at any time, and we will explain how you can do so at the time consent is collected.

How We Use Personal Data

We use the personal data we collect for the following purposes:

To provide and manage gardening services in the Blackheath area, including site visits, regular maintenance, one-off projects, and follow-up work.

To prepare and send quotations, confirm bookings, issue invoices, and process payments.

To communicate with you about your enquiries, bookings, ongoing services, and any issues or complaints.

To maintain internal records of work completed, properties visited, and service history so we can deliver a consistent service.

To manage our business operations, including scheduling, staff allocation, security, and quality control.

To comply with legal obligations and respond to lawful requests from authorities where required.

Data Sharing and Processors

We do not sell your personal data. We may share personal data with trusted third parties who act as data processors and provide services that support our business operations. These can include:

Accountancy or bookkeeping services that help us manage our financial records.

IT and hosting providers that supply and maintain software, scheduling tools, or storage systems used to hold customer information.

Payment service providers that process card or electronic payments on our behalf.

Where we use data processors, we ensure there is a written agreement in place that requires them to process your personal data only on our instructions, to keep it secure, and to comply with data protection law.

We may also share personal data where it is necessary to comply with a legal obligation, to protect our rights or the rights of others, or to facilitate the sale or restructuring of our business, in which case we will take steps to ensure that your rights are protected.

Data Storage, Security, and International Transfers

Personal data is stored using reasonable technical and organisational measures designed to protect it against accidental loss, unauthorised access, or misuse. This includes restricting access to personal data to personnel and service providers who need to know it for legitimate business purposes.

Where possible, we aim to store personal data within the UK or the European Economic Area. If data is transferred outside these regions, we will take appropriate steps to ensure that an adequate level of protection is in place in line with data protection laws.

Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet any legal, accounting, or reporting requirements. The length of time we retain data varies depending on the type of information:

Service and contract information, including basic contact details linked to work carried out, may be kept for a number of years after our last interaction to allow us to respond to queries, manage repeat work, and comply with tax and accounting rules.

Enquiry records that do not lead to a contract are generally kept for a shorter period, only as long as needed to manage the enquiry and any follow-up.

In all cases, we regularly review the personal data we hold and either securely delete or anonymise data that is no longer required.

Your Data Protection Rights

As a data subject, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions under the law. These include:

Right of access: You can request confirmation of whether we process your personal data and, if so, receive a copy of that data and certain other information.

Right to rectification: You can ask us to correct or complete personal data that is inaccurate or incomplete.

Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.

Right to restriction: You can ask us to restrict the processing of your personal data in specific situations, for example while we investigate an accuracy or objection request.

Right to object: You can object to processing that is based on our legitimate interests, including any direct marketing. We will stop processing unless we have compelling legitimate grounds or the processing is required for legal claims.

Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format or transfer it to another controller where technically feasible.

You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been infringed.

Children

Our services are aimed at adults responsible for properties in the Blackheath area. We do not knowingly collect personal data relating to children. If we become aware that we have received personal data about a child, we will take steps to delete it where appropriate.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any changes will apply from the date the revised Policy is made available. We encourage you to review this Policy periodically so that you remain informed about how we use and protect your personal data.