Gardeners Bedford Park Privacy Policy

This Privacy Policy explains how Gardeners Bedford Park collects, uses, stores and protects personal data relating to customers and prospective customers in the Bedford Park area. It is intended to comply with the United Kingdom General Data Protection Regulation and other applicable data protection laws. This Privacy Policy applies to all services provided by Gardeners Bedford Park to individuals and businesses located in the Bedford Park area.

Who we are

Gardeners Bedford Park is a gardening and outdoor maintenance service provider operating in the Bedford Park area. In relation to the personal data described in this Privacy Policy, Gardeners Bedford Park acts as a data controller. This means that we decide how and why your personal data is processed when you engage with our services or contact us about our services.

What personal data we collect

We only collect personal data that is necessary for the provision of our services or for the administration of our business. The types of personal data we may collect include the following categories.

Identification and contact information, such as your name, residential or business address, and any other contact details you choose to share, for example a preferred contact method.

Service and property information, such as garden size, type of property, access instructions, details about your outdoor space, photographs of the garden where strictly necessary for quotation or service planning, and records of services requested or provided.

Billing and payment details, such as billing address, payment method used and records of invoices and payments. Card details are handled only by secure third party payment processors acting as our data processors and are not stored by Gardeners Bedford Park.

Communication records, including notes of phone conversations, enquiries made through forms or written correspondence, and any feedback you provide, such as compliments, complaints or reviews shared directly with us.

Usage information, which may include basic technical information about how you interact with our website or online forms, such as pages visited and the date and time of visits, where this is necessary for security, troubleshooting or improving our services.

How we collect personal data

We collect personal data directly from you when you contact us, request a quote, book a service, communicate with our team or provide feedback. We may also collect personal data indirectly when existing customers refer you to us and you subsequently choose to contact us, or when we receive confirmation of payments from our payment processors and banks in the form of transaction records. We do not knowingly collect personal data relating to children for the purpose of marketing or service contracts.

Lawful bases for processing your data

Gardeners Bedford Park processes personal data only where we have a lawful basis to do so. Depending on the specific activity, we rely on the following lawful bases.

Performance of a contract. We process personal data to provide our gardening and maintenance services, to prepare quotations, manage bookings, coordinate site access and deliver aftercare. Without this data, we would not be able to perform our contract with you or take steps at your request before entering into a contract.

Legal obligations. We process certain data to comply with legal and regulatory obligations, such as maintaining accurate financial and tax records, fulfilling health and safety requirements and responding to lawful requests from public authorities.

Legitimate interests. We process personal data for our legitimate business interests where these interests are not overridden by your data protection rights. Examples include managing our relationship with existing customers, improving our services, preventing fraud, protecting our property and systems, and ensuring the security of our operations.

Consent. Where required by law, we will obtain your consent before sending non essential marketing communications or before using optional cookies or similar technologies. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

How we use your personal data

We use your personal data for the following purposes. To create and manage customer records, including quotations, service agreements and job schedules. To visit your property, perform assessments, deliver the gardening or maintenance services you have requested and follow up on any aftercare needs. To manage billing, process payments, issue receipts and handle any financial queries or disputes. To communicate with you about appointments, changes to services, updates to terms and conditions and responses to questions or complaints. To maintain, analyse and improve our services, including planning resources, training staff and reviewing service quality. To protect our rights, property, staff and customers, including through the prevention and detection of fraud or misuse of our services. To comply with applicable laws, regulations and lawful requests from authorities.

Data sharing and processors

We do not sell your personal data. We may share personal data with carefully selected third parties who act as data processors on our behalf or as independent controllers where necessary.

Data processors are service providers who process personal data only under our instructions and for specified purposes. These may include payment processing providers who handle card transactions and securely process payments, accounting and bookkeeping service providers who assist with financial record keeping, cloud and information technology providers who host our systems and store data securely, and communication service providers who facilitate the sending and receipt of messages.

Where we engage data processors, we ensure that appropriate data protection agreements are in place and that processors are required to implement appropriate technical and organisational measures to protect your personal data.

We may also share personal data with other parties acting as independent controllers when necessary, such as professional advisers including accountants, legal advisers or insurers, where needed for compliance, legal claims, risk management or professional advice, and public authorities, regulators or law enforcement agencies where required by law or in response to a lawful request.

If we are involved in a business reorganisation, merger or transfer of business, personal data may be shared with relevant parties in accordance with data protection law and subject to appropriate safeguards.

International transfers

Where we use processors or service providers located outside the United Kingdom or the European Economic Area, or where data may be stored in or accessed from other jurisdictions, we will ensure that appropriate safeguards are in place. These may include standard contractual clauses approved by data protection authorities or reliance on adequacy regulations that recognise an equivalent level of data protection in the destination country.

Data retention

We keep personal data only for as long as is reasonably necessary for the purposes for which it was collected, including to meet legal, regulatory, tax, accounting or reporting requirements.

Customer and service records, including contact details, property information and service history, are generally retained for a period that allows us to address follow up queries, handle complaints and demonstrate proper performance of our services. Financial and invoicing records are kept for the period required under tax and accounting laws. Communication records are retained for a period that is proportionate to the nature of the communication and any potential need to refer back to it.

When personal data is no longer needed, we will securely delete or anonymise it. In some cases, we may retain anonymised information that no longer identifies an individual for statistical or service improvement purposes.

Your data protection rights

As a data subject in the Bedford Park area, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include the right to access your personal data and obtain a copy of the data we hold about you, the right to request correction of inaccurate or incomplete personal data, and the right to request deletion of your personal data where there is no longer a lawful basis for us to keep it.

You also have the right to object to certain types of processing based on our legitimate interests, particularly in relation to direct marketing, and the right to request that we restrict the processing of your personal data in specific circumstances. Where we process personal data on the basis of your consent or for the performance of a contract by automated means, you may have the right to request data portability, which allows you to receive your data in a structured, commonly used and machine readable format and to transmit it to another controller.

Exercising your rights

If you wish to exercise any of your data protection rights, or if you have questions about how Gardeners Bedford Park handles your personal data, you may contact us using the details provided in your service agreement, invoice or on our official communications. We will respond to your request without undue delay and within the time limits required under applicable data protection law. We may need to verify your identity before complying with certain requests to protect your data from unauthorised access.

If you are not satisfied with our response or believe that your data protection rights have been infringed, you have the right to lodge a complaint with the relevant data protection supervisory authority. You may do this in the country of your habitual residence, place of work or place of the alleged infringement.

Security of your data

We take the security of personal data seriously. Gardeners Bedford Park implements appropriate technical and organisational measures designed to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. Measures may include secure storage, access controls, staff training, and appropriate policies and procedures relating to data handling and retention. While we take reasonable steps to secure your data, no system can be guaranteed to be completely secure.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or data protection practices. Any changes will take effect when the updated Privacy Policy is made available through our usual communication channels. We encourage you to review this policy periodically to stay informed about how we protect your personal data.