Privacy Policy - Gardeners Forest Hill

This Privacy Policy explains how Gardeners Forest Hill collects, uses, stores, and shares personal data in connection with our gardening services. It applies to all Gardeners Forest Hill customers in the area, including anyone who requests a quote, books a service, communicates with us, or receives support from us. We are committed to handling personal information in a fair, transparent, and lawful way in line with the UK GDPR and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to customers, prospective customers, property occupiers, suppliers, and other individuals whose personal data we may process while carrying out our gardening services. If you use our services or interact with our team in relation to Gardeners Forest Hill, this policy explains how we handle your data.

2. What data we collect

We only collect personal data that is relevant and necessary for providing our services, managing our business, and meeting our legal obligations. The types of data we may collect include:

Identity details such as your name, title, and preferred contact name.
Contact details such as address, telephone number, and email address.
Service information such as the type of gardening work requested, service preferences, appointment notes, and property access instructions.
Payment and billing information such as invoice details, transaction records, and payment status.
Communication records such as emails, messages, and notes from phone calls or service discussions.
Technical information if you visit a digital service channel, such as basic usage data or device information, where applicable.
Legal and compliance information where needed for insurance, dispute handling, or accounting purposes.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it in a relevant context, or we are legally permitted to process it. If such data is ever needed, we will ensure an appropriate lawful basis exists and additional safeguards are in place.

3. How we use your data

Gardeners Forest Hill uses personal data for the following purposes:

To provide quotations, book appointments, and deliver gardening services.
To manage customer accounts and service records.
To communicate about service updates, scheduling, and billing.
To process payments, issue invoices, and maintain accurate financial records.
To respond to enquiries, complaints, and feedback.
To improve the quality, efficiency, and safety of our services.
To comply with tax, accounting, insurance, and other legal obligations.
To establish, exercise, or defend legal claims if necessary.

We use personal data only for legitimate business and service purposes, and never in a way that is incompatible with the reasons it was originally collected.

4. Lawful basis for processing

Under data protection law, we must have a lawful basis for processing personal data. Gardeners Forest Hill may rely on one or more of the following bases:

Contract

We process your data when it is necessary to enter into or perform a contract with you, such as arranging services, managing bookings, issuing invoices, and completing work at your property.

Legal obligation

We process certain data to comply with legal duties, including tax and accounting requirements, record keeping, and responses to lawful requests from authorities where applicable.

Legitimate interests

We may process data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. This may include service administration, customer support, quality control, fraud prevention, and business record management.

Consent

In some cases, we may rely on your consent, for example where processing is optional and not required for service delivery. Where consent is used, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.

5. Data sharing and processors

We may share personal data with trusted third parties who help us run our business and provide our services. These third parties act as data processors or independent controllers depending on the service they provide. We take appropriate steps to ensure that any data shared is protected and handled lawfully.

Processors may include:

IT and cloud service providers that store or secure business records.
Payment processors that handle card or electronic payments.
Accounting and invoicing providers that support financial administration.
Customer communication tools used for sending service messages or managing enquiries.
Professional advisers such as insurers, lawyers, or accountants where required.

We only appoint processors that provide sufficient guarantees regarding security, confidentiality, and GDPR compliance. Where a processor acts on our behalf, they are only permitted to use the data according to our instructions and for the agreed purpose.

We may also disclose personal data if required by law, to protect our rights, or to prevent fraud or security issues.

6. Retention of personal data

We keep personal data only for as long as necessary for the purpose for which it was collected, including any legal, accounting, or reporting requirements. Retention periods depend on the nature of the information and the reason it is held.

Customer and service records are typically kept for the duration of the relationship and for a reasonable period afterwards for administration and dispute resolution.
Financial and tax records are retained for the period required by applicable law.
Communication records may be kept for a limited period to manage follow-up, complaints, and service quality.
Legal claim records may be kept longer where needed to establish, exercise, or defend legal rights.

When data is no longer needed, it is securely deleted, anonymised, or otherwise destroyed in a safe manner.

7. Security of your data

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and data minimisation practices. While no system can be guaranteed to be completely secure, we take privacy and security seriously and regularly review our safeguards.

8. Your rights under GDPR

You have important rights in relation to your personal data. These rights may be subject to conditions and exemptions under data protection law, but we will always consider your request carefully.

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete data.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restriction - to ask us to limit how we use your data in certain situations.
Right to data portability - to receive certain data in a structured, commonly used format.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent - where consent is the lawful basis, you may withdraw it at any time.

We will not discriminate against you for exercising your rights. If you make a request, we may need to verify your identity before responding.

9. International transfers

Where personal data is transferred outside the UK, we will take appropriate steps to ensure that it remains protected and that the transfer is carried out in accordance with data protection law. This may include the use of approved safeguards and contractual protections.

10. Children’s data

Our services are intended for adults responsible for arranging gardening work. We do not knowingly collect personal data from children unless it is incidental and necessary for service delivery, for example where a property is occupied by a family. If we become aware that we have collected data from a child without appropriate grounds, we will take steps to delete it where required.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, service practices, or operational requirements. Any revised version will apply from the date it is issued. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

12. Summary of our approach

Gardeners Forest Hill processes personal data responsibly, fairly, and only when there is a clear reason to do so. We collect the minimum information needed to deliver gardening services, we rely on lawful bases under GDPR, we retain data only for necessary periods, and we use trusted processors under appropriate safeguards. You also retain meaningful rights over your information, and we are committed to respecting those rights in a clear and transparent way.