Privacy Policy - Gardeners Nine Elms

This Privacy Policy explains how Gardeners Nine Elms collects, uses, stores, and protects personal data when providing gardening services to customers in the Nine Elms area. It applies to all Gardeners Nine Elms customers in the area, including prospective customers, current clients, and individuals who contact us about our services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

We respect your privacy and take data protection seriously. This policy is designed to help you understand what information may be collected, why it is collected, how long it is kept, who may process it on our behalf, and what rights you have in relation to your personal information.

1. Information We Collect

Gardeners Nine Elms may collect different types of personal data depending on how you interact with us and which services you request. The information we collect is limited to what is necessary for the purposes described in this policy.

Information you provide directly

Identity details such as your name.
Contact details such as address, telephone number, and email address.
Service information such as gardening preferences, property access notes, scheduling requests, and service instructions.
Communication records including messages, enquiries, complaints, and feedback.
Payment-related information where required to process transactions or maintain financial records.

Information collected automatically

When you communicate with us electronically or use digital tools related to our services, we may collect limited technical information such as device type, basic usage data, and service interaction records. This information is used to improve service delivery, maintain security, and manage administrative operations.

Information from third parties

We may occasionally receive information from third parties where this is necessary to arrange or deliver services, confirm payment status, or manage subcontracted work. In each case, we only collect the minimum personal data needed for a legitimate business purpose.

2. How We Use Personal Data

We use personal data only for specific and lawful purposes. These may include:

providing gardening and related services;
managing enquiries, quotes, bookings, and schedules;
carrying out work at your property safely and effectively;
maintaining customer records and service history;
processing payments and managing invoices;
responding to complaints, feedback, or service issues;
meeting legal, accounting, and insurance obligations;
protecting against fraud, misuse, or security incidents;
improving service quality and internal operations.

We do not use your personal information for purposes that are incompatible with the reasons it was collected unless we are legally permitted to do so or we have informed you and obtained any required consent.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process your personal data. Gardeners Nine Elms relies on the following legal grounds:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes handling enquiries, providing quotations, delivering services, and managing payments.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include maintaining service records, improving operations, securing our systems, and managing customer communications.

Legal obligation

Some information must be processed or retained to comply with legal and regulatory duties, including tax, accounting, insurance, and record-keeping requirements.

Consent

In limited situations, we may rely on your consent, for example where we need permission to use optional information or carry out certain communications. Where consent is used, you may withdraw it at any time.

4. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods depend on the type of information and the reason it was collected.

Customer and service records are generally retained for the duration of the customer relationship and for a reasonable period afterward.
Financial and invoicing records are kept in line with legal and tax obligations.
Communication records may be retained for administrative, quality, and dispute-resolution purposes.
Security-related records may be held for a limited time to protect systems and property.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

5. Data Sharing and Processors

We do not sell your personal data. We may share information only where necessary and only with trusted third parties who help us operate our business. These parties act as processors or independent controllers depending on the service they provide.

Typical processors may include

Administrative service providers who support scheduling, record management, or document storage.
Payment service providers who handle transactions and payment processing.
IT and cloud service providers who support secure data storage, email, and system maintenance.
Professional advisers such as accountants, insurers, or legal advisers where required.
Subcontractors assisting with delivery of gardening services under our instructions.

Where we use processors, we require them to protect personal data, use it only on our instructions, and apply appropriate security measures. If information must be disclosed to public authorities or regulators, we will do so only when legally required or permitted.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures are designed to reflect the nature of the information we hold and the risks involved.

Security controls may include access restriction, secure storage, staff confidentiality obligations, and appropriate handling procedures. While no system can be guaranteed completely secure, we work to maintain a high standard of data protection and to address risks promptly if they arise.

7. Your Rights Under GDPR

You have a number of rights in relation to your personal data. These rights may apply in full or in part depending on the lawful basis for processing and the circumstances of your request.

Your rights include:

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete information.
Right to erasure – you may request deletion of your data in certain circumstances.
Right to restrict processing – you may ask us to limit how your data is used in some cases.
Right to data portability – you may request a copy of data you have provided in a structured, commonly used format, where applicable.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – if we rely on consent, you may withdraw it at any time.

You also have the right to raise concerns about how your data is handled with the relevant data protection authority. We encourage you to contact us first so we can address any issues directly and promptly.

8. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place to protect your information in line with applicable data protection law. These safeguards may include approved contractual protections or other lawful transfer mechanisms.

9. Children’s Data

Gardeners Nine Elms does not intentionally collect personal data from children unless it is necessary in connection with a service arrangement and only where appropriate legal grounds exist. If we become aware that data has been collected in error, we will take reasonable steps to delete it securely.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, service operations, or data protection practices. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically to stay informed about how personal data is protected.

11. Summary of Our Commitment

Gardeners Nine Elms uses personal data responsibly and only where it is necessary to deliver services, manage business operations, and meet legal obligations. We keep data for no longer than needed, share it only with appropriate processors, and uphold the rights of every individual whose information we handle. Our approach is based on transparency, minimisation, security, and respect for your rights.

By using our services, you acknowledge that this Privacy Policy applies to all Gardeners Nine Elms customers in the area.