Privacy Policy - Gardeners Barnes Cray

Gardeners Barnes Cray is committed to protecting the privacy and personal data of all customers in the area. This Privacy Policy explains how we collect, use, store, and share personal information, and it sets out the rights available to you under applicable data protection law, including the UK GDPR and the Data Protection Act 2018. This policy applies to all Gardeners Barnes Cray customers in area, whether you contact us for an estimate, request a service, make an enquiry, or receive ongoing gardening work.

1. Who we are

For the purposes of data protection law, Gardeners Barnes Cray acts as the data controller for the personal data we process in connection with our services. This means we decide how and why your personal data is used. We only process personal data where we have a lawful basis to do so and where it is necessary for providing our services, managing our relationship with you, or meeting legal obligations.

2. Information we collect

We collect only the information needed to provide and manage our gardening services. The categories of personal data we may collect include:

Identity details such as your name and title.
Contact details such as address, email address, and telephone number.
Service details including property access notes, gardening preferences, and instructions relevant to the work requested.
Billing and payment information where needed to issue invoices, record payments, or manage account records.
Communication records such as messages, call notes, quotation requests, complaints, and service updates.
Technical information where you interact with digital systems we use, such as basic device or usage data collected through security or operational logs.

We do not intentionally collect special category data unless it is necessary and you have provided it to us for a specific reason. If such data is ever needed, it will be handled with extra care and in line with legal requirements.

3. How we use your data

We use your personal data to operate our services efficiently and responsibly. Typical uses include:

responding to enquiries and providing quotations;
arranging and delivering gardening services;
managing customer records and service history;
issuing invoices and processing payments;
handling complaints, feedback, and follow-up communication;
maintaining security, fraud prevention, and administrative records;
meeting legal, accounting, and regulatory obligations.

We only use your information for specific, explicit, and legitimate purposes. We will not use it in a way that is incompatible with those purposes without first ensuring that we have a valid legal basis to do so.

4. Lawful basis for processing

Under GDPR, we must have a lawful basis to process personal data. Gardeners Barnes Cray may rely on one or more of the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing a quotation, arranging service visits, carrying out agreed gardening work, and managing payment or billing matters.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. Examples include improving service quality, keeping internal records, preventing misuse, and managing customer relationships.

Legal obligation

We may process and retain certain data to comply with legal obligations, such as tax, accounting, and record-keeping requirements.

Consent

Where required by law, we will ask for your consent before processing your data. If we rely on consent, you may withdraw it at any time. Withdrawal of consent will not affect processing already carried out lawfully before it was withdrawn.

5. Data sharing and processors

We may share personal data with trusted processors who act on our behalf and only process data under our instructions. These may include:

accounting or bookkeeping providers;
payment service providers;
IT support and secure data storage providers;
administrative systems used for scheduling, invoicing, or record management;
professional advisers, such as legal or tax advisers, where necessary.

All processors are required to protect personal data, use it only for the agreed purpose, and apply appropriate technical and organisational security measures. We do not sell your personal data.

In some cases, we may also disclose information if required by law, court order, or lawful request from public authorities. If a business restructure or transfer occurs, customer data may be transferred as part of that process, subject to appropriate safeguards.

6. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods depend on the type of information and the reason we hold it.

Customer and service records are generally retained for the period needed to manage the relationship and handle any follow-up issues.
Financial and tax records are kept for the period required by law and accounting rules.
Communication records may be retained for a reasonable time to support customer service, dispute resolution, and operational needs.

When data is no longer needed, we will securely delete, anonymise, or destroy it. We regularly review retention needs to ensure we do not keep information for longer than necessary.

7. Data security

We take the security of personal data seriously and use appropriate safeguards to protect it from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include restricted access, secure storage, staff awareness, and controlled use of service systems. While no system can be guaranteed completely secure, we aim to apply a level of protection appropriate to the risk.

8. Your rights

Under data protection law, you have a number of rights in relation to your personal data. These rights are not absolute and may be subject to legal conditions. They include:

Right of access – you can ask for a copy of the personal data we hold about you.
Right to rectification – you can request correction of inaccurate or incomplete data.
Right to erasure – in certain circumstances, you can ask us to delete your personal data.
Right to restrict processing – you can ask us to limit how we use your data in some situations.
Right to object – you can object to processing based on legitimate interests, including direct marketing where applicable.
Right to data portability – in some cases, you can request your data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you may withdraw that consent at any time.

If you wish to exercise any of these rights, we will respond in line with legal timeframes and requirements. We may need to verify your identity before acting on your request.

9. International transfers

Where any processor or service provider stores or accesses data outside the UK, we will ensure appropriate safeguards are in place to protect your information in accordance with applicable law. These safeguards may include approved contractual protections and security standards.

10. Children’s data

Our services are intended for adult customers and property owners or occupiers. We do not knowingly collect personal data from children except where it is incidental and necessary for service delivery or legal compliance. If we become aware that we have collected data inappropriately, we will take steps to delete it where required.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or how we process personal data. The most current version will apply to your use of our services. We encourage you to review this policy periodically so that you remain informed about how your data is handled.

12. Summary of your privacy protections

In summary, Gardeners Barnes Cray collects only the information needed to provide gardening services, uses it for clear and lawful purposes, keeps it only as long as required, and shares it only with trusted processors or where the law requires it. We aim to be transparent, fair, and secure in all our data handling practices.

By using our services, you acknowledge that this Privacy Policy applies to all Gardeners Barnes Cray customers in area.