Gardeners Barnes Cray Privacy Policy
This Privacy Policy explains how Gardeners Barnes Cray collects, uses, stores, and protects personal data relating to its customers and prospective customers. It applies to all Gardeners Barnes Cray customers and service users in the Barnes Cray area, including people who contact us about our gardening and related services.
Gardeners Barnes Cray is committed to complying with the UK General Data Protection Regulation and the Data Protection Act 2018. We process your personal data lawfully, fairly, and transparently, and only for specified and legitimate purposes.
Scope of this Privacy Policy
This Privacy Policy applies to personal data we process when you contact us, request a quote, book or receive services, visit any of our online pages or profiles, or otherwise interact with Gardeners Barnes Cray. By using our services or providing your personal data, you acknowledge that you have read and understood this Privacy Policy.
Personal Data We Collect
We only collect personal data that is relevant to organising, delivering, and improving our gardening and related services. The types of personal data we may collect include:
Identification and contact details, such as name, address in the Barnes Cray area or nearby, billing address if different, and general contact details necessary to communicate with you.
Service information, such as details of your property relevant to the services, service history, specific instructions or preferences, and any communications relating to bookings, queries, or complaints.
Billing and payment information, such as records of invoices issued, amounts paid, and payment method used. We do not store full payment card details; where card payments are used, these are processed by secure third-party payment processors.
Communications data, such as emails you send to us, notes from phone or in-person discussions about your requirements, and any feedback or testimonials you choose to provide.
Technical data, where applicable, such as basic information about how you interact with our online pages or profiles. This may include date and time of visits and general device or browser information, where this is required for security or service improvement.
Lawful Bases for Processing
We only process personal data where we have a lawful basis under data protection law. The main lawful bases we rely on are:
Contract. We process your personal data to take steps at your request before entering into a contract and to perform our contract with you. This includes providing quotes, arranging and delivering gardening services, and handling billing and payment matters.
Legitimate interests. We process your personal data where it is necessary for our legitimate interests or those of a third party, and where your interests and fundamental rights do not override those interests. This includes communicating with you about ongoing or upcoming services, improving our services, managing our business operations, preventing fraud, and handling customer queries and feedback.
Legal obligations. In some situations we are legally required to process certain personal data, such as retaining records for tax and accounting purposes.
Consent. Where required by law, we rely on your consent to send you certain types of marketing communications. You can withdraw your consent at any time by contacting us using the details provided in our customer documentation or by following any unsubscribe instructions we provide.
How We Use Your Personal Data
We use your personal data only for the purposes for which it was collected, or for closely related purposes that are compatible with the original purpose. These purposes include:
Providing and managing gardening and related services you request.
Preparing and sending quotes, confirmations, and invoices.
Scheduling and managing visits and ongoing maintenance.
Communicating with you about your bookings, queries, or complaints.
Improving our services, for example by reviewing feedback or service history.
Complying with legal and regulatory obligations.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, and to meet any legal, accounting, or reporting requirements.
Customer records, including contact details, service details, and invoice records, are generally retained for a period that allows us to manage our relationship with you, respond to any questions about past services, and comply with applicable legal obligations. After this period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be linked to you.
In determining the appropriate retention period, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and applicable legal requirements.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with carefully selected third parties where this is necessary for the operation of our business and the provision of our services, or where we have a legal requirement to do so.
Service providers acting as data processors may assist us with activities such as:
Payment processing.
Accounting and bookkeeping services.
IT support and data storage.
Customer management tools and systems.
These processors are only permitted to process your personal data on our instructions and for specified purposes. They must implement appropriate technical and organisational measures to protect your data and must not use it for their own purposes.
We may also need to share personal data with professional advisers, such as accountants or legal professionals, or with public authorities if we are required to do so by law.
Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures include restricting access to personal data to personnel and processors who need it for legitimate business purposes, using secure methods of storage where possible, and regularly reviewing our procedures to maintain an appropriate level of security.
Your Data Protection Rights
Under data protection law, individuals in the Barnes Cray area and throughout the UK have several rights in relation to their personal data. Subject to certain conditions and exemptions, you have the right to:
Access your personal data and receive a copy of the information we hold about you.
Request correction of inaccurate or incomplete personal data.
Request erasure of your personal data where there is no good reason for us to continue processing it, for example where it is no longer necessary for the purposes for which it was collected.
Object to the processing of your personal data where we are relying on legitimate interests and you believe your rights override those interests.
Request restriction of processing in certain circumstances, for example while we are verifying the accuracy of data or the basis for processing.
Request the transfer of your personal data to you or to another organisation where technically feasible and where the processing is based on consent or contract and carried out by automated means.
Withdraw consent at any time where we rely on consent to process your data. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
If you wish to exercise any of these rights, you can contact us using the contact details provided in our customer documentation or through the usual communication channels you use with Gardeners Barnes Cray. We may need to verify your identity before responding to your request.
Complaints and Contact
If you have concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the UK data protection authority, the Information Commissioners Office.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or legal requirements. Any updates will be made available through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.