Privacy Policy - Gardeners Maze Hill

This Privacy Policy explains how Gardeners Maze Hill collects, uses, stores, shares, and protects personal data relating to customers and prospective customers in the Maze Hill area. It applies to all Gardeners Maze Hill customers in the area, including anyone who requests gardening services, receives a quotation, books an appointment, or otherwise interacts with us in connection with our services.

We are committed to handling personal information in a fair, lawful, and transparent way, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to help you understand what data we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your personal information.

1. Who We Are

Gardeners Maze Hill provides gardening and related outdoor maintenance services to homes and businesses in the Maze Hill area. In the course of providing these services, we may collect and use personal data about customers, property owners, tenants, authorised representatives, and other individuals involved in a service request or booking.

For the purposes of data protection law, Gardeners Maze Hill acts as a data controller when we determine the purposes and means of processing your personal data.

2. Information We Collect

We only collect personal data that is relevant, necessary, and proportionate to the services we provide. The types of information we may collect include the following:

Identity details such as your name, title, and, where applicable, the name of a business or property owner.
Contact details such as address, email address, and telephone number.
Service information such as details of the gardening work requested, appointment notes, access instructions, and service history.
Billing and payment information such as invoices, payment records, and transaction references.
Communication records including messages, call notes, feedback, complaints, and correspondence.
Property-related information such as garden size, site conditions, and service preferences.
Technical data where relevant, for example basic device or browser information if you contact us through digital channels.

We do not seek to collect sensitive personal data unless it is strictly necessary and you choose to provide it. If such data is ever needed, it will only be handled with an appropriate legal basis and additional safeguards.

3. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange and deliver gardening services.
To manage customer accounts, bookings, and schedules.
To issue invoices, process payments, and maintain financial records.
To communicate about service changes, access arrangements, or follow-up work.
To maintain quality, resolve disputes, and handle complaints.
To meet legal, tax, accounting, and regulatory obligations.
To protect against fraud, misuse, or unauthorised activity.

We will only use your information for purposes that are compatible with the reason it was collected. Where we need to use data for a new purpose, we will assess whether that use is lawful and, where required, notify you accordingly.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing activity. Gardeners Maze Hill relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you, such as providing a quotation, scheduling a visit, delivering gardening services, or managing payment for completed work.

Legitimate Interests

We may process data where we have a legitimate business interest and where your rights do not override that interest. This may include responding to enquiries, maintaining service records, improving our operations, and managing customer relationships. We always consider whether the processing is necessary and whether it has a fair impact on you.

Legal Obligation

We may process and retain certain information to comply with legal obligations, including record keeping for tax, accounting, insurance, and dispute resolution purposes.

Consent

In limited cases, we may rely on your consent, for example if you provide optional information that is not required for a service. Where consent is used, you may withdraw it at any time. Withdrawal will not affect processing carried out before consent was withdrawn.

5. Data Sharing and Processors

We may share personal data only when necessary and only with trusted third parties who assist us in delivering our services or meeting legal requirements. Such third parties act as processors or, in some cases, independent controllers.

Examples of processors may include:

Booking and scheduling providers used to manage appointments and service planning.
Accounting and bookkeeping services used to prepare invoices, record payments, and support financial administration.
IT and cloud storage providers used to store data securely and maintain systems.
Communication services used to send messages, confirmations, or service updates.
Professional advisers such as accountants, insurers, or legal advisers, where necessary.

All processors are required to handle personal data securely, use it only according to our instructions, and comply with data protection law. We do not sell personal data.

We may also disclose information where required by law, for example to comply with a court order, lawful request from authorities, or to defend legal claims.

6. Data Retention

We keep personal data only for as long as it is needed for the purposes for which it was collected, or as required by law. Retention periods may vary depending on the type of data and the reason for holding it.

Customer and service records are typically retained for the duration of the service relationship and for a reasonable period afterwards.
Financial records are retained for the period required by tax and accounting laws.
Correspondence and complaint records may be retained for a period needed to manage disputes and demonstrate proper handling.
Consent-based information is kept only while consent remains valid or until it is no longer needed.

When data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and careful management of third-party systems.

Although we take reasonable steps to protect your information, no system can be guaranteed to be completely secure. If a data breach occurs that is likely to pose a risk to your rights and freedoms, we will take appropriate action in accordance with legal requirements.

8. Your Rights

Under the UK GDPR, you have several rights in relation to your personal data. These include:

The right of access to obtain a copy of the personal data we hold about you.
The right to rectification to correct inaccurate or incomplete information.
The right to erasure in certain circumstances, sometimes called the right to be forgotten.
The right to restrict processing in certain situations.
The right to object to processing based on legitimate interests or direct marketing.
The right to data portability where processing is based on consent or contract and carried out by automated means.
The right to withdraw consent where consent is the basis for processing.

You also have the right to raise concerns about how your data is handled. If you believe your rights have been affected, you may request an internal review or seek guidance from the relevant supervisory authority.

Please note that some rights are not absolute and may be limited where we have a legal obligation or another lawful reason to keep processing or retaining information.

9. Children’s Data

Our services are generally aimed at adults who arrange gardening work. We do not knowingly collect personal data from children unless it is necessary in a limited and lawful context, such as where a property or service arrangement involves a family household. If we become aware that we have collected information from a child without a valid basis, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, service arrangements, or data handling practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers in the Maze Hill area to review this policy periodically so they remain informed about how their information is protected.

11. Summary of Key Principles

Gardeners Maze Hill follows the core principles of data protection by ensuring personal data is:

Used lawfully, fairly, and transparently
Collected for specific and legitimate purposes
Adequate, relevant, and limited to what is necessary
Accurate and kept up to date where possible
Kept only for as long as needed
Processed securely and with appropriate safeguards

This Privacy Policy is intended to give clear information about our data practices and to reassure customers that their information is handled with care and respect. By using our services, you acknowledge that we may process personal data as described in this policy and in accordance with applicable law.