Privacy Policy

Gardeners Maze Hill Privacy Policy

This Privacy Policy explains how Gardeners Maze Hill collects, uses, stores, and protects personal data relating to customers and prospective customers in the Maze Hill area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act. By using our gardening and related services, you acknowledge that you have read and understood this Policy.

Scope of this Privacy Policy

This Privacy Policy applies to all Gardeners Maze Hill customers and prospective customers located in the Maze Hill area, including individuals who make enquiries, book services, or otherwise interact with us in relation to our gardening services. It also covers personal data collected through verbal communication, written correspondence, and any other form of interaction with us.

Personal Data We Collect

We may collect and process the following categories of personal data:

Identification and contact details such as name, home or business address, billing address, and basic contact details necessary to manage your booking and provide our services.

Service details including information about your property that is relevant for the provision of gardening services, such as garden size, access arrangements, preferred service times, and any instructions related to the job.

Payment and transaction information such as records of payments made and amounts due. We do not store full payment card details where card processing is handled by a third-party payment processor.

Communication records including notes of conversations, correspondence, and information you provide when you contact us with questions, feedback, or complaints.

Usage and preference information relating to how often you book services, the type of services you request, and your preferences regarding service frequency and style of work.

How We Collect Personal Data

We collect personal data directly from you when you contact us, request a quotation, make a booking, or otherwise communicate with us regarding our services. This may occur by telephone, in writing, or in person.

We may also collect personal data during site visits and while performing gardening services, for example when we record specific instructions about your property or note access arrangements that are required to fulfil your booking.

Lawful Basis for Processing

We process your personal data only where we have a lawful basis under the UK GDPR. Depending on the circumstances, our lawful bases include:

Contract: We process personal data when it is necessary to enter into or perform a contract for gardening services with you, for example to manage bookings, schedule visits, and send invoices.

Legitimate interests: We may process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This may include activities such as managing our business records, improving our services, and handling general customer service.

Legal obligation: We process certain personal data where we are required to do so by law, such as for tax, accounting, and record-keeping obligations.

Consent: In limited cases, we may ask for your explicit consent, for example if we wish to send you certain types of optional marketing communications. Where consent is used as the lawful basis, you may withdraw your consent at any time.

How We Use Personal Data

We use your personal data for the following purposes:

To provide gardening and related services, including confirming bookings, planning and carrying out work at your property, and contacting you about appointments.

To manage customer accounts, including issuing quotations, invoices, and receipts, and keeping track of services provided and payments received.

To respond to enquiries, feedback, and complaints, and to provide customer support and follow-up communications as needed.

To manage our business operations, including keeping internal records, maintaining safety and security, and monitoring service quality.

To comply with legal and regulatory obligations, such as tax and accounting rules and obligations to regulatory authorities when applicable.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The retention period will depend on the type of data and the purposes of processing.

Customer and service records are generally kept for a reasonable period after the last interaction with you, so that we can answer queries about past work, handle any disputes, and keep accurate business records. Accounting and tax-related records are kept for the periods required by applicable law.

When personal data is no longer needed for the purposes for which it was collected and there is no legal requirement to keep it, we will securely delete or anonymise it.

Data Sharing and Processors

We do not sell your personal data. However, we may share your personal data with trusted third parties where necessary for the operation of our business and the provision of services to you.

These third parties may act as data processors on our behalf. Examples include external service providers that support our administrative, accounting, or payment processing activities. Such processors are only permitted to use your personal data in accordance with our instructions and for the specific purposes we have engaged them to perform, and they are required to implement appropriate technical and organisational measures to protect your data.

We may also share personal data with professional advisers such as accountants or legal advisers where this is necessary to obtain professional services or comply with legal obligations, and with public authorities where disclosure is required by law.

International Data Transfers

Our primary operations are based in the Maze Hill area. If we ever need to transfer personal data outside the United Kingdom or the European Economic Area, we will only do so where appropriate safeguards are in place to ensure a level of protection equivalent to that provided under the UK GDPR. This may include the use of standard contractual clauses or other lawful transfer mechanisms.

Data Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, secure storage, and limitation of personal data access to individuals who need it to carry out their duties.

While we strive to protect your personal data, no system can be completely secure. We therefore cannot guarantee absolute security, but we work to ensure that the risk of unauthorised access or disclosure is minimised.

Your Data Protection Rights

As a data subject, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions provided by law.

Right of access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, along with information about how it is used.

Right to rectification: You have the right to ask us to correct inaccurate personal data about you and to complete any incomplete information that we hold.

Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing.

Right to restriction of processing: You have the right to ask us to restrict the processing of your personal data in specific situations, such as while we are verifying the accuracy of data you believe is inaccurate.

Right to object: You may object to processing based on our legitimate interests, including any direct marketing activities, and we will stop such processing unless we can demonstrate compelling legitimate grounds or unless the processing is required for legal reasons.

Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your data protection rights have been infringed.

Children's Data

Our services are generally directed at adults and property owners in the Maze Hill area. We do not knowingly collect personal data relating to children for the purpose of providing gardening services. If we become aware that we have inadvertently collected such data, we will take steps to delete it where appropriate.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, business practices, or legal obligations. When we make changes, we will revise the date of the latest version. We encourage you to review this Policy periodically so that you remain informed about how we protect your personal data.