Privacy Policy - Gardeners Pentonville

Effective for all Gardeners Pentonville customers in the area. This Privacy Policy explains how personal data is collected, used, stored, shared, and protected when you use services provided by Gardeners Pentonville. We are committed to handling personal information lawfully, fairly, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.

1. Introduction

Gardeners Pentonville respects your privacy and recognises the importance of protecting personal data. This policy applies to all customers, prospective customers, and other individuals in the Pentonville area who interact with our gardening services. It sets out the types of information we collect, the reasons we collect it, the lawful bases we rely on, how long we keep it, who may process it on our behalf, and the rights available to you under data protection law.

By using our services, making an enquiry, or otherwise providing personal data to us, you acknowledge that your information will be handled as described in this policy. We encourage you to read it carefully so that you understand how and why your data is used.

2. Data We Collect

We only collect personal data that is relevant and necessary for delivering our services, managing customer relationships, and meeting legal or operational obligations. The data we collect may include:

Identity information: name, title, and, where applicable, business name.
Contact information: address, email address, telephone number, and service location details.
Service and booking information: details of requested gardening services, appointment times, property access notes, and service preferences.
Billing and payment information: invoicing records, transaction references, and payment status. We do not store unnecessary payment card details.
Communication records: messages, feedback, complaints, and correspondence relating to quotes or ongoing work.
Technical information: limited data such as device or browser details if you interact with our digital systems, where applicable.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily or a legal basis applies. If such information is ever received, it will be handled with enhanced care and only for a legitimate purpose.

3. How We Use Your Data

Gardeners Pentonville uses personal data to provide, manage, and improve our services. Typical uses include:

responding to enquiries and providing quotes;
arranging bookings, carrying out services, and managing customer accounts;
issuing invoices, processing payments, and keeping financial records;
communicating about appointments, changes, or service updates;
dealing with complaints, claims, or service-related issues;
maintaining business records and meeting legal obligations;
improving our service quality, efficiency, and customer experience.

We will only use your personal data for the purpose for which it was collected, unless we reasonably determine that we need to use it for another compatible purpose and we have a lawful basis to do so.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Gardeners Pentonville relies on the following lawful bases:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes quoting, booking, providing gardening services, invoicing, and managing customer requests.

Legal obligation

We may process data where it is required to comply with legal duties, such as tax, accounting, record-keeping, and other regulatory obligations.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. This may include maintaining service records, improving our operations, preventing fraud, and managing customer communications. We ensure that any reliance on legitimate interests is balanced and proportionate.

Consent

In limited cases, we may rely on your consent, especially where it is required for certain forms of communication or optional processing. Where consent is used, you have the right to withdraw it at any time.

We only process personal data where a lawful basis exists. If the basis changes, we will take appropriate steps to inform you where required.

5. Data Sharing and Processors

We do not sell your personal data. However, we may share it with trusted third parties where necessary to operate our business and deliver services. These parties act as data processors or independent controllers depending on their role.

Examples of processors may include:

IT and hosting providers who support storage, email, or system security;
payment service providers who process transactions securely;
accounting or bookkeeping providers who help manage financial records;
software and scheduling providers used for customer administration;
professional advisers such as accountants or legal advisers where needed;
subcontractors or field operatives engaged to assist with service delivery, where applicable.

All processors are required to handle personal data securely, only on our instructions, and in compliance with data protection law. We take reasonable steps to ensure they have appropriate technical and organisational measures in place.

We may also disclose personal data if required by law, to protect our legal rights, or to prevent harm, fraud, or unlawful activity. If data is transferred outside the UK, we will ensure that appropriate safeguards are in place.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, and to satisfy any legal, accounting, or reporting obligations. Retention periods vary depending on the type of data and the purpose of processing.

In general:

customer service and booking records are kept for a reasonable period after the service ends;
financial and invoicing records are retained for the period required by tax and accounting law;
complaints and correspondence may be kept longer where needed to resolve issues or defend legal claims;
consent-based records are kept until consent is withdrawn or no longer needed.

When personal data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a safe and lawful manner.

7. Data Security

Gardeners Pentonville takes the security of personal data seriously. We use appropriate safeguards to protect information against accidental loss, unauthorised access, misuse, alteration, or disclosure. These safeguards may include access controls, secure storage, staff confidentiality obligations, and responsible processor management.

Although no system can be guaranteed completely secure, we work hard to maintain a high standard of protection and regularly review our practices. Confidentiality, integrity, and availability of personal data are key priorities in our operations.

8. Your Rights

As a data subject under UK GDPR, you have certain rights regarding your personal data. Subject to legal conditions and exemptions, these rights may include:

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you can request deletion of your data in certain circumstances.
Right to restrict processing: you can ask us to limit how we use your data in specific cases.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you can ask for data you provided to us in a structured, commonly used format where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to raise concerns directly first so we can try to resolve them promptly.

9. Children’s Data

Our services are generally intended for adult customers. We do not knowingly collect personal data from children unless it is necessary for a service request and is provided by a parent, guardian, or authorised adult. Where children’s data is involved, it is handled carefully and only for a specific, lawful purpose.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We recommend reviewing this policy periodically to stay informed about how we protect your information.

11. Summary of Our Commitment

Gardeners Pentonville is committed to responsible data protection practices. We collect only the information needed to provide our services, use it for clear and lawful purposes, keep it only as long as required, and share it only with trusted processors or where legally necessary. Your privacy matters to us, and we strive to handle all personal data with care, respect, and accountability.

This policy applies to all Gardeners Pentonville customers in the area.