Privacy Policy - Gardeners Chalk Farm

Gardeners Chalk Farm is committed to protecting the privacy and personal data of all customers in the Chalk Farm area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Gardeners Chalk Farm customers in the area, including current, former, and prospective customers who use our gardening services.

1. Scope of This Policy

This Privacy Policy applies to personal data processed in connection with our gardening services, including garden maintenance, planting, lawn care, pruning, landscaping support, seasonal tidy-ups, and related customer service activities. It covers data collected when you request a quote, make an enquiry, book a service, receive an invoice, or communicate with us in any way.

We are committed to ensuring that personal data is handled fairly, lawfully, and transparently. We only collect information that is necessary for business operations and service delivery, and we do not use personal data in ways that are incompatible with the reasons it was collected.

2. Data We Collect

Gardeners Chalk Farm may collect and process the following categories of personal data:

Identity details such as your name or the name of your household or business contact.
Contact details such as phone number and email address.
Service details such as property access notes, garden preferences, appointment history, and service instructions.
Billing and payment information where required to issue invoices, record payments, and manage accounts.
Communication records including emails, call notes, message content, and complaint or feedback information.
Technical data such as basic website or device information if you interact with our online forms or digital systems.
Special notes that you voluntarily provide, for example access requirements or timing preferences relevant to service delivery.

We do not intentionally collect special category data unless it is strictly necessary and you have chosen to provide it, or unless another lawful reason applies. If such data is ever processed, we will do so with extra safeguards and only where permitted by law.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange and deliver gardening services.
To manage customer accounts, scheduling, and service records.
To issue invoices, process payments, and maintain financial records.
To communicate with customers about appointments, service updates, or changes.
To deal with complaints, requests, or customer support matters.
To improve our services, operations, and customer experience.
To comply with legal, tax, insurance, and regulatory obligations.

We only process personal data where it is relevant and necessary for a clear purpose. We make every effort to ensure the data used is accurate, up to date, and limited to what is required.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing personal data. Gardeners Chalk Farm relies on the following lawful bases:

Contract

We process data where it is necessary to perform a contract with you, or to take steps at your request before entering into a contract. This includes handling service bookings, providing quotations, confirming appointments, and carrying out gardening work.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include record-keeping, service administration, customer communication, security, and business improvement.

Legal Obligation

We process some information to comply with legal obligations, such as accounting, tax, insurance, and record-keeping requirements. This can include maintaining invoices and transaction records for statutory purposes.

Consent

Where consent is needed, we will ask for it clearly and separately. For example, if we ever need to use optional data for a purpose not covered by another lawful basis, we will rely on your freely given consent. You may withdraw consent at any time where consent is the basis for processing.

Important: we do not sell customer data, and we do not use personal information for unrelated marketing without a lawful basis.

5. Data Sharing and Processors

We may share personal data with trusted third-party processors who help us operate our services. These processors only act on our instructions and are required to keep personal data secure and confidential.

Examples of processors or service providers may include:

Accounting or bookkeeping providers.
Payment processing services.
Administrative or scheduling systems.
Email or communication service providers.
IT support or data storage providers.
Professional advisers, such as insurers or legal advisers, where necessary.

We may also disclose data where required by law, regulation, court order, or to prevent fraud, manage security risks, or protect our legal rights. If a processor is used, we take reasonable steps to ensure a data processing agreement is in place and that the processor provides suitable safeguards.

6. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, including to meet legal, accounting, or reporting obligations. Retention periods may vary depending on the type of data and the context in which it was collected.

Typical retention principles include:

Customer service records are kept while the customer relationship remains active and for a reasonable period afterward.
Financial and invoice records are retained for the period required by tax and accounting law.
Communication records are kept for as long as needed to manage the enquiry, service issue, or ongoing relationship.
System and security logs may be retained briefly for operational and security reasons.

When data is no longer needed, we will securely delete, anonymise, or destroy it. Retention is reviewed regularly to ensure we do not keep personal data longer than necessary.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include restricted access, secure storage, password protection, and procedural controls.

While no system can guarantee absolute security, we take reasonable steps to reduce risk and protect customer information. If we become aware of a data breach that may affect your rights and freedoms, we will assess the situation and take action in line with legal requirements.

8. User Rights

As a data subject under the UK GDPR, you have certain rights regarding your personal data. These rights may apply depending on the circumstances and the lawful basis for processing.

Your rights include:

Right of access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete data.
Right to erasure - you can request deletion of your data in certain cases.
Right to restriction - you can ask us to limit how we use your data in certain situations.
Right to object - you can object to processing based on legitimate interests in certain cases.
Right to data portability - you can request transfer of data you provided to us, where applicable.
Right to withdraw consent - where consent applies, you may withdraw it at any time.

You also have the right to raise a concern with the UK Information Commissioner’s Office if you believe your data has not been handled properly. We encourage you to raise concerns with us first so we can review and address them promptly.

9. Children’s Data

Our services are intended for adults and property-related customers. We do not knowingly collect personal data from children for marketing or routine service purposes. If information relating to a child is incidentally provided, it will only be processed where necessary and lawful.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or how we handle personal data. Any updates will take effect when published in the revised version. We recommend reviewing this policy periodically to stay informed about how your information is protected.

11. Summary of Our Commitment

Gardeners Chalk Farm respects privacy and treats customer data with care and responsibility. We collect only the information needed to deliver gardening services, rely on clear lawful bases for processing, retain data only as long as required, and use trusted processors under appropriate safeguards. We are committed to transparency, security, and respect for your rights.

By using our services, you acknowledge that this Privacy Policy applies to all Gardeners Chalk Farm customers in the area.