Privacy Policy - Gardeners Belvedere

Gardeners Belvedere is committed to protecting the privacy and personal data of all customers in the area we serve. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Gardeners Belvedere customers in the area, including prospective customers, current customers, and individuals who enquire about our gardening services.

We believe in transparency and fairness. This policy is designed to help you understand what data we process, why we process it, and the rights you have over your information. By using our services or interacting with us, you acknowledge that your data may be handled as described below.

1. Information We Collect

We collect only the personal data that is necessary for us to provide reliable gardening services, manage customer relationships, and meet legal obligations. The information we may collect includes:

Identity details such as your name and title.
Contact details such as your address, telephone number, and email address.
Service details such as the type of gardening work requested, property access instructions, appointment times, and service preferences.
Billing and payment information necessary to process invoices, payments, refunds, or account records.
Communication records including messages, feedback, complaints, and notes of conversations.
Technical information if you interact with us electronically, such as basic device or usage data required to maintain secure systems.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it yourself for a specific reason. Special category data includes information relating to health, religion, race, political opinions, or other sensitive matters. If such information is ever provided, we treat it with extra care and only process it where the law permits.

2. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To deliver gardening services at your property.
To schedule visits, manage staff or contractor attendance, and coordinate service delivery.
To issue invoices, receive payments, and maintain financial records.
To communicate updates about appointments, service changes, or account matters.
To handle complaints, resolve disputes, and improve our services.
To comply with legal, tax, insurance, and regulatory obligations.
To protect our business, our staff, and our customers from fraud, misuse, or security incidents.

We only use your data for the purposes for which it was collected, unless we reasonably believe a compatible purpose applies or the law requires otherwise.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. Gardeners Belvedere relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotes, delivering services, managing appointments, and issuing invoices.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer records, improving service quality, preventing fraud, and maintaining business security. We always consider whether the processing is necessary and proportionate.

Legal Obligation

We may process and retain certain information where required to comply with law, including tax rules, accounting requirements, insurance obligations, or lawful requests from authorities.

Consent

In limited situations, we may rely on your consent, for example where you choose to provide optional information or agree to a particular communication method. Where consent is used, you can withdraw it at any time.

4. Data Sharing and Processors

We do not sell personal data. However, we may share limited information with trusted third parties who help us operate our business. These parties act as processors or, in some cases, independent controllers. Where they act as processors, they only process data on our instructions and are required to protect it appropriately.

Examples of processors may include:

IT and hosting providers that maintain secure systems and data storage.
Accounting or bookkeeping providers that support invoicing and financial administration.
Payment service providers that handle transaction processing.
Communication tools used to send service-related messages.
Professional advisers such as legal or insurance advisers, where necessary.

We may also disclose information where required by law, to protect our rights, to prevent fraud or abuse, or in connection with a business reorganisation or transfer, provided appropriate safeguards are in place.

Whenever we use third-party processors, we take steps to ensure they provide suitable technical and organisational security measures. We choose suppliers carefully and only share the minimum data needed for the relevant service.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the purpose for which it was collected.

Customer records are generally retained for the duration of the service relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law.
Communication records are retained as long as needed to manage enquiries, complaints, or ongoing service matters.
Security logs are kept only for the period necessary to maintain system integrity and investigate incidents.

When data is no longer needed, we will delete it securely or anonymise it so it can no longer identify you. Retention is based on necessity, proportionality, and legal requirements.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, password protection, secure storage, staff training, and supplier due diligence.

Although we work hard to safeguard information, no system can be guaranteed to be completely secure. If a data incident occurs, we will assess the situation and take the steps required by law, which may include notifying affected individuals and the relevant authorities where appropriate.

7. Your Rights Under GDPR

You have a number of rights under data protection law. These rights may apply depending on the circumstances and the legal basis for processing. Your rights include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can request deletion of your data in certain circumstances.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests, and in some cases to direct marketing.
Right to data portability – you may request a copy of data you provided to us in a structured, commonly used format where applicable.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in line with data protection law. We may need to verify your identity before acting on a request. Some rights are not absolute and may be limited where we have a legal obligation or legitimate ground to continue processing.

8. Children’s Data

Our services are intended for adult customers or individuals acting on behalf of property owners, tenants, or organisations. We do not knowingly collect children’s personal data unless it is provided incidentally and is necessary for a service-related purpose. If we become aware that we have collected data from a child without an appropriate basis, we will take steps to delete it where required.

9. International Transfers

Where personal data is transferred outside the UK, we will only do so where appropriate safeguards are in place and the transfer is permitted by law. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms designed to protect your information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updated version will apply from the date it is issued. We encourage customers to review the policy periodically so they remain informed about how their data is handled.

11. Summary of Our Commitment

Gardeners Belvedere processes personal data fairly, lawfully, and transparently. We collect only what we need, use it for clear and legitimate purposes, keep it only as long as necessary, and share it only with trusted processors or where required by law. Our approach is built around privacy by design, careful retention, and respect for your rights.

By continuing to use our services, you confirm that you have read and understood this Privacy Policy and that it applies to all Gardeners Belvedere customers in area.