Privacy Policy
Gardeners Holland Park Privacy Policy
This Privacy Policy explains how Gardeners Holland Park collects, uses, stores and protects personal data relating to its customers and prospective customers. It applies to all Gardeners Holland Park customers and service users in the area in which we operate, regardless of how you contact us or use our services.
Who We Are
Gardeners Holland Park is a garden maintenance and related services provider. For the purposes of data protection law, we are the controller of the personal data described in this Privacy Policy. This means we decide how and why your personal data is processed.
Scope Of This Privacy Policy
This Privacy Policy applies to all personal data we process about individuals who are customers, prospective customers, or individuals who make enquiries about our services. It covers data collected online, by telephone, in person and through any other communication methods used in the course of providing our services.
Personal Data We Collect
We only collect personal data that we need in order to provide and manage our services. The types of personal data we may collect include:
Identification and contact details, such as your name, postal address, the address of the property where services are provided, and other contact details.
Service and contract information, such as details of the services you request, quotations, bookings, service history, and communications about your requirements.
Billing and payment information, including details necessary to issue invoices and record payments, as well as information related to payment status. We do not store full payment card details; if card payments are used, these are processed by a secure payment processor.
Communication records, including emails, messages, notes of telephone calls, and any feedback or complaints you provide.
Usage and technical information, where relevant, such as basic technical information about how you interact with any online service we may offer, to the extent necessary for security and service improvement.
How We Collect Your Data
We collect personal data directly from you when you contact us to request a quote, make a booking, ask a question, provide feedback, or otherwise communicate with us. We may also collect personal data when we visit your property to assess or perform work. In some cases, we may receive your contact details via referrals from existing customers or business partners, in which case we will inform you of our Privacy Policy at the first appropriate opportunity.
Lawful Basis For Processing
We process your personal data only where we have a lawful basis under the UK General Data Protection Regulation and related data protection laws. The main lawful bases we rely on are:
Performance of a contract: We process your personal data to provide our gardening and related services, including arranging visits, managing bookings, issuing quotes, and fulfilling our contractual obligations.
Legitimate interests: We may process your personal data where it is necessary for our legitimate business interests, and where your interests and fundamental rights do not override those interests. This includes managing and improving our services, handling customer queries, maintaining accurate records, and protecting our business from fraud or misuse.
Legal obligations: We may process your data to comply with legal or regulatory obligations, for example in relation to accounting, taxation, or responding to lawful requests from authorities.
Consent: In limited circumstances, we may rely on your consent, for example if we send certain forms of direct marketing that require consent under applicable law. Where we rely on consent, you can withdraw your consent at any time.
How We Use Your Personal Data
We use personal data to:
Provide gardening and related services that you have requested, including site visits, maintenance, and follow up work.
Prepare and provide quotations, manage bookings and schedules, and communicate with you about appointments and work progress.
Issue invoices, process payments, and maintain accurate financial and service records.
Respond to your enquiries, requests, and complaints, and provide customer support.
Improve our services, plan our resources, and manage our relationship with you.
Meet legal, regulatory, and insurance requirements.
Data Sharing And Processors
We do not sell your personal data. We may share personal data with third parties only where necessary and lawful, including:
Service providers acting as processors, who provide services such as payment processing, bookkeeping, customer management tools, information technology support, and secure data storage. These parties only process your personal data on our instructions and under a written contract, and must keep it secure and confidential.
Professional advisers such as accountants, lawyers, or insurers, where necessary for the establishment, exercise or defence of legal claims, for compliance with legal obligations, or for the management of our business.
Public authorities or law enforcement agencies, where required by law or where necessary to protect our rights or the safety of others.
In all cases, we only share the minimum personal data necessary for the particular purpose.
International Transfers
If we use service providers that are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with data protection law. These safeguards may include using standard contractual clauses or ensuring that the recipient is based in a country that has been recognised as providing an adequate level of data protection.
Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, or as required by law.
Customer and contract records are typically retained for a period necessary to manage our relationship with you and to comply with legal and tax obligations.
Financial and invoicing records are kept for the duration required by applicable accounting and taxation laws.
Enquiry records and correspondence may be retained for a reasonable period in order to respond to queries, manage potential disputes, and improve our services.
When personal data is no longer needed, it is securely deleted or anonymised.
How We Protect Your Data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. These measures include limiting access to personal data to those who have a genuine business need to know, using secure systems and storage, and ensuring that staff and processors are subject to confidentiality obligations.
Your Data Protection Rights
You have a number of rights in relation to your personal data under data protection law. These include:
Right of access: You have the right to request confirmation as to whether we process your personal data and to request a copy of the personal data we hold about you.
Right to rectification: You have the right to ask us to correct any inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of the data or consider an objection you have raised.
Right to data portability: In some situations, you may request that we provide you or another controller with a copy of your personal data in a structured, commonly used, machine readable format.
Right to object: You have the right to object to processing based on our legitimate interests, including profiling, and to direct marketing. We will stop processing your personal data for direct marketing if you object.
Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Exercising Your Rights
If you wish to exercise any of your data protection rights, or if you have any questions about this Privacy Policy or how we handle personal data, you can contact us using the usual communication methods you use to engage with our services. We may need to verify your identity before responding to certain requests. We will respond to your request within the timescales required by law.
Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any significant changes will be communicated by reasonable means. The updated version will apply from the date it is published.
