Privacy Policy - Gardeners Crews Hill

This Privacy Policy explains how Gardeners Crews Hill collects, uses, stores, and protects personal data for all customers in the Crews Hill area and any other individuals who interact with our services. We are committed to handling personal information in a lawful, fair, and transparent way in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Gardeners Crews Hill customers in area, including people who request quotes, book services, receive garden maintenance, landscaping, or related support, or otherwise engage with our team. By using our services, you acknowledge that your personal data may be processed as described below.

1. Information We Collect

We only collect information that is necessary for delivering our services, managing customer relationships, and meeting legal or operational obligations. The categories of data we may collect include:

Identity details such as your name and, where relevant, business or property name.
Contact details such as address information, email address, and telephone number.
Service information such as the type of gardening work requested, property access notes, service preferences, and appointment details.
Communication records including messages, enquiries, complaints, and service updates.
Billing and transaction data such as payment status, invoices, and records of services provided.
Technical information if you interact with digital systems, such as basic usage data, device information, or log records.

We do not seek to collect more data than necessary. Where special category data is ever required, for example if you voluntarily share information that could reveal health or accessibility needs, we will handle it with extra care and only where a lawful basis exists.

2. How We Use Personal Data

Gardeners Crews Hill uses personal data for the following purposes:

to provide quotations and manage bookings;
to carry out gardening and related services safely and effectively;
to communicate about appointments, service changes, or follow-up actions;
to maintain accurate customer and accounting records;
to respond to enquiries, feedback, or complaints;
to improve our services, processes, and customer experience;
to comply with legal, tax, and regulatory obligations;
to establish, exercise, or defend legal claims if required.

We will only use your data in ways that are compatible with the purpose for which it was collected. If we need to use your personal information for a new purpose, we will make sure that we have a valid lawful basis and, where required, provide additional notice.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for every processing activity. Gardeners Crews Hill relies on the following lawful bases where appropriate:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotes, booking services, delivering gardening work, issuing invoices, and managing customer accounts.

Legitimate Interests

We may process personal data based on our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include handling enquiries, improving service quality, maintaining records, preventing misuse, and managing internal administration.

Legal Obligation

We may process and retain certain records to comply with legal requirements, including tax, accounting, and business record-keeping duties.

Consent

In limited circumstances, we may rely on your consent, for example where you agree to receive optional marketing messages. If consent is used, you can withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties that help us operate our business. These third parties act as processors when they handle data on our behalf and under our instructions. We require them to protect personal information and use it only for agreed purposes.

Examples of processors may include:

IT and hosting providers that support secure storage, email, or software systems;
administrative service providers that help manage bookings, scheduling, or record keeping;
payment and invoicing providers that process transactions;
professional advisers such as accountants or legal advisers where necessary;
service contractors or subcontractors who assist in delivering agreed work, subject to confidentiality and data protection obligations.

We may also disclose data where required by law, regulation, court order, or other legal process. We do not sell your personal data.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Retention periods may vary depending on the nature of the data and the service provided.

Customer and service records are generally retained for as long as needed to manage the relationship and handle any follow-up issues.
Financial and tax records are retained for the period required by law.
Enquiry records may be held for a reasonable period to support administration and service continuity.
Consent-based marketing records are kept until consent is withdrawn or the data is no longer needed.

When information is no longer required, we take appropriate steps to securely delete, anonymise, or destroy it.

6. Security of Personal Data

We use appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include access controls, secure systems, confidentiality practices, and data minimisation.

While no method of transmission or storage can be guaranteed to be completely secure, we take reasonable steps to reduce risk and safeguard your information. Access to personal data is limited to people who need it for legitimate business purposes.

7. International Transfers

Where any processor or system may involve data being transferred outside the UK, we will ensure that suitable safeguards are in place. This may include an adequacy decision, standard contractual clauses, or other lawful transfer mechanisms permitted under data protection law.

8. Your Rights

As a data subject under GDPR, you have several rights regarding your personal information. These rights may apply depending on the legal basis for processing and the circumstances of the request.

Right of access - you can ask for a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete data.
Right to erasure - in some cases, you can request deletion of your data.
Right to restriction - you can ask us to limit how we use your data in certain situations.
Right to object - you can object to processing based on legitimate interests or direct marketing.
Right to data portability - you may request transfer of certain data where processing is based on consent or contract and carried out by automated means.
Right to withdraw consent - where consent is used, you may withdraw it at any time.

If you wish to exercise any of these rights, we will assess the request in accordance with applicable law. In some cases, we may need to retain certain information to meet legal obligations or defend a legal claim.

9. Children’s Data

Our services are intended for adult customers and property owners or authorised representatives. We do not knowingly collect personal data from children unless it is necessary and lawful in connection with a service arrangement and appropriate safeguards are in place.

10. Cookies and Similar Technologies

If we use cookies or similar technologies within digital systems, they will be used only for legitimate operational, security, or analytical purposes. Where consent is required, we will request it before placing non-essential cookies. You may adjust browser settings to limit or block cookies, although this may affect some functionality.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. Any updated version will apply from the date it is made available. We encourage customers to review the policy periodically so they remain informed about how their data is used.

12. How We Apply This Policy

This policy is designed to be clear, practical, and fully aligned with our service activities. It applies to all Gardeners Crews Hill customers in area and covers data collected before, during, and after service provision where relevant. We aim to treat every customer fairly, respect privacy, and use personal information only when it is necessary and lawful.

Gardeners Crews Hill is committed to maintaining trust and transparency in every stage of service delivery. We regularly review our data handling practices to ensure that they remain proportionate, secure, and compliant with current data protection standards.

Last reviewed: this policy should be updated as needed to reflect operational or legal changes.