Privacy Policy - Gardeners Colyers

Gardeners Colyers is committed to protecting the privacy of all customers in the area we serve. This Privacy Policy explains how we collect, use, store, share, and protect personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Gardeners Colyers customers in area and to anyone who uses our services, requests a quote, makes an enquiry, or otherwise interacts with us.

1. Who We Are

For the purposes of data protection law, Gardeners Colyers is the data controller in relation to the personal data we collect and use in connection with our services. This means we decide how and why your information is processed. We take our responsibilities seriously and aim to handle personal information fairly, lawfully, and transparently.

2. Personal Data We Collect

We only collect data that is necessary for the operation of our services, customer support, administration, and legal compliance. The types of information we may collect include:

Identity details such as your name;
Contact details such as address, email address, and phone number;
Service details such as property access notes, work preferences, and job history;
Payment and billing information where needed for invoicing and accounting;
Communication records such as messages, calls, and email correspondence;
Technical information if you contact us through digital channels, such as device or usage data where relevant.

We do not seek to collect unnecessary or excessive information. We also do not intentionally collect special category data unless there is a clear and lawful reason to do so, such as where you choose to provide relevant information that we must record for safety or service delivery purposes.

3. How We Use Your Data

We use personal data for the following purposes:

To provide gardening and related services;
To arrange appointments, visits, and follow-up work;
To prepare quotations, invoices, and payment records;
To communicate with you about your service requests;
To manage our business operations and customer relationships;
To maintain accurate internal records;
To comply with legal, tax, and regulatory obligations;
To resolve disputes, complaints, or claims;
To improve service quality and customer experience.

We always aim to use your information in a way that is relevant, limited, and proportionate to the purpose for which it was collected.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal data. Gardeners Colyers relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. For example, we need your contact details and service address to provide gardening services, arrange visits, and issue invoices.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include keeping internal records, responding to enquiries, managing service quality, and protecting our business from fraud or misuse.

Legal Obligation

We may process data when required to meet legal obligations, including tax, accounting, insurance, and record-keeping requirements.

Consent

In limited situations, we may rely on your consent, for example if you agree to receive certain optional communications. Where consent is used, you may withdraw it at any time.

5. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as processors or, in some cases, independent controllers. We only share data where necessary and subject to appropriate safeguards.

Examples of processors may include:

Accounting and bookkeeping providers;
IT and data storage providers;
Administrative support services;
Payment processing services;
Communication tools used for business administration.

All processors are required to handle personal data securely, use it only on our instructions, and comply with data protection law. We do not sell your data. We do not share it for unrelated marketing purposes without a lawful basis.

We may also disclose information if required to do so by law, court order, regulatory authority, or to protect our legal rights, customers, or staff.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations. Retention periods depend on the type of information and the reason we hold it.

In general:

Customer and service records are kept for a period appropriate to the business relationship and any follow-up obligations;
Financial and tax records are retained for the period required by law;
Communication records are kept only as long as needed to handle enquiries, disputes, or service administration;
Information no longer needed is securely deleted or anonymised.

We regularly review the data we hold to ensure it is not kept for longer than necessary. Retention periods may vary depending on legal requirements and the nature of the service provided.

7. Data Security

We use reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and careful handling of records.

Although no system can be guaranteed to be completely secure, we work to keep your data safe and to respond appropriately if a data incident occurs.

8. Your Rights

You have important rights under data protection law. Subject to legal limits and conditions, these may include the right to:

Access the personal data we hold about you;
Rectify inaccurate or incomplete information;
Erase your data in certain circumstances;
Restrict how we process your information in certain situations;
Object to processing based on legitimate interests;
Data portability for information you provided to us where applicable;
Withdraw consent where we rely on consent;
Lodge a complaint with the Information Commissioner’s Office if you believe your rights have been violated.

We will respond to valid requests in accordance with legal requirements. Some rights may not apply in every case, especially where we must keep data for legal, contractual, or security reasons.

9. International Transfers

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place so that your information remains protected to a standard consistent with UK GDPR requirements.

10. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children unless it is necessary for a legitimate service-related purpose and is provided by an adult authorised to act on their behalf.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically to stay informed.

12. Your Responsibility

When you provide information to Gardeners Colyers, please make sure it is accurate and kept up to date. If any of your details change, notifying us promptly helps us maintain correct records and deliver services efficiently.

13. Summary of Our Commitment

Gardeners Colyers respects your privacy and aims to process personal data in a lawful, fair, and transparent manner. We collect only what we need, use it for clear purposes, keep it only as long as necessary, and protect it through appropriate safeguards. This policy applies to all Gardeners Colyers customers in area and reflects our ongoing commitment to responsible data handling.