Privacy Policy - Gardeners Alperton

This Privacy Policy explains how Gardeners Alperton collects, uses, stores, shares, and protects personal data when providing gardening services to customers in the Alperton area. It applies to all Gardeners Alperton customers in the area, including anyone who makes an enquiry, requests a quotation, books a service, or receives ongoing maintenance work. We are committed to handling personal data fairly, transparently, and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We only collect and use personal data where it is necessary for our business operations and where we have a lawful basis to do so. This policy is intended to help customers understand what information may be processed, why it is processed, how long it is kept, and what rights individuals have in relation to their information.

1. Data We Collect

Gardeners Alperton may collect different types of personal data depending on the nature of the service requested. The information collected is generally limited to what is needed to provide gardening services efficiently and safely.

Information you provide directly

Identity details such as your name or the name of a property manager, landlord, or authorised representative.
Contact details such as email address, telephone number, and service address.
Service details including the type of gardening work requested, preferred dates, property access notes, and relevant instructions.
Billing information such as invoicing name and payment-related records where required for administration.
Communication records including enquiries, feedback, complaints, and correspondence related to services.

Information collected automatically or indirectly

Operational records such as appointment logs, job completion notes, and service history.
Technical information when you interact with our digital systems, such as basic device or usage data used for security and functionality.
Property-related information where needed to plan safe work, such as garden size, access conditions, or instructions for plant care.

We do not intentionally collect special category data unless it is provided by you and is necessary for a specific legitimate reason, such as access requirements or health-related instructions affecting service delivery. Where special category data is processed, it is handled with additional care and only where permitted by law.

2. How We Use Personal Data

Gardeners Alperton uses personal data for the following purposes:

to respond to enquiries and provide quotations;
to schedule, deliver, and manage gardening services;
to maintain customer records and service history;
to arrange access, confirm appointments, and communicate service updates;
to issue invoices and manage accounts;
to handle complaints, disputes, and customer support;
to meet legal, tax, accounting, and insurance obligations;
to improve service quality, operational planning, and business administration;
to protect our business, staff, and customers from fraud, misuse, or security issues.

We only use personal data for the purposes for which it was collected, unless we reasonably consider that it is necessary for another compatible purpose and such use is permitted under data protection law.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each type of personal data processing. Gardeners Alperton relies on the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotations, confirming bookings, delivering gardening services, and handling payment administration.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include record-keeping, service improvement, customer support, planning work schedules, and protecting our business against misuse.

Legal obligation

We process certain information where necessary to comply with legal obligations, including tax, accounting, insurance, and regulatory requirements.

Consent

In limited cases, we may rely on your consent, for example where you voluntarily provide optional information or agree to specific uses of your data. Where consent is used, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Processors

Gardeners Alperton may share personal data with trusted third parties that act as data processors or independent controllers, but only where necessary and subject to appropriate safeguards.

Processors we may use

IT and cloud service providers that store secure business records or help maintain digital systems.
Accounting and invoicing providers used for financial administration and tax compliance.
Payment service providers that process transactions securely.
Customer management or scheduling tools that support booking and communications.
Professional advisers such as accountants or legal advisers where needed.

These processors are only permitted to process data on our instructions and for the agreed purpose. They are required to use appropriate technical and organisational measures to protect information.

We may also disclose data where required by law, by a court order, or to prevent fraud, protect safety, or defend legal claims. We do not sell personal data.

5. International Transfers

If any processor stores or accesses personal data outside the UK, we will ensure that appropriate safeguards are in place, such as an adequacy regulation, standard contractual clauses, or equivalent legal protections recognised under applicable law.

6. Data Retention

Gardeners Alperton keeps personal data only for as long as necessary for the purposes described in this policy. Retention periods may vary depending on the type of information and the legal or operational requirements involved.

Enquiry records are typically kept for a limited period after the enquiry is closed, unless they lead to a customer relationship.
Customer service records are usually retained for the duration of the service relationship and for a reasonable period afterwards.
Financial and accounting records are retained for the period required by tax and accounting law.
Communication records may be kept for as long as needed to manage service issues, prevent disputes, or meet legal obligations.

When data is no longer required, it is securely deleted or anonymised. Where deletion is not immediately possible, for example due to backup systems, the data will remain protected and inaccessible for ordinary use until deletion is feasible.

7. Data Security

We take reasonable and appropriate technical and organisational measures to protect personal data from accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, restricted permissions, and staff awareness procedures.

Although no system can be guaranteed to be completely secure, Gardeners Alperton works to minimise risks and to respond promptly if a data issue occurs. Where a personal data breach presents a risk to your rights and freedoms, we will handle it in line with legal requirements.

8. User Rights

Individuals whose data we process have rights under UK GDPR. These rights may apply depending on the circumstances and legal limitations.

Your rights include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of personal data in certain situations.
Right to restriction – to request that processing be limited in certain cases.
Right to object – to object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – to receive certain data in a structured, commonly used format where the legal criteria are met.
Right to withdraw consent – where processing is based on consent.

If you wish to exercise any of these rights, we will review your request and respond within the timeframe required by law. In some cases, we may need to retain certain information for legal, accounting, or operational reasons.

9. Children’s Data

Our services are intended for adult customers and property-related arrangements. We do not knowingly collect personal data from children except where it is incidentally included in service-related communication and only when necessary and lawful.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. The latest version will apply to all Gardeners Alperton customers in the area. We encourage customers to review this policy periodically so they remain informed about how personal data is handled.

Summary: Gardeners Alperton is committed to protecting customer data in line with UK GDPR, with clear rules on collection, lawful use, retention, sharing, and user rights.