Privacy Policy - Gardeners Sipson

Gardeners Sipson is committed to protecting the privacy and personal data of every customer we serve in the Sipson area and surrounding local area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you enquire about, book, or receive our gardening and related services. It also explains the rights available to you under the UK GDPR and the Data Protection Act 2018.

This policy applies to all Gardeners Sipson customers in the area, including household customers, landlords, tenants, and business clients who use our services within our operating area.

1. Who We Are

For the purposes of data protection law, Gardeners Sipson acts as the data controller for the personal information we collect and use in connection with our services. This means we decide why and how your personal data is processed. Where we use third-party service providers to help us deliver our services, those parties may act as data processors on our behalf.

2. What Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing customer relationships, and meeting legal obligations. The types of information we may collect include:

Identity details such as your name or business name.
Contact details such as address, email address, and telephone number.
Service details such as the type of gardening work requested, service preferences, appointment notes, and property access instructions.
Communication records including messages, enquiries, complaints, feedback, and correspondence.
Billing and payment information such as payment status, invoice details, and transaction records.
Technical information if you interact with our digital services, such as IP address, device details, or browser information, where applicable.
Marketing preferences if you choose to receive updates or promotional communications from us.

We do not intentionally collect special category data unless it is absolutely necessary and permitted by law. If such information is ever provided to us accidentally, we will handle it with extra care and only for a valid lawful purpose.

3. How We Collect Your Data

We may collect personal data in the following ways:

Directly from you when you request a quote, make a booking, or communicate with us.
When you provide details during service delivery or follow-up correspondence.
From third parties acting on your behalf, such as property managers or landlords where they are arranging services for you lawfully.
From service partners or processors where needed to complete payment, scheduling, or administration tasks.

We aim to keep data collection fair, lawful, and transparent, and we only use information for purposes that are compatible with the reason it was collected.

4. Why We Use Your Personal Data

Gardeners Sipson uses personal information for several legitimate business and legal purposes, including:

To respond to enquiries and provide quotations.
To schedule, deliver, and manage gardening services.
To maintain accurate customer records.
To process invoices, payments, and account-related matters.
To communicate service updates, appointment details, or changes.
To handle feedback, complaints, and service quality matters.
To comply with legal, accounting, and tax obligations.
To improve our services, processes, and customer experience.
To protect our business, customers, and staff from fraud, misuse, or unlawful activity.

We do not sell personal data. We also do not use your data in a way that is incompatible with the original purpose for which it was collected unless we have a lawful basis to do so.

5. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process your personal data. Gardeners Sipson relies on the following lawful bases depending on the context:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotations at your request, confirming bookings, delivering services, and managing payments related to the services we provide.

Legitimate Interests

We may process your data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include managing customer relationships, improving our service quality, preventing fraud, and maintaining business records. When relying on legitimate interests, we always consider whether the processing is reasonable and proportionate.

Legal Obligation

We process certain information when necessary to comply with legal or regulatory obligations, such as accounting, tax, and record-keeping requirements.

Consent

Where required by law, we will ask for your consent before sending certain marketing communications or using your data for optional purposes. You can withdraw consent at any time, and doing so will not affect the lawfulness of processing carried out before withdrawal.

6. Sharing Your Data and Processors

We share personal data only when necessary and only with trusted parties who support our business operations. These third parties may act as processors and are required to handle data securely, follow our instructions, and comply with data protection law.

Examples of processors or service providers may include:

Payment service providers used to process transactions.
Accounting or bookkeeping providers.
IT support, data storage, or software providers.
Administrative support services used to manage bookings or records.
Professional advisers, such as legal or tax advisers, where necessary.

We may also disclose personal data where required by law, court order, or lawful request from public authorities. Any sharing will be limited to what is necessary and appropriate for the relevant purpose.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the reason we hold it.

In general:

Customer and service records are retained for the period needed to manage the business relationship and after it ends, where necessary for legal or operational reasons.
Financial and transaction records are retained for the period required by tax and accounting law.
Marketing preferences are retained until you withdraw consent or ask us to stop using your information for that purpose.

When data is no longer needed, it will be securely deleted or anonymised so it can no longer identify you.

8. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures are designed to reflect the nature of the information we hold and the risks involved. While no system can be guaranteed to be completely secure, we work to maintain a high standard of privacy protection and to limit access to personal data on a need-to-know basis.

9. Your Rights

As a data subject under the UK GDPR, you have several rights in relation to your personal data. Subject to certain legal conditions and exemptions, you may have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete information.
Erase your data in certain circumstances.
Restrict how we process your data in some situations.
Object to processing based on legitimate interests or direct marketing.
Data portability where processing is based on consent or contract and carried out by automated means.
Withdraw consent where we rely on consent for processing.

If you want to exercise any of these rights, we will respond in line with applicable data protection law. We may need to verify your identity before acting on a request to protect your privacy and prevent unauthorised access.

10. International Transfers

Where data is processed by a service provider outside the UK or EEA, we will ensure that appropriate safeguards are in place to protect your information in accordance with applicable law. This may include standard contractual protections or other recognised transfer mechanisms.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is published. We encourage customers to review this policy periodically so they remain informed about how their information is used.

12. Our Commitment to Privacy

Gardeners Sipson respects your privacy and treats your personal data with care. We process information only when it is necessary, lawful, and proportionate. Our aim is to be clear, fair, and responsible in the way we handle customer data, while ensuring that services are delivered effectively and securely.

By using our services, you acknowledge that this Privacy Policy applies to your personal data as described above.