Privacy Policy - Gardeners Edmonton

Gardeners Edmonton is committed to protecting personal data and respecting privacy rights in accordance with applicable data protection laws, including the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018, where they apply. This Privacy Policy explains how personal data is collected, used, disclosed, stored, and protected when individuals use our gardening services. It applies to all Gardeners Edmonton customers in the area, including residential and commercial clients, as well as any person who communicates with us in connection with our services.

1. Scope of This Policy

This Privacy Policy applies to personal data processed by Gardeners Edmonton in the course of providing gardening and related services. It covers data collected through enquiries, service bookings, quotations, invoices, communications, and any ongoing customer relationship. It also applies to data collected from suppliers, contractors, and website or digital interactions where relevant to our business operations.

By engaging our services, communicating with us, or otherwise providing information to us, individuals acknowledge that their data may be handled in the ways described in this policy. We take privacy seriously and aim to process only the data necessary for legitimate business purposes.

2. Data We Collect

We may collect and process different types of personal data depending on the services requested and the nature of the interaction. This may include:

Identity data: name, title, and where relevant, business name.
Contact data: address, email address, telephone number, and other communication details.
Service data: details of requested gardening services, property access notes, scheduling preferences, and service instructions.
Financial data: billing information, payment records, and transaction history.
Communication data: records of enquiries, messages, complaints, feedback, and correspondence.
Technical data: limited device, browser, or usage data where relevant to digital service interactions.
Operational data: notes necessary to complete work safely and efficiently, such as site conditions or special requirements.

We generally do not seek to collect special category data unless it is required for a lawful reason and is necessary to provide our services or comply with legal obligations. If such data is ever processed, we apply additional safeguards and only do so where permitted by law.

3. How We Use Personal Data

Gardeners Edmonton uses personal data for the following purposes:

to respond to enquiries and provide quotations;
to deliver gardening services and manage customer bookings;
to communicate about appointments, changes, or service updates;
to issue invoices, receive payments, and maintain accounting records;
to improve service quality, customer experience, and internal processes;
to maintain appropriate records for legal, tax, and insurance purposes;
to manage disputes, complaints, or claims;
to comply with legal, regulatory, and contractual obligations.

We only use personal data where it is relevant, necessary, and proportionate to the purpose for which it was collected. We do not sell personal data.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing personal data. Depending on the circumstances, Gardeners Edmonton relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with a customer. This includes managing bookings, delivering services, handling payments, and providing service-related communications.

Legal Obligation

Some processing is required to comply with legal obligations, such as keeping accounting records, responding to lawful requests, or meeting tax and insurance requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by the rights and freedoms of the individual. Examples include improving services, maintaining records, preventing fraud, and handling customer communications efficiently. We ensure a balanced and fair assessment before relying on this basis.

Consent

In limited situations, we may ask for consent, for example when processing optional information or sending certain communications where consent is the most appropriate lawful basis. Where consent is used, individuals can withdraw it at any time.

5. Retention of Personal Data

Gardeners Edmonton retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations. Retention periods depend on the type of data and the reason for processing.

Examples of retention practice include:

Customer and service records: kept for the duration of the relationship and for a reasonable period afterwards to manage queries, disputes, and future service continuity.
Financial and invoicing data: kept for the period required by law for tax and accounting purposes.
Communication records: retained as long as necessary to evidence decisions, service delivery, or issue resolution.
Legal claim records: retained where necessary to defend or establish a legal claim.

When personal data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe manner. Retention is reviewed periodically to ensure data is not kept longer than required.

6. Processors and Third Parties

To operate efficiently and provide services, Gardeners Edmonton may use trusted third-party processors that handle personal data on our behalf. These processors are engaged only where necessary and are required to process data in accordance with our instructions and applicable data protection law.

Processors may include:

payment service providers;
accounting and bookkeeping providers;
customer management or scheduling tools;
IT and cloud storage providers;
professional advisers such as lawyers, insurers, or auditors;
subcontractors or specialist service providers assisting with garden work where relevant.

We take steps to ensure processors are appropriate, secure, and contractually bound to protect personal data. Where personal data is shared with third parties who act as independent controllers, we do so only where lawful and necessary, and only for a defined purpose.

7. Data Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, or unlawful disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and appropriate data handling procedures.

Although we work hard to protect information, no system can be guaranteed 100% secure. If a personal data incident occurs that presents a risk to rights and freedoms, we will take appropriate steps in line with legal requirements.

8. International Transfers

Where personal data is transferred outside the UK or EEA, we ensure that appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or equivalent legal mechanisms. This is done to ensure personal data remains protected to an acceptable standard.

9. Your Rights Under GDPR

Individuals whose data we process may have the following rights, subject to legal limits and exemptions:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of personal data in certain circumstances.
Right to restrict processing: to request that we limit how your data is used in specific situations.
Right to data portability: to receive certain data in a structured, commonly used format where applicable.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

You also have the right to raise concerns with a supervisory authority if you believe your data has been handled unlawfully. We encourage individuals to contact us first so we can address concerns promptly and fairly.

10. Automated Decision-Making

Gardeners Edmonton does not use personal data for solely automated decision-making that produces legal or similarly significant effects on individuals. If this changes, we will update this policy and provide appropriate information about the logic involved and the rights available.

11. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is necessary in a limited context and lawfully provided by a parent, guardian, or authorised representative. Where children’s data is involved, we apply suitable care and legal compliance measures.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

13. Final Statement

Gardeners Edmonton is committed to processing personal data fairly, lawfully, and transparently. We respect privacy, limit processing to what is necessary, and aim to safeguard information at every stage of our work. This policy applies to all Gardeners Edmonton customers in area and is intended to provide a clear explanation of how data is collected, used, retained, and protected.

By using our services, customers and contacts acknowledge that they have read and understood this Privacy Policy.