Privacy Policy

Gardeners Elmstead Privacy Policy

This Privacy Policy explains how Gardeners Elmstead collects, uses, stores, and protects personal data relating to its customers and prospective customers in the local area. It also sets out your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Gardeners Elmstead customers and potential customers within the area where our services are offered, regardless of how you contact us or engage our services.

Who we are and scope of this policy

Gardeners Elmstead is a gardening and grounds maintenance service provider. In the course of running our business, we act as a data controller in respect of the personal data we collect and use about our customers and prospective customers. This policy applies whenever we act as a data controller for personal data about you, including when you contact us, request a quotation, enter into a contract with us, or otherwise use our services.

Types of personal data we collect

We may collect and process the following categories of personal data about you:

Identification and contact details, such as your name, postal address, and general contact details necessary to arrange and deliver services. Service information, such as details of your garden or property relevant to the services you request, your service preferences, instructions you provide, and any related notes necessary to carry out the work. Contract and billing data, such as information required to prepare quotes, invoices, payment confirmations, and records of services provided. Communication records, such as information contained in messages or correspondence between you and Gardeners Elmstead, including requests, feedback, and complaints. Technical and usage data, such as information generated when you use any of our online channels, including device type, basic technical data, and details of how you interact with our websites or digital content, to the extent that such data identifies or could identify you.

How we collect your personal data

We usually collect personal data directly from you when you contact us to make an enquiry, request a quotation, or book a service. This can be through telephone conversations, written correspondence, in person, or through online forms and messaging tools where available. We may also collect data when we visit your property to assess or provide services, and when you respond to any communications from us.

In some cases, we may receive personal data about you from third parties, for example where someone else arranges services at your property on your behalf, or where we are given your contact details for referral purposes. In such circumstances, we treat that information in accordance with this Privacy Policy.

Lawful bases for processing personal data

Gardeners Elmstead will only process your personal data where we have a lawful basis under data protection law. Depending on the context, we may rely on one or more of the following lawful bases:

Contractual necessity. We process your personal data when it is necessary to enter into a contract with you or to perform a contract we have with you. This includes taking steps at your request before entering into a contract, such as providing a quotation, scheduling visits, and delivering agreed gardening services.

Legitimate interests. We process personal data where it is necessary for our legitimate business interests and where these are not overridden by your rights and interests. This may include managing and improving our services, planning work schedules, maintaining business records, and communicating with you about existing services or similar services you might reasonably expect to hear about.

Legal obligations. We may process personal data where it is necessary to comply with legal obligations that apply to us, such as record keeping, tax, and accounting requirements.

Consent. In limited cases, we may rely on your consent, for example for certain types of direct marketing communications that are not based on legitimate interests. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

How we use your personal data

We may use your personal data for the following purposes:

To respond to enquiries, provide quotations, and discuss potential services. To manage and fulfil contracts for gardening and related services, including arranging appointments and carrying out work at your property. To create and maintain accurate customer and service records. To manage payments, invoicing, and accounting. To communicate with you about ongoing or upcoming work, changes to services, or important information relating to your contract. To handle complaints, requests, or disputes. To improve our business operations, services, and customer experience. To comply with legal and regulatory obligations and to protect our legal rights.

Data sharing and processors

We do not sell your personal data. We may share your personal data with trusted third parties where necessary for the purposes set out in this Privacy Policy and where permitted by law. These third parties may include:

Service providers who act as data processors on our behalf, such as providers of scheduling tools, customer management systems, cloud storage, or accounting software. Professional advisers such as accountants or legal advisers, where necessary for the operation of our business or to obtain professional guidance. Third parties to whom we are required to disclose personal data in order to comply with legal or regulatory obligations, such as tax authorities or law enforcement agencies when legally required.

Where we use processors, we ensure that appropriate contractual and technical safeguards are in place so that your personal data is processed only on our instructions, securely, and in compliance with data protection laws.

International transfers

Where any of our service providers or systems involve the transfer of personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place. These may include the use of standard contractual clauses or other lawful mechanisms to ensure that your personal data remains protected to a level essentially equivalent to that provided by UK and EU data protection law.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. In determining the appropriate retention periods, we consider the type and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and applicable legal requirements.

In general, customer and contract data will be kept for the duration of our relationship with you and for a reasonable period afterwards, typically aligned with limitation periods for legal claims and tax record keeping obligations. After the applicable retention period has passed, we will either securely delete or anonymise your personal data so that it can no longer be associated with you.

How we protect your personal data

We take appropriate technical and organisational measures to safeguard your personal data against accidental loss, unauthorised access, use, alteration, or disclosure. These measures include restricted access to personal data, secure storage methods, and regular review of our security practices. While no system can be completely secure, we are committed to maintaining appropriate levels of protection for the personal data we process.

Your data protection rights

Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:

Right of access. You have the right to request confirmation that we process your personal data and to obtain a copy of the personal data we hold about you, along with certain related information.

Right to rectification. You have the right to request that we correct any inaccurate or incomplete personal data about you.

Right to erasure. In certain circumstances, you may have the right to request that we delete your personal data. This right is not absolute and may not apply where we need to retain your data for legal or legitimate business reasons.

Right to restriction of processing. You may request that we restrict the processing of your personal data in specific situations, such as when the accuracy of the data is contested or where you have objected to our processing and we are considering the request.

Right to object. You may object to our processing of your personal data where we rely on legitimate interests as our lawful basis, including for certain types of direct marketing. We will stop processing unless we have compelling legitimate grounds to continue that override your interests, rights, and freedoms, or where processing is required for legal claims.

Right to data portability. In certain circumstances, you have the right to receive personal data you have provided to us in a structured, commonly used, and machine readable format, and to request that we transmit that data to another controller where technically feasible.

Right to withdraw consent. Where we rely on your consent for processing, you may withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before it is withdrawn.

How to exercise your rights and complaints

If you wish to exercise any of your rights or have questions about how Gardeners Elmstead handles your personal data, you can contact us using the details provided in our general customer communications or on our service documentation. We may need to verify your identity before responding to your request, to help ensure that personal data is not disclosed to anyone who does not have the right to receive it.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed. We would, however, appreciate the opportunity to address your concerns directly before you approach a supervisory authority, and encourage you to contact us in the first instance.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any updated version will apply to all personal data held by Gardeners Elmstead at the time of the update and going forward. We recommend that you review this Privacy Policy periodically to stay informed about how we use and protect your personal data.