Privacy Policy

Gardeners Deptford Privacy Policy

This Privacy Policy explains how Gardeners Deptford collects, uses, stores, and protects personal data relating to its customers and prospective customers in the local service area. It is intended to comply with the UK General Data Protection Regulation and related data protection legislation. By using Gardeners Deptford services, you acknowledge that you have read and understood this Privacy Policy.

Scope and who this policy applies to

This Privacy Policy applies to all Gardeners Deptford customers, including individual domestic customers and business clients, located within the service area covered by Gardeners Deptford. It also applies to individuals who make enquiries, request quotes, or otherwise interact with Gardeners Deptford, even if they do not ultimately become customers.

Personal data we collect

Gardeners Deptford may collect and process different categories of personal data, depending on how you interact with us and which services you use. The personal data we typically collect includes:

Identification and contact details, such as name, postal address, property address where services are delivered, and communication preferences.

Service and contract information, such as details of the garden or outdoor space, service history, quotes and estimates, booking dates and times, and information you provide about your requirements or preferences.

Billing and payment information, such as payment status, invoices, and records of transactions. Gardeners Deptford does not store full payment card details; these may be handled by secure third-party payment processors.

Communication records, such as enquiries, messages, feedback, complaints, and any other correspondence with Gardeners Deptford by written or verbal means.

Technical and usage data, such as information about how you use our website or online tools, including basic diagnostic and analytical data collected via cookies or similar technologies where applicable and permitted.

Only data that is relevant for the purposes described in this Privacy Policy is collected, and Gardeners Deptford aims to keep personal data accurate and up to date.

Lawful bases for processing personal data

Gardeners Deptford processes personal data only when there is a lawful basis under the UK GDPR. The main lawful bases we rely on are:

Contractual necessity, where the processing is required to enter into or perform a contract with you. This includes providing gardening services, managing bookings, delivering quotes, invoicing, and handling related customer service communications.

Legitimate interests, where the processing is necessary for the legitimate interests of Gardeners Deptford or a third party, and these interests are not overridden by your fundamental rights and freedoms. Examples include improving our services, managing our business operations, keeping records, and defending or establishing legal claims.

Legal obligation, where we must process your data to comply with legal or regulatory requirements, such as tax and accounting rules or responding to lawful requests from public authorities.

Consent, where you have given clear consent for a specific purpose, such as receiving certain marketing communications. When processing is based on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing prior to withdrawal.

How we use personal data

Gardeners Deptford uses personal data for the following purposes:

To provide and manage gardening and related services you have requested, including site visits, regular maintenance, project work, and aftercare.

To manage customer relationships, including responding to enquiries, providing quotes, arranging appointments, confirming bookings, and handling feedback or complaints.

To administer billing, payments, and accounts, including issuing invoices, confirming receipt of payment, and maintaining financial records.

To improve and develop our services, for example by analysing anonymised or aggregated information about service use, and by recording customer preferences to enhance service quality.

To send you service updates and important notices relating to your bookings, safety, or changes to our terms or policies.

To send marketing communications about Gardeners Deptford services where permitted by law and where you have not opted out. You may opt out of such communications at any time.

To meet legal and regulatory obligations and to establish, exercise, or defend legal claims where necessary.

Data retention and storage

Gardeners Deptford retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. The length of time we keep your data depends on the type of data and the reasons for processing it.

Customer and contract records are typically retained for a period necessary to provide ongoing services and to handle any queries, disputes, or claims that may arise, as well as to comply with applicable limitation periods and financial record-keeping requirements.

Where personal data is no longer required for the stated purposes, or where the lawful retention period has expired, Gardeners Deptford will securely delete, anonymise, or otherwise dispose of the data. We take appropriate steps to protect personal data against unauthorised access, loss, or misuse during its entire lifecycle.

Data sharing and processors

Gardeners Deptford does not sell personal data. However, we may share personal data with third parties where necessary for the purposes explained in this Privacy Policy, and always in accordance with data protection law.

Service providers and processors may be engaged to perform certain functions on our behalf, such as payment processing, accounting services, IT support, data storage, scheduling tools, communication platforms, or customer management systems. These processors are only permitted to use your personal data in accordance with our instructions and for the specific services they provide to us. They are required to implement appropriate technical and organisational measures to protect your data.

Professional advisers, such as accountants, insurers, or legal professionals, may receive personal data where necessary to provide their professional services to Gardeners Deptford.

Public authorities, regulators, or law enforcement agencies may receive personal data where we are legally required to disclose it, or where such disclosure is necessary to protect our rights or the rights of others.

Where data is transferred outside the United Kingdom or the European Economic Area, Gardeners Deptford will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent protection, in line with data protection requirements.

Your data protection rights

Under the UK GDPR and related laws, individuals whose personal data is processed by Gardeners Deptford have a number of rights. These rights are subject to certain conditions and exemptions, but we will always respond to any request in accordance with the law.

Right of access, which allows you to obtain confirmation as to whether Gardeners Deptford processes your personal data and, if so, to receive a copy of that data and certain related information.

Right to rectification, which allows you to request the correction of inaccurate or incomplete personal data held about you.

Right to erasure, sometimes called the right to be forgotten, which allows you to request the deletion of your personal data where there is no valid reason for us to continue processing it, subject to legal and contractual obligations.

Right to restriction of processing, which allows you to ask us to limit the processing of your personal data in certain circumstances, for example while we verify its accuracy or assess an objection.

Right to object, which allows you to object to processing based on our legitimate interests, including profiling on that basis, and to object at any time to processing for direct marketing purposes.

Right to data portability, which allows you to request that certain personal data is provided to you or, where technically feasible, to another controller in a structured, commonly used, and machine-readable format, where the processing is based on consent or contract and carried out by automated means.

Where processing is based on consent, you also have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.

Security of your personal data

Gardeners Deptford takes appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. Measures may include controlled access, secure storage solutions, and staff awareness of data protection responsibilities. While no system can be completely secure, Gardeners Deptford aims to maintain a level of security appropriate to the nature of the data and the risks involved.

Changes to this Privacy Policy

Gardeners Deptford may update this Privacy Policy from time to time to reflect changes in legal requirements, best practices, or our services and internal processes. Any significant changes will be reflected in the revised version of the Privacy Policy, which will be made available to customers. Your continued use of Gardeners Deptford services after any update will be treated as acceptance of the revised policy, to the extent permitted by law.