Gardeners Kilburn Privacy Policy

This Privacy Policy explains how Gardeners Kilburn collects, uses, stores, and shares personal data of customers and prospective customers in the Kilburn area. It also explains your rights under the United Kingdom General Data Protection Regulation UK GDPR and related data protection laws. This Privacy Policy applies to all Gardeners Kilburn customers and individuals who enquire about or use our gardening and related services in the area we serve.

Who We Are and Scope of This Policy

Gardeners Kilburn is a gardening service provider operating in and around the Kilburn area. For the purposes of data protection law, Gardeners Kilburn is the controller of your personal data. This means we determine how and why your personal data is processed. This Privacy Policy covers all personal data we process about our domestic and business customers in the area, as well as individuals who contact us to request information or quotations.

Personal Data We Collect

We collect and process different categories of personal data depending on how you interact with us and which services you use. The main types of personal data we collect are:

Identification and contact details such as your name, postal address, service address, and any other address where we provide services, together with your preferred contact details such as email address where provided and any other communication details you choose to share with us, excluding any information this policy asks us not to include.

Service and contract information such as details of the gardening services you request or purchase, site notes relating to your garden or property, service dates and times, quotations, invoices, payment history, and records of any communications about your service requirements.

Payment and transaction data such as records of payments made to us, amount, date, and method of payment. We do not store full payment card details; where card payments are used, they are processed via external payment processors in accordance with their own security standards.

Communication records such as emails you send to us, notes of telephone conversations, and any messages or feedback you choose to provide. These records help us respond to your enquiries, manage bookings, and resolve issues.

Website and usage data if you visit our online pages, which may include technical information about your device and how you interact with our content, such as pages visited and time spent. This may be collected using standard web technologies for analytics and security purposes.

Purposes and Lawful Bases for Processing

We only process your personal data where we have a lawful basis to do so under the UK GDPR. Depending on the context, we rely on the following lawful bases:

Contractual necessity. We process personal data to enter into and perform a contract with you, including to provide gardening services, manage bookings, deliver quotations, issue invoices, take payment, and communicate with you about your services and appointments.

Legitimate interests. We may process your personal data where it is necessary for our legitimate business interests and these interests are not overridden by your rights and freedoms. This includes managing and improving our services, keeping records of services provided, handling customer queries and complaints, maintaining site safety, protecting our business from fraud or misuse, and marketing similar services to existing customers in a proportionate way.

Legal obligations. In some cases we are required by law to process personal data, for example to comply with tax, accounting, or other regulatory obligations. We keep appropriate records of transactions and services provided in line with these requirements.

Consent. If we ever rely on your consent for specific processing activities, such as certain forms of direct marketing to individuals who are not existing customers, we will clearly explain what we are asking for and how you can withdraw your consent at any time.

How We Use Your Personal Data

We use the personal data we collect for the following purposes:

To provide and manage gardening services, including assessing your garden or site, arranging access and appointments, carrying out agreed work, and following up on any additional requirements.

To manage customer relationships, including responding to enquiries, providing quotations, issuing contracts and confirmations, keeping you updated about scheduled work, and handling any feedback or complaints.

To administer our business operations, including accounting, auditing, financial reporting, service planning, staff scheduling, and internal record keeping.

To improve our services, including reviewing service performance, understanding customer needs, training staff, and developing new offerings or service options.

To communicate with you about services you already use or similar services that may be of interest, where permitted by law and subject to your right to object.

To comply with legal obligations and cooperate with lawful requests from public authorities where required.

Sharing Your Personal Data and Processors

We do not sell your personal data. We may share your personal data with third parties only when this is necessary, lawful, and subject to appropriate safeguards. These third parties may act as processors on our behalf and are required to handle your data in accordance with our instructions and applicable law.

Categories of recipients include:

Service providers and contractors who help us deliver our services and operate our business, such as scheduling tools, customer management systems, payment processors, and accounting or administrative support providers.

Professional advisers such as accountants or legal advisers where this is necessary to obtain professional advice, comply with legal obligations, or protect our rights.

Public authorities and regulators where we are legally obliged to share data, for example for tax or enforcement purposes, or to protect the safety or rights of individuals.

Any data sharing is limited to what is necessary for the relevant purpose, and we ensure that processors are contractually bound to keep your data secure, confidential, and only use it in accordance with our instructions.

International Transfers

Where our service providers or their systems are located outside the United Kingdom or the European Economic Area, we take steps to ensure that your personal data receives an equivalent level of protection. This may include using standard contractual clauses or relying on adequacy regulations, as permitted by data protection law.

Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. The specific retention period will depend on the type of data and the context.

Customer and contract information, including basic contact details, service records, and invoices, is generally retained for a period aligned with applicable limitation periods and tax record requirements. This allows us to respond to queries, handle potential disputes, and comply with financial regulations.

Enquiry information relating to quotations or service discussions that do not result in a contract may be kept for a limited period so that we can follow up on your enquiry and keep appropriate business records.

Marketing-related data is retained for as long as you remain subscribed or until you object or withdraw your consent, after which we will stop using your data for marketing and keep a minimal record of your preference to ensure it is respected.

Your Data Protection Rights

Under the UK GDPR, you have a number of rights in relation to your personal data. These rights apply in many situations, although they may be subject to certain conditions or limitations under the law.

Right of access. You have the right to request confirmation as to whether we process your personal data and to obtain a copy of that data together with information about how we use it.

Right to rectification. You have the right to ask us to correct or complete personal data that is inaccurate or incomplete.

Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.

Right to restriction. You may request that we restrict the processing of your personal data in certain situations, such as while we are verifying its accuracy or assessing an objection you have raised.

Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another controller where technically feasible.

Right to object. You have the right to object at any time to processing based on our legitimate interests, including any direct marketing. If you object to direct marketing, we will stop processing your personal data for that purpose.

Rights in relation to automated decision making. Gardeners Kilburn does not carry out automated decision making or profiling that has legal or similarly significant effects on individuals.

Exercising Your Rights and Contact

If you wish to exercise any of your data protection rights or have any questions about this Privacy Policy or how we handle your personal data, you can contact us using the contact details provided on our usual customer materials or through the channels you already use to communicate with us. We may need to verify your identity before responding to your request.

You also have the right to lodge a complaint with the UK data protection supervisory authority if you are concerned about how we process your personal data. You are encouraged to contact us first so we can try to resolve your concerns directly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or how we process personal data. Any significant changes will be communicated through appropriate channels. The updated version will take effect from the date it is made available.