Privacy Policy - Gardeners Poplar

Gardeners Poplar is committed to protecting the personal data of all customers in our area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK GDPR and the Data Protection Act 2018. It applies to all Gardeners Poplar customers in area, whether you contact us for a quote, make a booking, receive a service, or interact with us in any other way related to our gardening services.

1. Who We Are

This policy applies to Gardeners Poplar as the data controller for personal information processed in connection with our gardening services. We determine the purposes and means of processing personal data when we manage customer enquiries, provide services, arrange appointments, issue invoices, and maintain business records. We take data protection seriously and aim to handle information in a fair, transparent, and secure manner.

2. Personal Data We Collect

We only collect personal data that is necessary for our services and business operations. Depending on how you interact with us, we may collect the following categories of information:

Identity information: name, title, and any relevant customer reference details.
Contact information: address, email address, telephone number, and service location details.
Service information: details about the gardening work requested, property access notes, preferred service times, and instructions for completion.
Transaction information: invoicing details, payment status, and records of services provided.
Communication records: emails, messages, call notes, feedback, and complaints.
Technical data: basic website or device information where applicable, such as IP address or browser type, if collected through our digital systems.

We do not seek to collect special category data unless there is a clear and lawful reason to do so and only where it is necessary. If such data is ever needed, we will apply additional safeguards and process it in line with applicable law.

3. How We Use Your Data

Gardeners Poplar uses personal data for the following purposes:

to respond to enquiries and provide quotations;
to arrange and deliver gardening services;
to manage customer accounts and service records;
to process payments and maintain financial records;
to communicate about appointments, changes, and service updates;
to handle complaints, disputes, and requests;
to meet legal and regulatory obligations;
to improve our services and customer experience;
to protect our business, staff, and customers from fraud or misuse.

We always aim to ensure our use of personal data is relevant, limited, and proportionate to the service being provided.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each use of personal data. Gardeners Poplar relies on one or more of the following lawful bases:

Contract

We process data when it is necessary to take steps before entering into a contract or to perform a contract with you. This includes providing quotes, confirming bookings, carrying out gardening services, and issuing invoices.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include service administration, business record-keeping, responding to customer queries, and maintaining service quality. We always consider whether our interests are balanced and appropriate before relying on this basis.

Legal Obligation

We may process and retain data where required to comply with legal obligations, including tax rules, accounting requirements, or lawful requests from public authorities.

Consent

Where required by law, we will ask for your consent before processing your data for specific optional purposes. If consent is used, you may withdraw it at any time. Withdrawal will not affect processing already carried out lawfully before consent was withdrawn.

5. Data Sharing and Processors

We may share personal data with trusted third-party processors who help us operate our business. These processors are only allowed to process data on our instructions and must protect it appropriately. Typical processors may include:

accounting or bookkeeping providers;
payment service providers;
IT and software support services;
data storage and backup providers;
communication tools used for email, scheduling, or record management;
professional advisers such as accountants or legal advisers where necessary.

We do not sell personal data. We only share information where necessary for service delivery, legal compliance, business administration, or the protection of legitimate interests. Where a processor is used, we ensure there is a suitable agreement in place and that the processor applies appropriate security and confidentiality measures.

6. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected. Retention periods vary depending on the type of record and the legal or operational need to keep it. In general:

customer enquiry records may be kept for a limited period if no service is booked;
service and billing records may be retained for the duration of the customer relationship and for a period afterwards;
financial and tax records are kept for the period required by law;
complaint or dispute records are retained as long as needed to resolve the matter and manage legal risk.

When data is no longer needed, we will securely delete, anonymise, or archive it in a way that prevents inappropriate access. Retention decisions are made based on necessity, legal requirements, and good business practice.

7. Data Security

We use appropriate technical and organisational measures to protect personal information from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and restricted use of customer records. While no system can be guaranteed to be completely secure, we review our procedures to help keep your data safe.

8. Your Rights Under GDPR

If you are a customer of Gardeners Poplar in our area, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the legal basis for processing:

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: you may request deletion of your data in certain situations.
Right to restriction: you may ask us to limit how we use your data in certain circumstances.
Right to object: you may object to processing based on legitimate interests.
Right to data portability: you may request transfer of certain data in a commonly used format.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

We will respond to valid rights requests in accordance with GDPR requirements. In some cases, we may need to keep certain records for legal or operational reasons, or we may need to verify your identity before acting on a request.

9. International Transfers

If any processor stores or accesses personal data outside the UK, we will ensure that appropriate safeguards are in place. These safeguards may include adequacy regulations, contractual protections, or other lawful transfer mechanisms. Our goal is to ensure your data remains protected to a standard consistent with UK GDPR requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practice, or how we process personal data. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their information is handled.

11. Summary of Our Commitment

Gardeners Poplar treats personal data with care, respect, and accountability. We collect only what we need, use it for clear and lawful purposes, retain it for no longer than necessary, and share it only with trusted processors when required. We also recognise and support your rights under data protection law. By maintaining transparent and lawful data practices, we aim to provide gardening services in a responsible and privacy-conscious way for all Gardeners Poplar customers in area.