Privacy Policy - Gardeners Motspur Park

Gardeners Motspur Park is committed to protecting the privacy and personal data of all customers in the Motspur Park area and surrounding local communities. This Privacy Policy explains how we collect, use, store, share, and protect personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Gardeners Motspur Park customers in area, including anyone who requests a quote, books a service, receives a gardening visit, or communicates with us in connection with our services.

1. Who We Are

Gardeners Motspur Park provides gardening and related outdoor maintenance services to residential and commercial customers. For the purposes of data protection law, we act as the data controller for personal data that we collect and use about our customers, prospects, and service users. This means we decide why and how personal information is processed and are responsible for ensuring that it is handled lawfully, fairly, and transparently.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for delivering our services, managing customer relationships, and meeting our legal obligations. The types of data we may collect include:

Identity details such as your name and title.
Contact details such as address, email address, and telephone number.
Service information such as the type of gardening work requested, property access details, garden preferences, and scheduling information.
Payment-related information such as invoicing records, payment status, and transaction references.
Communication records including emails, messages, notes from phone calls, and appointment history.
Technical information if you interact with our digital systems, such as device or browser data used for security and service administration.
Optional information that you choose to provide, such as feedback, special instructions, or accessibility requirements.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, for example where a health-related access issue affects service delivery. If such data is ever needed, we will ensure that an appropriate lawful basis and additional protection are in place.

3. How We Use Your Data

We process personal data for clear and legitimate purposes connected to our work as a gardening service provider. These purposes include:

Responding to enquiries and providing quotations.
Managing bookings, site visits, and service schedules.
Delivering gardening and maintenance services efficiently.
Invoicing, accounting, and payment administration.
Keeping records of customer preferences and service history.
Handling complaints, queries, and service updates.
Meeting legal, regulatory, tax, and insurance obligations.
Protecting our business, staff, and customers from fraud or misuse.

We use personal data only where necessary and avoid using it for unrelated purposes. If we need to use data in a new way that is not compatible with the original reason for collection, we will notify you and, where required, seek further consent or identify another lawful basis.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. Gardeners Motspur Park relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes, confirming bookings, carrying out gardening services, issuing invoices, and managing service-related communication.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests and where your rights do not override those interests. This may include maintaining business records, improving customer service, preventing fraud, ensuring security, and managing service quality. We always balance our interests against your privacy rights before relying on this basis.

Legal Obligation

We process certain data to comply with legal duties, including accounting rules, tax requirements, insurance obligations, and record-keeping obligations.

Consent

Where required, we may rely on your consent, particularly for optional communications or for processing that is not necessary for service delivery. You may withdraw consent at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

5. Sharing Your Information

We do not sell your personal data. However, we may share it with trusted third parties where necessary to operate our business and deliver services. These recipients may include:

Payment and invoicing providers that help process transactions or issue bills.
IT and cloud service providers that store data securely or support business systems.
Professional advisers such as accountants, legal advisers, or insurers.
Subcontractors or specialist processors who assist with specific parts of our service delivery under our instructions.
Regulatory, law enforcement, or public authorities where disclosure is required by law.

Whenever we use third parties, we take reasonable steps to ensure they protect your data, only use it for authorised purposes, and process it in accordance with data protection law.

6. Processors

Some organisations process personal data on our behalf as data processors. These processors may only act on our documented instructions and must keep the information secure. We use appropriate contractual terms to require them to implement suitable technical and organisational measures. Typical processor tasks may include secure hosting, communications support, payment handling, document storage, and administrative systems. All processors are assessed to make sure they provide an adequate level of protection and confidentiality.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods depend on the type of information and the reason for processing. In general:

Customer enquiry records may be kept for a limited period if no service is booked.
Contract and service records are retained for the duration of the customer relationship and for a reasonable period afterwards.
Invoice and accounting records are kept for the period required under tax and accounting laws.
Complaint or dispute records may be retained longer where needed to resolve issues or defend legal claims.

When information is no longer required, it is securely deleted, anonymised, or otherwise disposed of using appropriate safeguards. Our approach ensures that we keep data no longer than necessary while still meeting operational and legal requirements.

8. Security of Your Data

We take the security of personal data seriously. Appropriate measures are used to help prevent unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, password protection, and regular review of systems and records. While no system can be guaranteed completely secure, we continually work to reduce risks and protect the information entrusted to us.

9. Your Rights

Under UK data protection law, you have several rights regarding your personal data. These rights may apply in different circumstances and may be subject to legal limitations. They include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – you can request deletion of your data in certain situations.
Right to restriction – you can ask us to limit how we use your data in certain cases.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request that certain data be provided to you or another organisation in a usable format.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

To protect privacy, we may need to verify your identity before responding to a rights request. We aim to respond within the timeframes required by law.

10. International Transfers

If any personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, contractual protections, or other lawful transfer mechanisms. We only permit international transfers where data protection standards remain suitably high.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or business operations. The most current version will apply to all customers in the Motspur Park area and surrounding service locations. We encourage you to review this policy periodically so that you remain informed about how your personal data is handled.

12. Summary of Our Commitment

Gardeners Motspur Park respects your privacy and aims to process personal data in a lawful, transparent, and secure manner. We collect only the information needed to provide our services, rely on appropriate lawful bases, retain data only as long as necessary, and work with processors that meet high standards of data protection. You also have meaningful rights over your personal data, and we are committed to supporting those rights fairly and promptly.

This policy applies to all Gardeners Motspur Park customers in area.