Privacy Policy - Gardeners Primrose Hill

This Privacy Policy explains how Gardeners Primrose Hill collects, uses, stores, shares, and protects personal data relating to its customers in the Primrose Hill area. It applies to all Gardeners Primrose Hill customers in area, including prospective customers, current customers, and individuals who have previously used our services. We are committed to handling personal information in a lawful, fair, and transparent manner, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By engaging our services, requesting a quotation, making an enquiry, or otherwise interacting with Gardeners Primrose Hill, you acknowledge that your information may be processed as described in this policy. We only collect data that is necessary for our legitimate business purposes, for the performance of services, and to meet legal obligations.

1. Information We Collect

We collect personal data directly from customers and, in some cases, from third parties where it is necessary to provide a service or fulfil a contractual obligation. The types of information we may collect include:

Identity information such as name, title, and customer reference details.
Contact information such as address, email address, and telephone number.
Service information such as property details, requested gardening services, appointment preferences, and job notes.
Payment and billing information necessary to process invoices, manage payments, and maintain financial records.
Communication records including messages, calls, complaints, feedback, and service-related correspondence.
Technical and usage information if you interact with our digital systems, such as device data, browser data, and basic analytics.

We do not seek to collect special category data unless it is strictly necessary and we have a lawful basis to do so. Special category data may include information relating to health, religion, biometric data, or other sensitive personal data. If such data is ever provided incidentally, it will be handled with extra care and only retained where lawful and appropriate.

2. How We Use Personal Data

Gardeners Primrose Hill uses personal data to deliver services efficiently and professionally. This includes arranging appointments, preparing quotations, completing gardening work, managing customer accounts, responding to enquiries, and handling billing or administration. We may also use data to improve our service quality, maintain service records, and ensure that our operations are carried out safely and responsibly.

We may use information for the following purposes:

to provide and manage gardening services;
to communicate with customers about bookings, schedules, quotations, or service updates;
to process payments and issue invoices;
to maintain internal records and service history;
to comply with legal, tax, and accounting obligations;
to handle complaints, disputes, or claims;
to improve our service delivery and customer experience;
to protect against fraud, misuse, or unlawful activity.

We only use personal data where there is a valid and lawful reason to do so. We do not sell customer data. We do not use customer data for unrelated purposes that are incompatible with the reasons for which it was collected.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the nature of the data and the context of the interaction, Gardeners Primrose Hill relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes arranging services, providing quotations, carrying out gardening work, and managing related administration.

Legal obligation

We may process personal data where necessary to comply with legal requirements, such as tax, accounting, record-keeping, or regulatory obligations.

Legitimate interests

We may process personal data where it is in our legitimate interests to do so and where those interests are not overridden by your rights and freedoms. This may include maintaining service records, improving operations, responding to customer queries, and protecting our business from fraud or misuse. We always consider whether the processing is proportionate and necessary.

Consent

In limited situations, we may rely on your consent, for example where it is needed for specific types of communication or optional data use. Where consent is used as the basis, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Processors

We may share personal data with trusted third parties that assist us in providing and managing our services. These third parties act as processors when they handle data on our behalf, or as independent controllers where they determine their own purposes for processing.

Examples of processors may include:

bookkeeping and accounting providers;
payment processing services;
IT support and cloud storage providers;
customer administration or scheduling tools;
communication and messaging service providers;
professional advisers where required for legal or insurance purposes.

All processors are required to handle personal data securely and only in accordance with our instructions and applicable law. We take reasonable steps to ensure that any third party we use has appropriate technical and organisational measures in place to protect data.

We may also share data where required by law, where necessary to establish, exercise, or defend legal rights, or where we need to protect the safety of our staff, customers, or the public.

5. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the purpose of processing.

As a general approach:

customer and service records are retained for the duration of the customer relationship and for a reasonable period afterwards;
financial and tax-related records are retained for the period required by law;
correspondence and complaint records are kept long enough to resolve matters and meet legal obligations;
information that is no longer required is securely deleted, anonymised, or archived where appropriate.

Retention is assessed periodically to ensure that data is not kept longer than necessary. If data is needed for ongoing legal proceedings or a legitimate business purpose, it may be retained for longer in a controlled manner.

6. Data Security

We take the protection of personal data seriously. Gardeners Primrose Hill uses appropriate technical and organisational safeguards designed to prevent unauthorised access, accidental loss, alteration, disclosure, or destruction of personal information. These measures may include restricted access controls, secure storage, password protection, and internal data handling procedures.

Although no method of transmission or storage is completely secure, we work to reduce risks and ensure that personal information is handled responsibly. Where we use third-party processors, we expect them to maintain equivalent levels of security.

7. Your Rights

Depending on your circumstances and the legal basis for processing, you may have the following rights under data protection law:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain situations.
Right to restriction – to request limits on how we use your data in certain cases.
Right to data portability – to receive certain information in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing, where applicable.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

We will respond to valid requests within the time limits required by law. In some cases, we may need to verify your identity before actioning a request. Please note that these rights are not absolute and may be subject to legal exceptions or limitations.

8. International Transfers

If any personal data is transferred outside the United Kingdom, we will take steps to ensure it is protected to an adequate standard. This may include using approved contractual safeguards or relying on another lawful transfer mechanism recognised under data protection law.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational requirements. Any updated version will apply from the date it is made effective. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

10. Our Commitment to Privacy

Gardeners Primrose Hill is committed to processing personal data with respect, care, and accountability. We aim to ensure that every customer in the Primrose Hill area understands how and why their information is used. We also aim to keep data accurate, relevant, and secure, while giving individuals meaningful control over their personal information.

If you are a customer and wish to exercise your rights or raise a concern about how your data is handled, your request will be considered carefully in line with applicable data protection law. Your privacy matters to us, and we strive to maintain trust through responsible data practices.