Privacy Policy - Gardeners Oakleigh Park

This Privacy Policy applies to all Gardeners Oakleigh Park customers in the area. It explains how personal data is collected, used, stored, shared, and protected when you use our gardening services. We are committed to handling personal information responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Gardeners Oakleigh Park provides gardening and related outdoor maintenance services to customers in Oakleigh Park and the surrounding area. In this policy, “we,” “us,” and “our” refer to Gardeners Oakleigh Park. “You” means any customer, website visitor, prospective customer, or other person whose personal data we process in connection with our services.

2. Personal Data We Collect

We only collect data that is necessary for the delivery and administration of our services. Depending on how you interact with us, we may collect the following types of personal data:

Identity information: your name and, where relevant, business name.
Contact information: address, email address, telephone number, and service location details.
Service information: details about the gardening services requested, quotation information, scheduling preferences, and job notes.
Payment information: limited billing and transaction details needed to process payments and manage invoices.
Communication records: messages, call notes, feedback, complaints, and correspondence related to enquiries or services.
Technical information: basic device and usage data collected if you browse any digital service channels we use, such as IP address, browser type, and interaction logs.
Property-related information: details about gardens, access arrangements, and service instructions that help us carry out work safely and effectively.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, or there is another lawful basis for doing so. We ask that you do not share sensitive personal information unless it is relevant to the service.

3. How We Use Personal Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to arrange appointments and deliver gardening services;
to manage customer accounts, invoices, and payments;
to communicate about service updates, changes, and follow-up work;
to maintain internal records and service history;
to handle complaints, queries, and quality assurance;
to improve our services, processes, and customer experience;
to meet legal, tax, accounting, and regulatory obligations;
to prevent fraud, misuse, or security incidents.

We will only use your data for compatible purposes and will not process it in a manner that is unexpected or unfair.

4. Lawful Basis for Processing

We process personal data only where we have a lawful basis under UK GDPR. The main lawful bases we rely on are:

Contract: where processing is necessary to provide a quotation, enter into an agreement, or perform gardening services you have requested.
Legal obligation: where we must keep records for tax, accounting, insurance, or other legal requirements.
Legitimate interests: where processing is necessary for our legitimate business interests and your rights do not override those interests. This may include service administration, record keeping, customer support, and business improvement.
Consent: where we rely on your permission for specific optional activities. If consent is used, you may withdraw it at any time.

When we rely on legitimate interests, we consider whether the processing is necessary, proportionate, and respectful of your privacy. We do not use personal data in ways that are incompatible with the purposes explained in this policy.

5. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including satisfying legal, accounting, and reporting requirements. The retention period depends on the type of data and the reason it was collected.

Customer and service records: kept for the duration of the relationship and for a reasonable period afterwards to handle follow-up matters, disputes, or service history needs.
Billing and tax records: kept for the period required by law and financial regulations.
Communication records: retained as long as needed to resolve issues and maintain an accurate record of instructions or decisions.
Technical data: kept only for short periods unless needed longer for security, performance, or legal reasons.

When data is no longer required, we will securely delete, anonymise, or otherwise dispose of it.

6. Data Sharing and Processors

We may share personal data with trusted third parties that act on our behalf as processors or, in some cases, independent controllers. We only share what is necessary and require appropriate safeguards.

Examples of processors may include:

payment service providers that process transactions;
accounting or bookkeeping providers that support financial administration;
IT and cloud storage providers used for secure data handling;
communication service providers used to send emails, messages, or appointment updates;
software providers that assist with scheduling, record keeping, and customer management.

All processors are expected to process personal data only on our instructions, keep it secure, and comply with applicable data protection law. We may also disclose information where required by law, court order, or official authority. We do not sell personal data.

7. International Transfers

If any processor stores or accesses data outside the UK, we will take appropriate steps to protect the data. This may include using adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under applicable data protection law.

8. Data Security

We use reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and careful management of service records.

However, no system is completely secure. While we take data protection seriously, we cannot guarantee absolute security. We will respond appropriately to suspected breaches and will notify affected individuals or regulators where required by law.

9. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may apply in full or in part depending on the circumstances.

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: you may request deletion of your data in certain situations.
Right to restriction: you may ask us to limit how we use your data in certain cases.
Right to data portability: you may request certain data in a structured, commonly used format where applicable.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time.

If you exercise one of these rights, we may need to verify your identity before responding. We will handle requests in line with legal requirements and within the applicable time limits.

10. Marketing Communications

We do not send unsolicited marketing messages without a lawful basis. If we ever send optional promotional communications, we will do so in accordance with the law and give you a clear way to opt out. Your choice matters, and you can object to direct marketing at any time.

11. Children

Our services are intended for adults and property owners, occupiers, or authorised representatives. We do not knowingly collect data from children for marketing or service administration purposes.

12. Changes to This Privacy Policy

We may update this policy from time to time to reflect legal, operational, or service changes. Any revised version will apply from the date it is published or otherwise communicated. We encourage you to review this policy periodically so that you remain informed about how your information is used.

13. Summary of Key Principles

In summary, Gardeners Oakleigh Park processes personal data fairly, lawfully, and transparently. We collect only what we need, use it for clear purposes, retain it for no longer than necessary, and safeguard it with appropriate measures. We also ensure that customers in Oakleigh Park and the surrounding area can exercise their rights and expect respectful handling of their information at all times.

By using our services, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.