Privacy Policy - Gardeners St Pancras

Gardeners St Pancras is committed to protecting the privacy and personal data of all customers within the area we serve. This Privacy Policy explains how we collect, use, share, store, and protect personal information when providing gardening and related services. It applies to all Gardeners St Pancras customers in the area, including prospective customers, current customers, and individuals who contact us on behalf of a property or service request.

1. Introduction

We understand that privacy matters. When you use our services, you trust us with information about yourself, your property, and your service preferences. We handle that information in accordance with the UK GDPR and the Data Protection Act 2018. This policy is written to explain our practices in clear terms so you can understand what data we collect, why we collect it, how long we keep it, and what rights you have.

By engaging with our services, making an enquiry, or otherwise providing us with personal information, you acknowledge that your data will be processed as described in this policy.

2. Data We Collect

We collect only the information necessary to provide and manage our services effectively. The types of personal data we may process include:

Identity details such as your name and, where relevant, the name of a business, landlord, or managing agent.
Contact details such as telephone number, email address, and property address.
Service information including details of the gardening work requested, property access instructions, scheduling preferences, and service history.
Billing and transaction information including payment records, invoices, and account-related details.
Communication records such as emails, messages, notes from phone calls, and feedback.
Technical information where applicable, such as basic device or usage data if collected through digital forms or communications systems.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily or there is another lawful basis for processing. Please avoid sharing sensitive personal data unless it is needed for the service.

3. How We Use Personal Data

We use personal data to operate our services responsibly and efficiently. This may include:

responding to enquiries and preparing quotations;
providing gardening services and managing appointments;
maintaining records of work carried out;
processing payments and handling invoicing;
communicating about service updates, changes, or scheduling;
dealing with complaints, disputes, or service follow-up;
meeting legal, tax, and accounting obligations;
improving service quality and internal administration.

We only use your data for purposes that are compatible with the reason it was collected. We do not sell personal data.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to use your personal data. Depending on the circumstances, we rely on one or more of the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes arranging services, carrying out gardening work, managing bookings, and processing payments.

Legal Obligation

We may process data where necessary to comply with legal or regulatory obligations, including record-keeping, tax, and accounting requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided that those interests do not override your rights and freedoms. Examples include improving our services, keeping service records, handling client communications, preventing misuse, and maintaining internal administration.

Consent

In limited situations, we may rely on your consent, for example where we need to use information for a specific optional purpose. Where consent is used, you can withdraw it at any time.

5. Data Sharing and Processors

We may share personal data with trusted third parties who help us run our business. These parties act as data processors or, in some cases, independent controllers. We require appropriate contractual and security safeguards to protect your information.

Examples of processors may include:

IT and cloud service providers used for storage, communication, and document management;
payment processors used to handle card or transfer transactions;
accounting and bookkeeping services supporting tax and financial compliance;
customer relationship and scheduling tools used to organise appointments and service records;
professional advisers such as accountants, insurers, or legal advisers where necessary.

We may also disclose data if required by law, court order, regulatory request, or to protect our legal rights, property, staff, customers, or the public.

Gardeners St Pancras ensures that processors only act on our instructions and only process data needed for the agreed purpose. Where data is transferred outside the UK, we apply appropriate safeguards as required by law.

6. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected and to meet legal requirements. Retention periods can vary depending on the type of information and the context in which it is held.

Customer and service records are usually retained for the duration of the relationship and for a reasonable period afterwards so we can manage follow-up, accounting, and dispute resolution.
Financial and invoicing records are typically retained for the period required by tax and accounting law.
Communication records may be retained for as long as necessary to respond to queries, resolve service issues, or maintain business records.
Consent-based records are kept until consent is withdrawn or the information is no longer needed.

When data is no longer required, we delete it securely or anonymise it so that it can no longer identify you.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and careful management of paper and electronic records.

While we work to safeguard your information, no system can be guaranteed to be completely secure. If we become aware of a personal data breach that presents a risk to your rights and freedoms, we will take appropriate action in line with our legal obligations.

8. Your Rights

Under data protection law, you have important rights regarding your personal data. Depending on the circumstances, you may have the right to:

Access the personal data we hold about you;
Rectification of inaccurate or incomplete information;
Erasure of your data in certain circumstances;
Restriction of processing in specific situations;
Object to processing based on legitimate interests;
Data portability where processing is based on consent or contract and carried out by automated means;
Withdraw consent at any time, where consent is the lawful basis.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has not been handled properly.

9. Cookies and Similar Technologies

If any digital tools or online forms are used in connection with our services, small files or similar technologies may be used to support functionality, improve performance, or monitor basic usage. Any such use will be limited to what is necessary and lawful. Where consent is required, it will be sought appropriately.

10. Children’s Data

Our services are directed to adults and property-related customers. We do not knowingly collect personal data from children unless it is provided by an adult customer and is necessary for the service.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, practice, or our services. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

12. Summary of Key Points

In summary, Gardeners St Pancras collects only the personal data needed to provide gardening services, manage customer relationships, comply with legal duties, and operate our business effectively. We rely on lawful bases including contract, legal obligation, legitimate interests, and sometimes consent. We may share data with carefully selected processors such as IT, payment, and accounting providers. We retain data only as long as necessary and respect your rights to access, correct, erase, restrict, or object to processing where applicable.

This Privacy Policy applies to all Gardeners St Pancras customers in the area. It is intended to ensure transparency, accountability, and respectful handling of your personal information at every stage of the service relationship.