Privacy Policy - Gardeners Muswell Hill

This Privacy Policy explains how Gardeners Muswell Hill collects, uses, stores, shares, and protects personal data for all customers in the Muswell Hill area. It applies to every client, prospective client, and website or service user who engages with our gardening services in this area. We are committed to handling personal information lawfully, fairly, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, making an enquiry, or providing your details to us, you acknowledge that you have read and understood this Privacy Policy.

1. Who this policy applies to

This policy applies to all Gardeners Muswell Hill customers in the area, including residential and commercial clients, one-off service users, recurring maintenance customers, and anyone who contacts us for a quotation, consultation, or service arrangement. It also applies where you communicate with us by phone, email, messaging services, or in person and provide information relating to your gardening needs.

We only collect and use personal data that is relevant to delivering our services, managing our relationship with you, and meeting our legal obligations.

2. Data we collect

We may collect the following categories of personal data:

Identity information such as your name, title, and, where relevant, business name.
Contact details such as your address, email address, and phone number.
Service information including details of the garden or property, access notes, preferred service dates, job history, and your instructions or preferences.
Payment information such as billing details, transaction records, and payment confirmations. We do not store full card details where payment is processed securely by a third-party provider.
Communication records including emails, messages, notes from calls, complaints, feedback, and any correspondence relating to your booking or service.
Technical information if you interact with our digital channels, such as IP address, browser type, device information, and usage data, where applicable.
Marketing preferences where you indicate whether you wish to receive updates, offers, or service announcements.

We generally do not seek to collect special category data. If such information is incidentally shared with us, we will only process it where necessary and lawful, and we will apply appropriate safeguards.

3. How we use your data

We use personal data to:

provide quotations and deliver gardening services;
manage appointments, scheduling, and service visits;
communicate with you about your booking, requests, or changes;
process payments, invoices, and account administration;
respond to enquiries, feedback, and complaints;
maintain business records and service history;
improve service quality and operational efficiency;
meet legal, tax, accounting, and regulatory obligations;
prevent fraud, misuse, or security incidents;
send marketing communications where permitted and where you have not opted out.

We only use your data in ways that are compatible with the purpose for which it was collected or where we have a separate lawful basis to do so.

4. Lawful basis for processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

Contract: to take steps at your request before entering into a contract and to perform the gardening services you have asked us to provide.
Legal obligation: to comply with tax, accounting, record-keeping, and other legal requirements.
Legitimate interests: to operate, manage, and improve our business, maintain records, respond to client requests, and ensure service quality and security, provided these interests do not override your rights and freedoms.
Consent: for certain marketing communications or other situations where consent is the most appropriate basis. Where consent is used, you can withdraw it at any time.

We will always consider whether our use of your data is necessary and proportionate. If we rely on legitimate interests, we assess the impact on you and balance it against our business needs.

5. Data sharing and processors

We may share personal data with trusted third parties that help us deliver our services. These third parties act as processors or, in some cases, independent controllers. They may include:

payment service providers;
accounting and bookkeeping providers;
IT, hosting, and software service providers;
communication and messaging providers;
cloud storage and data backup services;
professional advisers such as accountants or legal advisers;
insurance providers;
couriers or suppliers where necessary for service delivery.

Where we use processors, we require them to handle data securely, act only on our instructions, and protect personal information in accordance with data protection law. We do not sell your personal data.

We may also disclose data if required by law, regulation, court order, or where necessary to protect our rights, property, staff, customers, or the public.

6. Retention of personal data

We keep personal data only for as long as necessary for the purposes set out in this policy. Retention periods depend on the type of information and the reason for holding it.

Customer and service records are generally retained for the duration of the relationship and for a reasonable period afterwards to manage queries, repeat services, and record keeping.
Financial and tax records are retained for the period required by law and standard accounting practice.
Communication records may be retained for as long as needed to resolve disputes, handle complaints, or maintain service history.
Marketing preferences are retained until you withdraw consent or opt out.

When data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention procedures.

7. Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and regular review of our procedures.

No system can be guaranteed completely secure, but we work to reduce risks and handle information responsibly.

8. Your rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These include the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete information;
erase your data in certain circumstances;
restrict how we process your data in certain situations;
object to processing based on legitimate interests or direct marketing;
data portability where processing is based on consent or contract and carried out by automated means;
withdraw consent at any time, where processing is based on consent.

You also have the right to raise concerns with the UK Information Commissioner’s Office if you believe your data has been misused or your rights have not been respected.

We may need to verify your identity before responding to certain requests and may not be able to comply where a legal exemption applies.

9. Marketing communications

If we send you promotional or update communications, we will do so only where permitted by law. You can choose not to receive marketing messages at any time. If you opt out, we will stop sending such communications as soon as reasonably possible, while still retaining essential service or transactional information where needed.

10. Cookies and similar technologies

If you interact with our online services, cookies or similar technologies may be used to support website functionality, measure usage, and improve user experience. Where legally required, we will obtain consent before placing non-essential cookies. You can manage cookie settings through your browser or device preferences.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers in Muswell Hill to review this policy periodically so they remain informed about how their data is handled.

12. Summary of our commitments

Gardeners Muswell Hill is committed to handling personal data with care, transparency, and respect. We collect only what we need, use it for clear and lawful purposes, keep it only for as long as necessary, and protect it with appropriate safeguards. Your privacy matters to us, and we aim to process your information in a way that is fair, secure, and compliant with data protection law.