Privacy Policy - Gardeners Cann Hall

This Privacy Policy explains how Gardeners Cann Hall collects, uses, stores, shares, and protects personal data belonging to customers in the local area. It applies to all Gardeners Cann Hall customers in the area, including individuals who request gardening services, receive quotations, book appointments, or otherwise interact with our services. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK GDPR and the Data Protection Act 2018.

By using our services, you acknowledge that your personal information may be processed for the purposes described in this policy. We aim to collect only the information necessary to provide professional gardening services, manage our business operations, and meet legal obligations. We also take appropriate measures to safeguard the data we hold and respect the rights of every individual whose data we process.

1. Information We Collect

We collect personal data that is necessary to arrange, deliver, and manage gardening services. The categories of information we may collect include:

Identity details such as your name.
Contact details such as address, phone number, and email address.
Service information including property access notes, service preferences, and requested work details.
Communication records such as messages, call notes, quotations, and service updates.
Billing and payment information where needed to manage invoices and payments.
Technical information if you visit a digital service platform connected to our operations, such as basic device or usage data.

We do not intentionally collect special category data unless it is provided by you and is strictly required for a specific service arrangement, in which case we will only process it where a lawful basis exists and additional safeguards are applied.

2. How We Use Your Data

We use personal data for legitimate and necessary business purposes related to our gardening services. These may include:

Providing quotations and booking services.
Carrying out scheduled garden maintenance and related work.
Communicating with customers about appointments, access, and service changes.
Preparing invoices, processing payments, and keeping financial records.
Responding to enquiries, complaints, or service requests.
Managing business administration, quality control, and record keeping.
Meeting legal, tax, and regulatory requirements.

We only process data in ways that are relevant to the service relationship and consistent with the purpose for which the data was collected. We do not sell personal data and do not use it for unrelated profiling or automated decision-making that produces legal or similarly significant effects.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing personal data. The lawful bases we rely on may include:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotes, arranging appointments, completing gardening work, and handling payments connected to the service.

Legal Obligation

We may process certain records to comply with legal duties, including accounting, tax, insurance, and other regulatory obligations.

Legitimate Interests

We may process personal data where it is reasonably necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include service administration, maintaining business records, improving customer service, and protecting our business from fraud or misuse.

Consent

In limited situations, we may rely on your consent, particularly where processing is optional and not required for the service contract. If consent is used, you may withdraw it at any time. Withdrawal will not affect the lawfulness of any processing carried out before consent was withdrawn.

4. Data Sharing and Processors

We may share personal data with trusted third parties only where necessary and proportionate. Any third party acting on our behalf is treated as a processor and is required to handle your data securely and in accordance with data protection law. Processors may include:

Payment service providers who process transactions.
Accounting or bookkeeping providers who help manage financial records.
IT and cloud storage providers who support data storage and secure communication.
Administrative service providers who assist with scheduling, record keeping, or business operations.

We may also disclose information if required to do so by law, regulation, court order, or lawful request from a public authority. Where feasible, we limit the amount of data shared and ensure appropriate safeguards are in place.

All processors are expected to process personal data only for specified purposes, under documented instructions, and with suitable technical and organisational measures to protect confidentiality and integrity.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy. Retention periods may vary depending on the type of data and the reason it is held.

Customer service records are retained for the duration of the service relationship and for a reasonable period afterwards.
Financial and invoicing records are kept for the period required by tax and accounting law.
Communication records may be retained for evidence of instructions, service history, or complaint resolution.
Consent-based information is retained only until consent is withdrawn or the purpose ends.

When data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices. Retention decisions take into account legal obligations, operational needs, and the principle of storage limitation.

6. Security of Your Information

We take the security of personal data seriously. Appropriate measures are used to reduce the risk of unauthorised access, loss, misuse, or disclosure. These measures may include access controls, secure storage, restricted permissions, staff awareness, and safe disposal of records.

However, no method of transmission or storage is completely secure. While we work to protect personal data, we cannot guarantee absolute security. If a data breach occurs and we are legally required to do so, we will follow the applicable notification procedures.

7. Your Rights

As a data subject, you have rights under the UK GDPR. These rights may include:

Right of access to obtain a copy of the personal data we hold about you.
Right to rectification to correct inaccurate or incomplete information.
Right to erasure in certain circumstances, also known as the right to be forgotten.
Right to restriction to limit how your data is processed in specific situations.
Right to data portability where processing is based on consent or contract and carried out by automated means.
Right to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent where consent is the lawful basis for processing.

You also have the right to raise a concern with the relevant supervisory authority if you believe your data protection rights have been infringed. We encourage individuals to understand their rights and use them where appropriate.

We will respond to rights requests within the time limits set by law and may need to verify your identity before actioning a request.

8. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it. Such safeguards may include adequacy regulations, contractual protections, or other lawful transfer mechanisms recognised under data protection law.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any revised version will apply from the date it is published. We encourage customers to review this policy periodically so they remain informed about how their information is handled.

10. Summary of Our Commitment

Gardeners Cann Hall is committed to protecting the privacy of our customers in the area. We collect only the information needed to provide reliable gardening services, we process data on clear lawful bases, we limit retention to necessary periods, and we use trusted processors under proper safeguards. We also respect individual rights and work to ensure personal data is handled responsibly, transparently, and securely.

In short: we aim to use personal data fairly, keep it safe, and retain it only as long as required for service delivery and legal compliance.