Privacy Policy

Gardeners Cann Hall Privacy Policy

This Privacy Policy explains how Gardeners Cann Hall collects, uses, stores, shares and protects personal data relating to our customers and prospective customers. It applies to all Gardeners Cann Hall customers and service users in our operating area, including anyone who contacts us, requests a quote, books a service or otherwise interacts with our business.

Who We Are

Gardeners Cann Hall is a gardening and related services provider operating in the Cann Hall area. For the purposes of applicable data protection law, including the United Kingdom General Data Protection Regulation and the Data Protection Act 2018, Gardeners Cann Hall is the data controller in respect of the personal data described in this Privacy Policy.

Personal Data We Collect

We only collect personal data that is relevant for providing our services and managing our relationship with you. The types of personal data we may collect include:

Identification and contact details such as your name, postal address, service address, and any other contact details you choose to provide when you contact us or make a booking.

Service and contract information such as details of your garden or outdoor space, the type and frequency of services requested, access instructions you choose to give us, and records of quotes, bookings and invoices.

Communication records including notes of telephone or in-person conversations, and any correspondence you send to us or that we send to you in the course of providing our services.

Payment-related information such as confirmation that payment has been made, payment method used and invoice records. We do not store full payment card details where card processing is handled by external payment providers.

Technical data that may be collected automatically when you visit our website, such as your IP address, browser type, basic device information and pages viewed. This is collected using cookies or similar technologies and is used to administer and improve our website.

How We Collect Your Data

We collect personal data directly from you when you contact us, request a quotation, book a service, ask us to visit your property, or communicate with us by any means. We may also collect information from publicly accessible sources where this is necessary and lawful, for example to verify address details for service provision and billing purposes.

Lawful Bases for Processing

We will only process your personal data where we have a lawful basis to do so under data protection law. The main lawful bases we rely on are:

Contract: We process your personal data where it is necessary to enter into or perform a contract with you, for example to provide gardening services, manage bookings, issue invoices and communicate with you about your services.

Legal obligation: We may process your data where it is necessary to comply with legal and regulatory requirements, including record-keeping, tax and accounting obligations.

Legitimate interests: We may process your data where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. This includes managing our relationship with you, improving our services, securing our systems and defending legal claims.

Consent: In some cases we may rely on your consent, for example for certain types of optional marketing or the use of non-essential cookies. Where we rely on consent, you may withdraw it at any time by contacting us.

How We Use Your Personal Data

We use your personal data for the following purposes:

To provide gardening and related services, including quoting for work, scheduling visits, carrying out services at your property and communicating with you about your bookings.

To manage our customer relationships, including maintaining accurate records, handling enquiries, dealing with complaints and providing customer support.

To process payments and administer our accounts, including issuing invoices, processing refunds where necessary and maintaining financial records.

To operate, maintain and improve our business and website, including analysing how our services are used and keeping our systems secure.

To comply with applicable laws and to establish, exercise or defend legal rights and claims.

With your consent, to send you information about services that may be relevant to you, and to contact you with updates or offers where permitted by law.

Data Sharing and Processors

We do not sell your personal data. We may share your personal data with trusted third parties where necessary for the purposes set out in this Privacy Policy and where permitted by law. These third parties may act as data processors on our behalf and are required to handle your data securely and only in accordance with our instructions.

Examples of such third parties include:

IT and hosting providers who support our business systems and website.

Payment processors who handle card or electronic payments on our behalf.

Accountants or professional advisers who assist with financial and legal obligations.

Where required, regulatory bodies, law enforcement or other authorities, but only where we are legally obliged or permitted to do so.

Where we use processors, we ensure appropriate data processing agreements are in place. If we ever need to transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are used, in line with data protection law.

Data Retention

We keep your personal data only for as long as is necessary for the purposes for which it was collected, or for as long as we are required to keep it by law.

Customer and service records are generally retained for the duration of our relationship with you and for a reasonable period afterwards to handle queries, disputes or legal claims. Financial and invoice records are typically kept for the period required under tax and accounting rules.

When personal data is no longer required, we will take steps to securely delete or anonymise it.

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures may include access controls, secure storage, and limiting access to personal data to those who need it for legitimate business purposes. While we take reasonable steps to protect your data, no transmission or storage system can be guaranteed to be completely secure.

Your Data Protection Rights

Under data protection law, you have a number of rights in relation to your personal data. These include:

Right of access: You have the right to request a copy of the personal data we hold about you and to obtain information about how we process it.

Right to rectification: You can ask us to correct any inaccurate or incomplete personal data we hold about you.

Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it.

Right to restriction of processing: You may ask us to restrict our processing of your data in specific situations, such as while we are considering a request from you to correct or delete it.

Right to data portability: Where the processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive the personal data you provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller.

Right to object: You have the right to object to processing based on our legitimate interests, and to object at any time to processing of your data for direct marketing purposes.

Where we rely on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before consent was withdrawn.

Exercising Your Rights and Complaints

If you wish to exercise any of your data protection rights, or if you have any questions or concerns about how we handle your personal data, you can contact us using the details provided on our website or through the usual communication methods you use with us.

You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed. In the United Kingdom, this is the Information Commissioner's Office. We would, however, appreciate the chance to respond to your concerns before you approach a supervisory authority, so we encourage you to contact us first.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. Any updates will be published on our website and will apply from the date of publication. We encourage you to review this Privacy Policy periodically so that you remain informed about how we protect your personal data.