Gardeners Leyton Privacy Policy

This Privacy Policy explains how Gardeners Leyton collects, uses, stores, and protects personal data relating to our customers and potential customers in our service area. We are committed to complying with the UK General Data Protection Regulation and all applicable data protection laws. This Policy applies to all individuals who use or enquire about our gardening and related services in our local area, whether you contact us online, by post, or in person.

Who this Privacy Policy applies to

This Privacy Policy applies to all Gardeners Leyton customers and prospective customers within our service area. By engaging with us, requesting a quote, or using our services, you acknowledge that you have read and understood this Policy and that your personal data will be processed as described here.

Personal data we collect

We collect and process different types of personal data depending on how you interact with us and what services you require. The categories of data we may collect include:

Identification and contact details, such as your name, address, and general contact preferences.

Service and property information, such as property type, garden size, access details, and any relevant information you provide to help us plan and deliver our services safely and effectively.

Communication records, including notes of your enquiries, quotes, bookings, feedback, and any other correspondence between you and Gardeners Leyton.

Payment and transaction data, such as records of payments you make to us and invoices issued to you. We do not store full payment card details where third party payment processors are used.

Usage and technical data, where applicable, such as when you visit our website. This may include information about your device, browser, and how you use our site, collected through basic analytics or similar technologies.

How we collect your personal data

We collect personal data directly from you when you contact us to request information, a quote, or a booking, when you enter into a contract for services with us, and when you communicate with us during and after the provision of services. We may also collect data indirectly when you browse our website or interact with any online forms we provide.

Lawful bases for processing

We process your personal data only when we have a lawful basis to do so. Depending on the context, we rely on one or more of the following grounds:

Performance of a contract. We process data to provide you with our gardening services, prepare quotes, manage bookings, and handle payments and invoices.

Legitimate interests. We process data for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. This may include improving our services, managing our customer relationships, maintaining security, and protecting our legal rights.

Legal obligations. We process certain data to comply with legal and regulatory requirements, including record keeping, tax, and accounting obligations.

Consent. In limited cases, we may rely on your consent, for example, where it is required for specific types of optional communications. When we rely on consent, you can withdraw it at any time.

How we use your personal data

We use your personal data for the following purposes:

To respond to your enquiries, provide quotes, and manage your bookings.

To deliver gardening and related services at your property and to coordinate site visits.

To manage our relationship with you, including handling feedback, queries, and complaints.

To issue invoices, process payments, and maintain financial records.

To improve our services, plan resources, and understand customer needs in our area.

To comply with our legal and regulatory obligations and to protect our rights, property, and safety, as well as that of our customers and third parties.

Data sharing and processors

We do not sell your personal data. We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are only permitted to process your data in accordance with our instructions and for specified purposes, and they are required to protect your data in line with applicable data protection law.

Examples of processors and third parties we may use include:

Payment processing providers, to handle payments securely and to prevent fraud.

IT and hosting providers, to operate and maintain our systems, website, and digital storage.

Professional advisers, such as accountants, where access to limited personal data is necessary for their services.

We may also disclose personal data where required to do so by law, by a court, or by a regulatory authority, or where disclosure is necessary to establish, exercise, or defend legal claims.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements. The retention period will vary depending on the type of data and the context of our relationship with you.

In general:

Customer and service records are kept for as long as you remain a customer and for a reasonable period afterwards, so that we can respond to queries and maintain accurate records.

Financial and transaction records are retained for the period required by law for tax and accounting purposes.

Where we rely on consent, we will keep the relevant data until you withdraw your consent or until it is no longer needed for the purpose for which it was collected.

When personal data is no longer required, we will securely delete or anonymise it.

Data security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, alteration, or destruction. These measures include access controls, secure storage, and limiting personal data access to personnel and processors who have a business need to know the information. While we take reasonable steps to safeguard your data, no system can be guaranteed as completely secure.

Your data protection rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal exceptions, but we will always respond to any request you make in accordance with the law.

Right of access. You can request confirmation that we hold personal data about you and ask for a copy of that data.

Right to rectification. You can ask us to correct inaccurate or incomplete personal data.

Right to erasure. In certain circumstances, you can request that we delete your personal data, for example, where the data is no longer necessary for the purposes for which it was collected.

Right to restriction of processing. You can request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data.

Right to data portability. Where legally applicable, you can request that we provide your personal data in a structured, commonly used format so that you can transfer it to another organisation.

Right to object. You can object to our processing of your personal data where we rely on legitimate interests, including any direct marketing activities.

Right to withdraw consent. Where we rely on your consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

Exercising your rights and complaints

If you wish to exercise any of your data protection rights or raise a concern about how your personal data is handled, you can contact us using the contact details made available on our usual customer communications or channels. We will respond to your request as soon as reasonably possible and within the timescales required by law.

You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed. We encourage you to contact us first so that we can try to resolve any concerns directly.

International data transfers

Where we use processors or services that involve the transfer of personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your data, such as relying on adequacy regulations or using legally approved standard contractual clauses, in line with data protection requirements.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any updates will be made available through our usual communication channels. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

Contacting Gardeners Leyton about privacy

If you have any questions about this Privacy Policy or how Gardeners Leyton processes your personal data, you can contact us using the contact details that we provide to our customers. Please include your name and sufficient information for us to identify you when making a privacy related enquiry.