Privacy Policy - Gardeners Upminster Bridge

This Privacy Policy explains how Gardeners Upminster Bridge collects, uses, stores, and protects personal data for all customers in the Upminster Bridge area. It applies to every customer, enquiry, and service arrangement connected with Gardeners Upminster Bridge, whether the interaction is made by phone, email, online form, referral, or in person. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We recognise that privacy is important. This policy is designed to help you understand what information is collected, why it is collected, how long it is kept, and what rights you have over your data. By using the services of Gardeners Upminster Bridge, you acknowledge that your information may be processed as described in this policy.

1. Information We Collect

Gardeners Upminster Bridge only collects personal data that is relevant and necessary for providing gardening services, managing customer relationships, and meeting legal obligations. The information we may collect includes:

Identity details such as your name and title.
Contact details such as address, telephone number, and email address.
Service details such as property access notes, garden preferences, scheduling requests, and service history.
Billing and transaction information such as payment records, invoices, and account references.
Communication records such as messages, complaint notes, and correspondence related to services.
Technical information if you interact with digital systems, including basic device or usage information where relevant for security and service administration.

We do not deliberately collect special category personal data unless it is required for a specific lawful reason and with appropriate safeguards. If such information is ever provided to us, it will be handled with extra care and only where permitted by law.

2. How We Use Personal Data

The data collected by Gardeners Upminster Bridge is used for practical service and administrative purposes. These include:

Responding to enquiries and preparing quotations.
Delivering gardening services at customer properties in the Upminster Bridge area.
Arranging appointments, visits, and ongoing maintenance schedules.
Managing payments, invoices, refunds, and accounting records.
Keeping customer records accurate and up to date.
Handling complaints, service changes, and follow-up communications.
Meeting legal, regulatory, tax, and insurance obligations.
Protecting our business, staff, customers, and property from fraud, misuse, or unlawful conduct.

We only use personal data for purposes that are compatible with the reason it was originally collected. Any use beyond that will be assessed carefully and carried out only where there is a valid lawful basis.

3. Lawful Basis for Processing

Gardeners Upminster Bridge processes personal data under the lawful bases set out in the UK GDPR. Depending on the situation, we may rely on one or more of the following:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes taking instructions, delivering agreed gardening work, and managing associated payments.

Legal Obligation

We may process information to comply with legal requirements, including tax records, business accounting, insurance, and record-keeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include business administration, service improvement, fraud prevention, and maintaining secure records.

Consent

In limited cases, we may rely on your consent, for example where you voluntarily agree to receive certain types of communication or where specific processing requires your permission. You may withdraw consent at any time where it is the basis for processing.

Gardeners Upminster Bridge does not use personal data in ways that are incompatible with these legal grounds. If we need to process data for a new purpose, we will assess the appropriate lawful basis before doing so.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These third parties act as processors or, in some cases, independent controllers. We ensure that appropriate contracts and safeguards are in place before any data is shared.

Processors may include:

Payment service providers that handle secure payment processing.
Accounting and bookkeeping services that support invoicing and financial administration.
IT and software providers that host systems, store records, or support communication tools.
Scheduling or customer management platforms used for appointment coordination and job tracking.
Professional advisers such as insurers, legal advisers, or auditors where needed.

We only share the minimum information necessary for the relevant task. Processors are required to handle data securely, use it only on our instructions, and protect it from unauthorised access or disclosure.

We may also disclose data if required by law, court order, or to protect the rights, safety, or property of Gardeners Upminster Bridge, our customers, staff, or others.

5. Data Retention

Gardeners Upminster Bridge keeps personal data only for as long as it is needed for the purposes described in this policy. Retention periods depend on the type of information and the reason for keeping it.

Customer and service records are generally kept for the duration of the relationship and for a reasonable period after it ends.
Financial and accounting records are retained for the period required by law and standard business practice.
Correspondence and complaint records may be retained for as long as needed to manage the matter and evidence decisions.
Technical or security-related logs are kept only as long as necessary for monitoring and protection.

When data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe manner. Retention reviews are carried out to ensure information is not held for longer than necessary.

6. Security of Personal Data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, or alteration. These measures may include access controls, secure storage, staff confidentiality obligations, and careful management of third-party systems.

While no system can be guaranteed completely secure, Gardeners Upminster Bridge takes reasonable steps to reduce risk and to respond appropriately if a data incident occurs.

7. Your Rights

As a customer of Gardeners Upminster Bridge in the Upminster Bridge area, you have rights in relation to your personal data under data protection law. These rights may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of data in certain circumstances.
Right to restriction – to ask us to limit processing in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent.

These rights are not absolute, and some may only apply in specific circumstances. If you wish to exercise a right, we will assess your request in accordance with the law and respond within the required timeframe.

8. International Transfers

Where any service provider or system involves the transfer of personal data outside the United Kingdom, we will ensure appropriate legal safeguards are in place. This may include adequacy regulations, standard contractual clauses, or equivalent protective measures to keep data secure and compliant.

9. Children’s Data

Gardeners Upminster Bridge does not intentionally collect data from children for marketing or unrelated purposes. If information relating to a child is incidentally provided in connection with a service address or access arrangement, it will only be processed where necessary and in a lawful, minimal way.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal changes, service changes, or improvements in our data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how Gardeners Upminster Bridge handles personal data.

11. Summary of Our Commitment

Gardeners Upminster Bridge is committed to respecting privacy, using personal data responsibly, and safeguarding information for all customers in the area. We collect only the data needed to deliver our gardening services, rely on clear lawful bases, work with trusted processors, retain information only as long as necessary, and support your rights under data protection law. If you are a customer in the Upminster Bridge area, this Privacy Policy applies to you and governs how your information is handled.