Privacy Policy - Gardeners Kings Cross

This Privacy Policy explains how Gardeners Kings Cross collects, uses, stores, shares, and protects personal data when providing services to customers in the Kings Cross area. It applies to all Gardeners Kings Cross customers in area, including individuals who enquire about our services, receive quotations, book gardening work, or otherwise interact with us in connection with our services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who This Policy Applies To

This policy applies to customers, prospective customers, property owners, tenants, business clients, and any other individuals whose personal data is processed in connection with services arranged under the name Gardeners Kings Cross. It also applies where data is collected through phone calls, messages, email correspondence, written enquiries, booking records, service notes, invoices, or other business communications.

By using our services or providing personal data to us, you acknowledge that your information may be processed as described in this policy. We aim to keep our processing limited to what is necessary for legitimate service delivery and compliance obligations.

2. Data We Collect

We collect only personal data that is relevant to providing gardening services, managing customer relationships, and meeting our legal and operational obligations. Depending on the nature of the service, we may collect the following:

Identity details such as your name, title, and any business name you provide.
Contact details such as phone number, email address, and service address.
Service information such as instructions, booking preferences, appointment notes, and details about the work requested.
Billing and payment information such as invoice records, payment status, and transaction references.
Communication records such as emails, messages, call notes, complaints, feedback, and service updates.
Property-related information that may be necessary to complete gardening work safely and effectively.
Technical data if you interact with our digital systems, including basic device or usage information where applicable.

We do not intentionally collect special category data unless it is strictly necessary and you choose to provide it. If such information is ever shared with us, we will process it only where a lawful basis exists and appropriate safeguards are in place.

3. How We Use Personal Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to schedule and deliver gardening services;
to manage customer accounts and appointments;
to issue invoices and process payments;
to maintain records of work completed;
to handle customer feedback, complaints, and follow-up communication;
to meet legal, accounting, and tax obligations;
to improve service quality and business administration;
to protect our business, staff, and customers from fraud, misuse, or unsafe activity.

We only use personal data in ways that are compatible with the purposes for which it was collected, unless a new lawful basis applies or further use is otherwise permitted under applicable law.

4. Lawful Basis for Processing

Under data protection law, we must identify a lawful basis for each processing activity. The lawful bases we rely on may include:

Contract

We process personal data when it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes handling bookings, delivering services, managing customer instructions, and issuing invoices.

Legal Obligation

We process certain data where it is necessary to comply with legal obligations, including record-keeping, tax requirements, accounting obligations, and responses to lawful requests from authorities.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include managing our services, improving operations, preventing fraud, maintaining security, and keeping proper business records.

Consent

Where required, we may rely on your consent, for example for certain types of optional communication or specific uses of data not covered by another lawful basis. You may withdraw consent at any time, where processing is based on consent.

5. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our services. These recipients act either as independent controllers or as processors acting on our behalf. We only share data where necessary and only with appropriate safeguards.

Examples of processors may include:

IT and cloud storage providers that securely host records and business systems;
administrative service providers that help with booking management, scheduling, or document handling;
payment service providers that process transactions;
accounting or bookkeeping providers that support financial and tax administration;
communication tools used for email, messaging, or service coordination.

Where a processor is used, we require them to process personal data only on our instructions, to keep it secure, and to use it only for the agreed purpose. We do not sell personal data.

We may also disclose personal data if necessary to comply with the law, enforce our terms, protect our rights, or respond to valid legal proceedings.

6. Data Retention

We keep personal data only for as long as is necessary for the purposes for which it was collected, including for legal, accounting, and operational requirements. Retention periods may vary depending on the type of record and the reason it is held.

Customer service records are kept for the period needed to manage the relationship and complete the service.
Financial and invoicing records are retained for the period required by tax and accounting law.
Communication records may be retained for a reasonable period to manage enquiries, disputes, or service history.
Legal or claims-related records may be retained longer where necessary to establish, exercise, or defend legal claims.

When personal data is no longer needed, we will take steps to delete, anonymise, or securely archive it in accordance with our retention practices. We regularly review the data we hold to ensure it is not kept for longer than necessary.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures may include access controls, secure storage, role-based permissions, and reasonable internal procedures for data handling.

Although we take care to protect information, no system can be guaranteed to be completely secure. We therefore encourage customers to share only information that is necessary for the service being provided.

8. Your Rights Under GDPR

Where the UK GDPR applies, you have a number of rights in relation to your personal data. These rights may be subject to legal restrictions or exemptions. They include the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete data;
erase personal data in certain circumstances;
restrict processing in certain situations;
object to processing based on legitimate interests or direct marketing;
data portability where processing is based on consent or contract and carried out by automated means;
withdraw consent where processing relies on consent.

You also have the right not to be subject to a decision based solely on automated processing, including profiling, where this produces legal or similarly significant effects and where such processing is applicable.

If you wish to exercise a right, we will respond in line with applicable data protection law and within the required timeframe. We may ask for information necessary to verify your identity before dealing with a request.

9. Marketing and Communications

We do not send unnecessary marketing communications. Where we do send optional service-related or promotional messages, we will do so only where permitted by law and, where required, with your consent. You may opt out of such messages at any time by following the relevant instructions or by telling us you no longer wish to receive them.

10. International Transfers

If any service provider stores or processes data outside the United Kingdom, we will ensure that suitable safeguards are in place in line with data protection law. This may include standard contractual safeguards or reliance on an adequacy decision where applicable. We remain responsible for ensuring that your personal data receives an appropriate level of protection.

11. Children’s Data

Our services are intended for adults and commercial or domestic property arrangements. We do not knowingly collect children’s personal data except where it is incidental and necessary for a service request made by an adult. If we become aware that we have collected data from a child without a proper legal basis, we will take appropriate steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their information is processed.

13. Complaints and Supervisory Authority

If you believe your data protection rights have been infringed, you may raise a complaint with the relevant data protection authority. We also encourage you to contact us first so we can review and resolve any concerns promptly and fairly. We take privacy complaints seriously and will investigate them with care.

14. Summary of Our Approach

Gardeners Kings Cross is committed to using personal data responsibly and only where necessary to deliver services, manage administration, and comply with the law. Our approach is based on transparency, security, and data minimisation. We keep data only as long as needed, use processors carefully, and respect the rights of every customer in the area.

This policy applies to all Gardeners Kings Cross customers in area and is designed to support lawful and fair processing of personal data.