Privacy Policy - Gardeners Bulls Cross

Effective for all Gardeners Bulls Cross customers in the area. This Privacy Policy explains how personal data is collected, used, stored, shared, and protected when you use services provided by Gardeners Bulls Cross. It is written to reflect the requirements of the UK GDPR and the Data Protection Act 2018, and it applies to every customer, prospective customer, and site user in the local area where our gardening services are offered.

1. Our Commitment to Privacy

Gardeners Bulls Cross is committed to handling personal information fairly, lawfully, and transparently. We only collect data that is necessary for providing our services, managing customer relationships, meeting legal obligations, and improving the quality and reliability of our work. We treat all personal information with care and take reasonable technical and organisational measures to reduce the risk of loss, misuse, unauthorised access, or disclosure.

We aim to keep privacy practices simple, clear, and proportionate. This means we do not collect data we do not need, and we do not use personal information in ways that are incompatible with the purposes explained in this policy.

2. Information We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, and, where relevant, business name.
Contact data: address, phone number, email address, and service location details.
Service data: information about requested garden work, appointments, preferences, property access instructions, and service history.
Payment and billing data: invoice details, payment status, and transaction records, where applicable.
Communication data: correspondence by phone, email, message, or written communication.
Technical data: basic information generated through our systems, such as logs or device information if you interact with digital services.
Optional information: feedback, complaints, surveys, and other information you choose to provide.

In some cases, we may also collect limited information from third parties, such as a landlord, property manager, family member, or referral source, where they have lawfully shared your details or where you have asked them to pass information to us.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide quotes, arrange visits, and deliver gardening services;
to manage bookings, schedules, and service changes;
to communicate about appointments, work progress, and customer requests;
to issue invoices, record payments, and manage accounts;
to maintain service records and improve customer experience;
to respond to enquiries, complaints, and feedback;
to comply with legal, tax, accounting, and regulatory obligations;
to protect our business, our staff, customers, and property;
to prevent fraud or misuse of services;
to support legitimate business administration and planning.

We do not sell personal data. Any use of personal information is limited to what is necessary for the operation of our services and our legal responsibilities.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the situation, Gardeners Bulls Cross may rely on one or more of the following lawful bases:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes preparing quotations, scheduling services, carrying out agreed gardening work, and managing payments.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. This can include maintaining service records, handling customer communications, securing our systems, and improving service quality.

Legal Obligation

We may process certain information to comply with legal duties, such as accounting, tax, insurance, health and safety, and record-keeping requirements.

Consent

Where consent is required, we will ask for it clearly and separately. For example, this may apply in limited situations where we rely on your explicit permission for optional communications or specific uses not covered by the bases above. You may withdraw consent at any time, where consent is the basis for processing.

5. Sharing and Processors

We may share personal data with trusted third parties that help us operate our business. These organisations act as processors when they process data on our instructions and for our specified purposes. We require them to handle data securely and only use it for authorised tasks.

Examples of processors or service providers may include:

accounting and bookkeeping providers;
payment processing services;
IT support, data storage, and software providers;
communication and scheduling tools;
professional advisers such as insurers, auditors, or legal advisers;
subcontractors who assist with service delivery, where necessary.

We may also disclose data where required by law, regulation, court order, or public authority request. If a business reorganisation, sale, or transfer occurs, relevant personal data may be shared with parties involved in that process, subject to appropriate safeguards.

We do not permit processors to use your information for their own unrelated purposes. They are bound by contractual duties and, where applicable, confidentiality obligations.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, tax, and insurance requirements. Retention periods vary depending on the type of information and the reason it was collected.

In general:

customer service and invoice records may be retained for several years to meet accounting and tax obligations;
communication records may be retained for the period needed to resolve queries or demonstrate service history;
unused enquiry or quotation information may be kept for a shorter period unless it becomes part of an active customer relationship;
information no longer needed is securely deleted, anonymised, or archived in a restricted form.

When deciding how long to keep data, we consider the legal requirement, business need, and the level of risk involved.

7. Security of Personal Data

We use reasonable organisational and technical safeguards to protect personal information. These may include access controls, password protection, secure storage, limiting access to authorised personnel, and careful handling of records. While no method of transmission or storage can be guaranteed as completely secure, we work to reduce risks and respond appropriately if an issue arises.

Where a data incident occurs that could affect your rights or freedoms, we will assess the situation and take steps in line with applicable law, including notifying the relevant supervisory authority and affected individuals where required.

8. Your Rights Under GDPR

As a data subject, you have a number of rights under the UK GDPR. These rights may apply depending on the circumstances and the legal basis for processing. They include:

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete data.
Right to erasure: in some cases, you may ask us to delete your data.
Right to restriction: you may request limited use of your data in certain situations.
Right to object: you may object to processing based on legitimate interests.
Right to data portability: in certain cases, you may receive your data in a structured format.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

These rights are not absolute and may be subject to exceptions under data protection law. We will assess all requests carefully and respond in accordance with our legal obligations.

9. How We Handle Sensitive or Special Category Data

We do not routinely seek special category data. However, gardening services may occasionally involve information that reveals health-related access needs, mobility concerns, or other sensitive circumstances. Where such information is provided, we will handle it with extra care and only process it when necessary and lawful to do so. We will keep this information to a minimum and retain it only for as long as required for the relevant purpose.

10. Children’s Data

Our services are intended for adults or those acting on behalf of property owners, tenants, or businesses. We do not knowingly collect personal data directly from children in connection with our services. If we become aware that we have collected such data without appropriate authority, we will take steps to delete it where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or business practice. The most current version will apply to our processing of personal data. We encourage customers in the Gardeners Bulls Cross area to review this policy periodically.

12. Summary of Key Principles

This policy is based on the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability. We aim to collect only the information needed to provide reliable gardening services, protect customer interests, and comply with the law.

If you use Gardeners Bulls Cross services in the area, your personal data will be handled in line with this Privacy Policy. We will continue to review our procedures to ensure they remain appropriate and compliant.