Gardeners Chase Cross Privacy Policy

This Privacy Policy explains how Gardeners Chase Cross collects, uses, stores and protects personal data about its customers. It applies to all Gardeners Chase Cross customers located in the Chase Cross area who use our gardening and related services, whether contacting us online, by post or in person.

Who We Are

Gardeners Chase Cross provides gardening, maintenance and related services to residential and commercial customers in the Chase Cross area. For the purposes of applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018, Gardeners Chase Cross is the data controller for the personal data described in this Privacy Policy.

Types of Personal Data We Collect

We may collect and process the following categories of personal data about you:

Identification and contact details, such as name, postal address, service address, and contact preferences.

Communication details, such as information you provide when you contact us with enquiries, feedback, complaints or requests, and records of our communications with you.

Service and contract information, such as details of the gardening or maintenance services you request, quotes we provide, work orders, invoices and payment history.

Financial information, such as limited payment-related information necessary to process your payments, depending on the method you choose. Full card details are not stored by us if you pay using external payment services.

Usage and technical information, such as basic information about how you interact with our website or online forms, including dates and times of visits, pages viewed, and basic device information, where this is collected through cookies or similar technologies.

Location-related information, such as the address where services are to be carried out, to allow us to schedule and deliver our services.

How We Collect Your Personal Data

We collect personal data directly from you when you contact us, request a quote, make a booking, enter into a contract for services, or communicate with us by any means. We may also receive personal data from third parties where this is necessary to provide our services, for example from property managers or landlords who introduce you as a customer.

Lawful Bases for Processing

We rely on the following lawful bases to process your personal data under the UK GDPR:

Contract. We process personal data where it is necessary to enter into or perform a contract with you, for example to provide gardening services, manage bookings, issue invoices and take payment.

Legitimate interests. We may process personal data where it is necessary for our legitimate business interests, provided these are not overridden by your interests or fundamental rights. This includes managing our business operations, responding to enquiries, improving our services, and protecting our legal rights.

Legal obligation. We process personal data where it is necessary to comply with legal obligations, for example tax, accounting and record-keeping requirements, or to respond to lawful requests from public authorities.

Consent. In certain limited cases we may rely on your consent, for example for specific types of optional marketing communications where consent is required. Where we rely on consent, you can withdraw it at any time by contacting us.

How We Use Your Personal Data

We use your personal data for the following purposes:

To provide and manage gardening and related services, including arranging visits, carrying out work at your property, and managing ongoing maintenance schedules.

To create and manage your customer records, including quotes, contracts, invoices, and payment records.

To communicate with you about your enquiries, bookings, service updates, changes to our terms, or this Privacy Policy.

To manage payments, refunds and debt recovery where necessary.

To manage our business operations, including planning workloads, allocating staff, and monitoring the quality and performance of our services.

To meet our legal and regulatory obligations, including tax and accounting requirements.

To handle complaints, resolve disputes and enforce our contractual rights.

To send you information about our services and offers where we are permitted to do so and where you have not opted out.

Data Processors and Sharing of Personal Data

We may share your personal data with trusted third parties who act as data processors on our behalf. These processors only handle your data in accordance with our instructions and for the purposes described in this Privacy Policy. They are required to keep your data secure and to comply with applicable data protection laws.

Typical categories of processors we may use include:

IT and hosting service providers who store data and support our systems.

Payment and accounting service providers who process payments and assist with bookkeeping and financial records.

Customer management and scheduling tools used to organise appointments and manage customer information.

Professional advisers, such as accountants or legal advisers, where this is necessary to obtain professional advice or defend legal claims.

We may also share personal data where required by law, for example with law enforcement or public authorities, or where this is necessary to establish, exercise or defend legal claims. We do not sell your personal data.

Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

Customer and contract records are generally retained for the duration of your relationship with us and for a period afterwards, typically up to six years, to comply with tax and accounting rules and to enable us to respond to any queries or disputes about our services.

Communication records are retained for as long as they are relevant for our dealings with you, generally for a period aligned with customer and contract records, unless a shorter or longer period is required by law or is necessary in connection with a dispute.

Data collected for marketing purposes is retained until you opt out or withdraw your consent, or until we determine that it is no longer accurate or necessary for marketing.

When personal data is no longer required, it will be securely deleted, anonymised or irreversibly destroyed.

International Transfers

Where we use service providers located outside the United Kingdom or the European Economic Area, your personal data may be transferred internationally. In such cases, we take appropriate safeguards to ensure that your personal data remains protected, such as using standard contractual clauses or relying on other recognised transfer mechanisms permitted by data protection law.

How We Protect Your Personal Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include secure storage systems, access controls, encryption in transit where appropriate, staff training and regular review of our security arrangements. While we take reasonable steps to protect your data, no system can be completely secure and we cannot guarantee absolute security.

Your Data Protection Rights

Under data protection laws, you have certain rights regarding your personal data, subject to some conditions and exceptions. These include:

Right of access. You can request confirmation that we process your personal data and obtain a copy of that data, together with information about how we use it.

Right to rectification. You can ask us to correct inaccurate or incomplete personal data.

Right to erasure. You can request that we delete your personal data where there is no good reason for us to continue processing it, subject to legal obligations that may require us to retain certain information.

Right to restriction. You can ask us to restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy or assess an objection.

Right to object. You can object to processing that is based on our legitimate interests, including profiling on that basis, and to processing for direct marketing.

Right to data portability. Where processing is based on consent or contract and carried out by automated means, you can request that we provide your personal data in a structured, commonly used and machine-readable format, or transfer it to another controller where technically feasible.

Right to withdraw consent. Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.

Exercising Your Rights and Complaints

If you wish to exercise any of your rights, or if you have questions or concerns about how we handle your personal data, you can contact Gardeners Chase Cross using the usual contact methods made available to you as a customer. We will respond to your request in accordance with applicable data protection laws and may ask you to verify your identity before we respond.

You also have the right to lodge a complaint with the UK data protection authority if you believe your data protection rights have been infringed. We encourage you to contact us first so that we can try to resolve any concerns directly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or services. Any updates will take effect when the revised policy is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we process your personal data.