Privacy Policy - Gardeners Nags Head

Gardeners Nags Head is committed to protecting the privacy of every customer in our area. This Privacy Policy explains how we collect, use, store, share, and protect personal data when individuals use our gardening and related services. It applies to all Gardeners Nags Head customers in the area, including prospective customers, current customers, former customers, and anyone who communicates with us about our services.

We handle personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. This policy is designed to be clear, lawful, and transparent so that you understand what happens to your information and what rights you have.

1. Personal Data We Collect

We only collect information that is necessary for providing our services, managing customer relationships, and meeting our legal and operational responsibilities. The categories of personal data we may collect include:

Identity details: name, title, and any relevant account or reference information.
Contact details: address, email address, and telephone number.
Service information: details about the gardening work requested, property access instructions, service preferences, and notes about completed or planned work.
Payment information: billing details, transaction records, and payment confirmation. We do not store full card details where a secure payment processor is used.
Communications: messages, calls, enquiries, feedback, complaints, and any records of correspondence.
Website and device data: if you contact us online, we may collect technical information such as IP address, browser type, and basic usage data.
Special category data: we do not usually seek this type of data. If it is provided to us incidentally, for example in relation to accessibility needs, we will process it only where appropriate safeguards and a valid legal basis apply.

We collect most personal data directly from you. In some cases, we may receive information from a property manager, landlord, family member, or another person arranging services on your behalf, but only where it is reasonable and lawful to do so.

2. How We Use Personal Data

Gardeners Nags Head uses personal data for the following purposes:

to provide quotes, arrange visits, and deliver gardening services;
to manage bookings, service schedules, and customer requests;
to issue invoices, process payments, and keep financial records;
to communicate about appointments, changes, cancellations, and service updates;
to respond to questions, complaints, and feedback;
to maintain service quality, training, and internal records;
to comply with legal, tax, accounting, and insurance obligations;
to protect our business, staff, customers, and property from fraud, misuse, or security incidents.

We will not use personal data for purposes that are incompatible with the reasons it was collected unless we have a lawful basis to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing personal data. Depending on the situation, we rely on one or more of the following legal grounds:

Contract

We process information where it is necessary to enter into or perform a contract with you. This includes preparing quotes, arranging services, providing gardening work, billing, and handling customer support related to the service.

Legal Obligation

We may process personal data to comply with legal obligations, such as tax rules, accounting requirements, record-keeping duties, and responses to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This can include managing customer relationships, improving our services, preventing fraud, keeping records, and ensuring the security of our operations. We always consider whether the processing is proportionate and appropriate.

Consent

In limited cases, we may rely on your consent, for example where optional marketing communications are involved or where we need permission to use certain information. If we rely on consent, you may withdraw it at any time.

4. Data Sharing and Processors

We do not sell personal data. However, we may share information with trusted third parties where necessary to operate our business and deliver services. These recipients act as processors or, in some cases, independent controllers.

Processors may include:

payment service providers for secure transaction processing;
accounting or bookkeeping providers;
IT and cloud storage providers;
email, communication, and booking management systems;
professional advisers such as insurers, lawyers, or auditors where necessary;
subcontractors or service partners who support our gardening work under instruction.

Where processors handle personal data on our behalf, we require them to protect it, use it only for authorised purposes, and apply appropriate security measures. If data is transferred outside the UK or the European Economic Area, we will make sure suitable safeguards are in place.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and to meet any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the reason for holding it.

Customer and service records: retained for the period needed to manage the customer relationship and after completion for a reasonable business period.
Financial and tax records: retained for the period required by law, including accounting and tax obligations.
Communications and complaints: retained for as long as needed to resolve the matter and keep an appropriate business record.
Marketing data: retained until you withdraw consent or object, where applicable.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

6. Security of Personal Data

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and limiting access to those who need the data to carry out their work.

While no system is completely secure, we work hard to reduce risks and to respond promptly if a data incident occurs.

7. Your Rights

As a data subject, you have several rights under data protection law. Depending on the circumstances, these may include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain situations.
Right to restriction: to ask us to limit how we use your data in certain cases.
Right to data portability: to receive certain data in a structured, commonly used format.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We will respond within the timeframe required by law, unless an extension is permitted.

8. Children’s Data

Our services are not intended for children, and we do not knowingly collect personal data from children unless it is necessary in connection with a customer’s household arrangements and is provided by an adult with authority to do so.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or the way we handle data. Any updated version will apply from the date it is published or otherwise communicated.

We encourage customers to review this policy periodically so they remain informed about how their information is used. By using our services, you acknowledge that your personal data may be processed in the manner described in this policy.

10. Summary of Our Approach

At Gardeners Nags Head, privacy is part of responsible service delivery. We collect only what we need, use it fairly and lawfully, retain it for appropriate periods, and share it only with trusted processors when necessary. We respect your rights and aim to handle all personal data with care, confidentiality, and accountability.

This policy applies to all Gardeners Nags Head customers in area.