Privacy Policy - Gardeners Ham

This Privacy Policy explains how Gardeners Ham collects, uses, stores, shares, and protects personal data relating to all Gardeners Ham customers in the area. It applies whenever you request gardening services, receive a quote, make an enquiry, or otherwise interact with Gardeners Ham. We are committed to handling personal data in a lawful, fair, and transparent way, in line with the UK GDPR and the Data Protection Act 2018.

We value privacy and only collect information that is necessary to provide our services, manage customer relationships, maintain records, and meet legal or regulatory obligations. This policy is designed to help you understand what information we hold, why we hold it, how long we keep it, and what rights you have over it.

Information We Collect

Gardeners Ham may collect and process different types of personal data depending on how you engage with us. This can include:

Identity details such as your name and title.
Contact details such as your address, email address, and telephone number.
Service information such as the type of gardening work requested, property access notes, service preferences, and appointment details.
Payment information such as billing details and payment status, where relevant.
Communication records such as emails, message history, and notes from calls or visits.
Technical information if you use digital channels, which may include basic device or usage data collected for security and performance.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it, or unless another lawful basis permits us to do so. If such information is ever shared with us, we will treat it with additional care and only process it where appropriate safeguards are in place.

How We Use Your Data

We use personal data for specific and legitimate purposes connected with running our gardening services. These purposes may include:

Providing quotes, scheduling appointments, and delivering services.
Managing customer accounts, correspondence, and service records.
Processing payments, invoices, and refunds where applicable.
Responding to enquiries, complaints, and feedback.
Maintaining internal administration, planning, and quality control.
Improving our services and customer experience.
Meeting legal, tax, accounting, and insurance obligations.
Preventing fraud, misuse, or unauthorised access.

We use only the minimum amount of data necessary for each purpose. Where possible, we keep records accurate and up to date, and we review information periodically so that we do not retain data longer than needed.

Lawful Basis for Processing

Under data protection law, Gardeners Ham must have a lawful basis for processing personal data. Depending on the circumstances, we rely on one or more of the following:

1. Contract

We process data when it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes providing quotes, booking work, delivering gardening services, and managing associated administration.

2. Legal Obligation

We may process and retain certain data to comply with legal requirements, including accounting rules, tax obligations, record-keeping duties, and any lawful requests from authorities.

3. Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include maintaining service records, improving operations, protecting against fraud, and ensuring network and information security. When we rely on legitimate interests, we consider the impact on your privacy and apply appropriate safeguards.

4. Consent

In limited cases, we may rely on your consent, for example where it is needed for a particular optional service or communication. If consent is used, you may withdraw it at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

Sharing and Processors

Gardeners Ham may share personal data with trusted third parties only when necessary for service delivery, administration, compliance, or security. These third parties may act as processors or independent controllers, depending on their role.

Processors are organisations that process personal data on our behalf and under our instructions. We may use processors for:

IT hosting and data storage services.
Email, messaging, and communication platforms.
Accounting, invoicing, and bookkeeping systems.
Payment processing providers.
Customer management or scheduling tools.
Security, backup, or disaster recovery services.

We require processors to protect personal data, use it only for agreed purposes, and comply with applicable data protection laws. Where data is transferred outside the UK or the EEA, we ensure appropriate safeguards are in place, such as adequacy regulations or approved contractual protections.

We may also disclose information if required by law, court order, regulatory demand, or to protect the rights, property, or safety of Gardeners Ham, our customers, staff, or others. Any sharing will be limited to what is necessary and proportionate.

Data Retention

We keep personal data only for as long as needed for the purpose it was collected, or as long as required by law. Retention periods depend on the type of information and the nature of our relationship with you.

Customer and service records may be retained for the duration of the relationship and for a reasonable period afterward for administration, dispute handling, and service history.
Financial and accounting records are generally retained for the period required by tax and accounting legislation.
Communication records may be kept for as long as needed to manage enquiries, evidence decisions, or resolve issues.
Technical and security records may be held for shorter periods unless longer retention is necessary for investigation or legal reasons.

When data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a controlled manner. We review retention practices periodically to ensure they remain appropriate and proportionate.

Your Rights

As a data subject, you have important rights under GDPR. Subject to certain conditions and exemptions, you may have the right to:

Access the personal data we hold about you.
Rectification of inaccurate or incomplete data.
Erasure of your data in certain circumstances.
Restriction of processing in specific situations.
Object to processing based on legitimate interests or direct marketing.
Data portability where processing is based on consent or contract and carried out by automated means.
Withdraw consent where we rely on consent as the lawful basis.

You also have the right to be informed about how your data is used and to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage customers to raise concerns directly so that we can address them promptly and fairly.

Security of Personal Data

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and regular review of data handling practices.

While no system can be guaranteed completely secure, we aim to maintain a level of protection that is suitable for the nature of the data we process. We also encourage careful handling of any information you provide to us, especially when shared by email or other digital channels.

Children’s Data

Our services are aimed at adult customers and property owners or occupiers. We do not knowingly collect personal data from children unless it is incidental and necessary for service delivery, and only where appropriate safeguards are in place. If we become aware that we have collected data from a child in error, we will take steps to delete it where required.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our data handling practices. When we make changes, we will revise the policy and make the updated version available as appropriate. We recommend reviewing this policy periodically so you remain informed about how Gardeners Ham protects your information.

In summary, Gardeners Ham processes personal data only when there is a valid reason to do so, keeps it for no longer than necessary, uses trusted processors under suitable safeguards, and respects the rights of every customer in the area we serve. Your privacy matters to us, and we are committed to handling your information responsibly and transparently.