Privacy Policy - Gardeners Chinatown

This Privacy Policy explains how Gardeners Chinatown collects, uses, stores, shares, and protects personal data when providing gardening services to customers in the Chinatown area. It applies to all Gardeners Chinatown customers in the area, including individuals who request quotes, book services, receive ongoing maintenance, or otherwise engage with our gardening services. We are committed to handling personal data in a lawful, fair, and transparent manner in line with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Scope of This Policy

This policy applies to personal data processed in connection with gardening and related services offered by Gardeners Chinatown. It covers information collected through direct communication, service bookings, site visits, invoices, maintenance records, customer feedback, and administrative processing. It does not apply to third-party websites or services that may be referenced by others, unless they are directly operated by Gardeners Chinatown.

Personal data means any information relating to an identified or identifiable person. This may include names, addresses, telephone numbers, email addresses, payment details, property information, service preferences, and communications relating to your gardening needs.

2. Data We Collect

Gardeners Chinatown collects only the data that is necessary and relevant for providing services, managing customer relationships, meeting legal obligations, and improving service quality. The categories of data we may collect include:

Identity details: name, title, and similar identifying information.
Contact details: address, phone number, and email address.
Service information: property location, requested work, garden preferences, scheduling needs, and service history.
Payment information: billing details and transaction records.
Communication records: messages, call notes, complaint records, and feedback.
Technical or usage data: limited website or device-related data if you interact with our digital services, where applicable.
Special instructions: access details, safety notes, or other information needed to carry out work at your property safely and effectively.

We do not intentionally collect unnecessary personal data. Where possible, we keep data collection minimal and proportionate to the service requested.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide quotes and arrange gardening services;
to manage appointments, service delivery, and follow-up work;
to communicate with customers about bookings, changes, and service updates;
to issue invoices, record payments, and maintain accounting records;
to respond to questions, complaints, and requests;
to maintain internal records and service quality controls;
to comply with legal, regulatory, tax, and insurance requirements;
to prevent fraud, misuse, or security incidents;
to improve our services and customer experience in a lawful manner.

We will not use your personal data for purposes that are incompatible with the reasons it was collected, unless we have a valid legal basis for doing so.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each use of personal data. Gardeners Chinatown relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, scheduling work, delivering gardening services, and managing payment arrangements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. Examples include maintaining service records, improving operations, preventing fraud, and handling customer inquiries efficiently. When relying on this basis, we assess the impact on your privacy and apply safeguards where appropriate.

Legal Obligation

We process certain data to comply with legal obligations, including accounting, tax, record-keeping, safety, and insurance requirements. In such cases, the law requires us to retain or disclose certain information.

Consent

In limited situations, we may ask for your consent, for example where it is required for specific communications or optional data uses. Where we rely on consent, you may withdraw it at any time. This will not affect processing already carried out before withdrawal.

5. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods vary depending on the type of information and the reason for holding it.

In general:

customer and service records are retained for the duration of the business relationship and for a reasonable period afterwards;
financial and invoice records are retained for the period required by tax and accounting laws;
complaints, correspondence, and service notes are retained as needed to manage service issues and support legitimate interests;
where data is no longer required, it is securely deleted, anonymised, or archived in accordance with our retention practices.

We review retention periods periodically to ensure they remain proportionate. If data is subject to a legal hold or ongoing dispute, we may retain it for longer than usual until the matter is resolved.

6. Processors and Third Parties

Gardeners Chinatown may use trusted third-party service providers, known under GDPR as processors, to help us operate efficiently and securely. These processors act only on our instructions and are required to protect personal data with appropriate technical and organisational measures.

Examples of processor categories may include:

IT and hosting providers: for data storage, email, and system support;
payment service providers: for processing transactions and handling billing;
accounting or bookkeeping providers: for financial administration and tax compliance;
customer administration tools: for scheduling, record management, and communications;
professional advisers: where necessary for legal, insurance, or compliance support.

We may also disclose data to independent controllers where required by law or where necessary to protect our rights, property, customers, or others. In such cases, the recipient is responsible for its own lawful processing.

7. International Transfers

If personal data is transferred outside the United Kingdom or European Economic Area, we will ensure appropriate safeguards are in place. These may include standard contractual clauses or other lawful transfer mechanisms required under applicable data protection law. We take steps to ensure that transferred data remains protected to a standard consistent with GDPR requirements.

8. Data Security

We take the security of personal data seriously and use reasonable technical and organisational measures to protect it from unauthorised access, accidental loss, destruction, alteration, or disclosure. Measures may include access controls, secure storage, staff confidentiality obligations, and limited data access on a need-to-know basis. While no system can be guaranteed completely secure, we work to maintain strong protections appropriate to the nature of the data we process.

9. Your Rights Under GDPR

You have a number of rights in relation to your personal data. Subject to legal limitations, these include:

Right of access: to request a copy of the personal data we hold about you;
Right to rectification: to request correction of inaccurate or incomplete data;
Right to erasure: to request deletion of your data in certain circumstances;
Right to restriction: to ask us to limit how we use your data in certain cases;
Right to data portability: to receive certain data in a structured, commonly used format;
Right to object: to object to processing based on legitimate interests or direct marketing;
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time;
Right to complain: to raise concerns with a data protection authority if you believe your rights have been infringed.

We will respond to valid rights requests within the time limits required by law. To protect privacy, we may need to verify your identity before fulfilling a request. Some requests may not be fully exercisable where we must retain data to comply with legal obligations or defend legal claims.

10. Cookies and Similar Technologies

If Gardeners Chinatown uses digital tools that rely on cookies or similar technologies, these may be used for essential site functionality, analytics, or service improvement. Where required, we will seek consent before placing non-essential cookies. You can usually manage cookies through your browser settings. Any such use will remain limited and proportionate to operational needs.

11. Children’s Data

Our services are directed to adults and property owners or authorised representatives. We do not knowingly collect personal data from children except where it is incidental and necessary for providing services to a household. If we become aware that we have collected data from a child without appropriate legal basis, we will take steps to delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our internal practices. Any updates will apply from the date they are posted or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how personal data is handled.

13. Summary of Our Commitment

Gardeners Chinatown is committed to treating personal information with care, respect, and accountability. We collect only what we need, process it lawfully, keep it secure, and retain it only as long as necessary. We also aim to ensure that customers in the Chinatown area can exercise their rights confidently and understand how their data is handled. This policy is intended to provide clear and transparent information so that our privacy practices remain open, responsible, and compliant.

Important note: This policy is designed to support GDPR compliance and should be reviewed alongside any operational record-keeping, security, and consent procedures used by Gardeners Chinatown. In all cases, privacy by design and data minimisation remain central principles of our approach.