Privacy Policy - Gardeners Osidge

This Privacy Policy explains how Gardeners Osidge collects, uses, stores, shares, and protects personal data belonging to our customers in the Osidge area. It applies to all Gardeners Osidge customers in the area, including individuals, households, landlords, tenants, and business clients who use our gardening and outdoor maintenance services. We are committed to handling personal information fairly, transparently, and in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, requesting a quotation, making an enquiry, or entering into a service arrangement with us, you acknowledge that your personal data may be processed in the ways described in this policy. We only collect information that is relevant, necessary, and proportionate to provide and manage our services properly.

1. Who We Are

Gardeners Osidge is a gardening service provider operating in the Osidge area. We act as a data controller for the personal data we collect and use in connection with our services. This means we decide why and how your personal data is processed, within the limits of applicable data protection law.

We take privacy seriously and aim to ensure that any personal information we hold is accurate, secure, and used only for lawful purposes. Our approach is based on the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

2. Information We Collect

We may collect and process the following categories of personal data when you contact us, request a service, or use our gardening services:

Identity details such as your name and title.
Contact details such as address, email address, and telephone number.
Service information such as property access notes, garden preferences, service instructions, and appointment details.
Billing and payment information such as invoice details, payment status, and transaction records.
Communication records including emails, messages, complaints, and feedback.
Technical information where applicable, such as basic website usage data or device information if you interact with digital services.
Special instructions relevant to the safe or efficient delivery of services, for example access arrangements or timing preferences.

We do not intentionally collect more data than is necessary. We do not seek to gather sensitive personal data unless it is required for a lawful reason and you have provided it voluntarily, or unless it is needed to comply with legal obligations or protect vital interests.

3. How We Use Personal Data

We use personal data to deliver gardening services effectively and to manage our business operations. The main purposes for processing include:

responding to enquiries and providing quotations;
setting up, managing, and completing service appointments;
recording customer preferences and property-specific instructions;
issuing invoices, managing payments, and keeping financial records;
handling service updates, scheduling changes, and customer support;
managing complaints, disputes, or requests for correction;
improving service quality, efficiency, and customer satisfaction;
meeting legal, regulatory, tax, accounting, and insurance obligations.

Where appropriate, we may also use data to protect our legitimate business interests, provided this does not override your rights and freedoms.

4. Lawful Basis for Processing

We process personal data only when we have a valid lawful basis under UK GDPR. Depending on the situation, the lawful basis may include:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This covers managing bookings, delivering gardening work, communicating about services, and handling billing.

Legal Obligation

We may process and retain data when required to comply with tax law, accounting rules, record-keeping obligations, insurance requirements, or other legal duties.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, such as improving operations, maintaining service records, protecting our business, or managing routine customer communication, provided your interests do not override ours.

Consent

In limited cases, we may rely on consent, for example where you have expressly agreed to a particular type of communication or optional processing. If consent is used, you can withdraw it at any time.

Vital Interests

In rare situations, we may process information to protect someone’s vital interests, for example if urgent action is needed in relation to safety or an emergency at a property.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods vary depending on the type of information and the reason it is held.

Customer and service records are generally retained for the duration of the service relationship and for a reasonable period afterwards.
Invoice and financial records are retained in line with tax and accounting rules.
Communication records may be retained for a period needed to resolve queries, verify instructions, or manage disputes.
Consent-based records are kept until consent is withdrawn or the information is no longer needed.

When personal data is no longer required, we securely delete, anonymise, or archive it in accordance with our retention procedures. We do not keep data indefinitely.

6. Processors and Data Sharing

We may use trusted third-party processors to help us operate efficiently and deliver services. Processors act on our instructions and are not permitted to use your data for their own purposes. Examples of processors may include:

administrative software and record-keeping providers;
payment processing services;
email or communication platforms;
cloud storage and data backup providers;
accounting or bookkeeping services;
IT support and security providers.

We may also share personal data where necessary with professional advisers, insurers, or public authorities if required by law or to protect our legal rights. Any sharing is limited to what is necessary and is carried out using appropriate safeguards.

We do not sell personal data. We also take reasonable steps to ensure processors handle data securely and in accordance with data protection law.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, password protection, and regular review of data-handling practices.

Although no system can be guaranteed completely secure, we take reasonable steps to reduce risk and to respond appropriately if a data incident occurs. Where required by law, we will notify affected individuals and relevant authorities of personal data breaches.

8. Your Rights Under UK GDPR

You have a number of rights in relation to the personal data we hold about you. These rights are subject to legal conditions and exemptions, but we will always consider requests carefully.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – you can request deletion of data in certain circumstances.
Right to restrict processing – you can ask us to limit how your data is used in some cases.
Right to object – you can object to processing based on legitimate interests or direct marketing where applicable.
Right to data portability – you may request transfer of certain data in a structured, commonly used format where legally applicable.
Right to withdraw consent – if processing is based on consent, you can withdraw it at any time.

You also have the right to raise concerns with the UK Information Commissioner’s Office if you believe your data has been handled unlawfully. We encourage you to contact us first so we can try to resolve the issue promptly and fairly.

9. Children’s Data

Our services are aimed at adults and property owners or occupiers. We do not intentionally collect personal data from children unless it is necessary in limited circumstances and with appropriate safeguards. If we become aware that we have collected information about a child without a proper basis, we will take steps to remove it where appropriate.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data-handling practices. Any updated version will apply from the date it is published or otherwise made available. We recommend reviewing this policy periodically to stay informed about how your information is used.

11. Summary of Our Commitment

At Gardeners Osidge, we aim to handle personal data responsibly, lawfully, and with respect for your privacy. We collect only what we need, use it for clear and legitimate purposes, keep it no longer than necessary, and work with processors only where appropriate safeguards are in place. Most importantly, we recognise and support your rights over your personal information.