Privacy Policy - Gardeners Cockfosters

This Privacy Policy explains how Gardeners Cockfosters collects, uses, stores, and protects personal data. It applies to all Gardeners Cockfosters customers in the area, including anyone who enquires about, books, receives, or pays for our gardening services. We are committed to handling personal information in a lawful, fair, and transparent way, in line with the UK GDPR and the Data Protection Act 2018.

By using our services, making an enquiry, or interacting with us in any other way, you acknowledge that we may process your personal data as described in this policy. We only collect information that is necessary for providing services, managing customer relationships, meeting legal obligations, and improving our operations. We do not sell personal data.

1. Information We Collect

We may collect and process different categories of personal data depending on how you interact with us. This may include:

Identity details such as your name, title, and, where relevant, the name of a business or property owner.
Contact details such as address, email address, and telephone number.
Service information including details of the gardening work requested, site access notes, preferred schedules, and service history.
Payment and transaction information such as records of invoices, payments received, refunds, and billing references.
Communication records including messages, enquiry forms, notes from calls, and correspondence related to bookings or complaints.
Technical information such as basic website usage data, device information, and cookies where applicable.
Operational information including internal records about quotes, appointments, job progress, and service outcomes.

We generally collect data directly from you when you fill out a form, call, email, make a booking, or otherwise communicate with us. In some cases, we may also receive information from third parties such as payment providers, subcontracted service partners, or a property owner acting on your behalf.

2. How We Use Your Data

We use personal data only where we have a valid reason to do so. Typical uses include:

responding to enquiries and providing quotations;
arranging and delivering gardening services;
managing appointments and customer accounts;
processing payments and issuing invoices;
keeping records of completed work;
handling complaints, queries, or follow-up requests;
maintaining safety, security, and quality standards;
meeting legal, tax, insurance, and regulatory obligations;
sending service-related communications;
improving our services and internal processes.

We will only use your data in ways that are compatible with the original purpose for which it was collected, unless we have a lawful basis to use it for another compatible purpose.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing personal data. Depending on the situation, Gardeners Cockfosters may rely on one or more of the following bases:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes preparing quotations, confirming bookings, delivering gardening services, and managing payments.

Legal obligation

We may process and retain certain records to comply with legal and regulatory requirements, including tax, accounting, insurance, and business record-keeping obligations.

Legitimate interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include improving services, managing customer relationships, preventing fraud, maintaining security, and keeping internal service records.

Consent

In limited cases, we may rely on your consent, for example where optional marketing communications are involved or where cookies require consent. You may withdraw consent at any time, although this will not affect any processing already carried out lawfully before withdrawal.

4. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods depend on the type of data and the reason for holding it.

Customer and service records are generally kept for the duration of the customer relationship and for a reasonable period afterwards.
Financial and invoice records are retained in line with tax and accounting obligations.
Communication records may be kept for a period needed to resolve queries, support service history, and evidence agreements.
Website and technical data may be retained for shorter periods unless needed for security, diagnostics, or legal purposes.

When personal data is no longer needed, we will delete it securely, anonymise it, or otherwise ensure it is no longer identifiable. Where retention is required by law, we will keep the data only for the minimum period necessary.

5. Processors and Third Parties

We may share personal data with trusted third-party processors who help us provide services and run our business. These processors are only allowed to process data on our instructions and must take appropriate security measures. Examples may include:

Payment providers for processing invoices and transactions;
IT and cloud service providers for secure storage and business systems;
Administrative support providers for scheduling, record management, or correspondence;
Professional advisers such as accountants, insurers, or legal advisers when necessary;
Subcontractors or field workers who support service delivery under our control.

We may also disclose data where required by law, court order, or a competent public authority. We do not allow processors to use your personal data for their own unrelated purposes.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or loss. These measures may include access controls, secure storage, staff confidentiality practices, and limited data sharing on a need-to-know basis. While no system can be guaranteed completely secure, we work to reduce risks and respond promptly to any suspected breach.

7. Your Rights

As a data subject under the UK GDPR, you have several rights in relation to your personal data. These rights may be subject to legal limitations and exemptions. They include:

Right of access – you may request confirmation of whether we process your data and obtain a copy of it.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – in certain circumstances, you may request deletion of your data.
Right to restriction – you may ask us to limit how we use your data in specific situations.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to data portability – where applicable, you may request your data in a structured, commonly used format.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

If you wish to exercise your rights, we may need to verify your identity before responding. We will respond within the time limits required by law.

8. Cookies and Similar Technologies

If we use cookies or similar technologies, they are used only for necessary website functions, basic analytics, or improving user experience where permitted. Where consent is required, you will be able to manage your preferences. You can also adjust browser settings to control cookies, though some features may not function properly if cookies are disabled.

9. International Transfers

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place so that your information remains protected in accordance with data protection law. This may include standard contractual clauses or other lawful transfer mechanisms.

10. Children’s Data

Our services are directed at adult customers and property-related service arrangements. We do not knowingly collect personal data from children except where it is necessary and lawful in limited circumstances, such as where a parent or guardian provides information on behalf of a household.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service arrangements. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

12. Summary of Our Commitment

Gardeners Cockfosters is committed to respecting privacy and protecting personal data in a responsible and lawful manner. We collect only what we need, use it for clear business purposes, keep it only as long as necessary, and share it only with trusted processors or where the law requires it. Our aim is to ensure that every customer in the area can use our services with confidence, knowing their information is handled carefully and transparently.

This Privacy Policy applies to all Gardeners Cockfosters customers in the area and is intended to explain our data practices in a clear, fair, and accessible way.

Last updated: 2026