Privacy Policy

Gardeners Peckham Privacy Policy

This Privacy Policy explains how Gardeners Peckham collects, uses and protects personal data relating to our customers and prospective customers. It applies to all individuals who live in, own property in, or otherwise engage our services within the Gardeners Peckham service area. We are committed to complying with the UK General Data Protection Regulation and the Data Protection Act 2018.

Who this Privacy Policy applies to

This Privacy Policy applies to all Gardeners Peckham customers, including domestic, commercial and community clients, as well as anyone who makes an enquiry about our services in our operating area. By contacting us, requesting a quote, or using our services, you acknowledge that your personal data will be processed in accordance with this Privacy Policy.

Types of personal data we collect

We only collect personal data that is relevant and necessary for providing our gardening and related services. The types of personal data we may collect include:

Identification data such as name and title.

Contact details such as billing address, service address, and communication preferences.

Service information such as details of your garden or outdoor space, photographs of work areas where necessary for quoting or record-keeping, access instructions, and notes relevant to providing services safely and effectively.

Transaction data such as dates and times of services, invoices, payment amounts, payment status and basic accounting records.

Communication data such as messages, enquiries, feedback and complaints shared with us by phone, messaging services or other communication channels.

Technical or usage data such as information related to how you interact with our online content, where this is strictly necessary for security or service delivery. We do not knowingly collect more data than we need for each specific purpose.

How we collect your personal data

We collect personal data from you directly when you contact us for a quote, make a booking, request information, or communicate with us about ongoing work. We may also collect data when we visit your property to assess or deliver services.

We may receive limited personal data about you from third parties where this is necessary for providing services. Examples include referrals from existing customers, details provided by landlords or managing agents, or information from trusted partners that help us manage bookings or payments. In all such cases, we ensure there is a lawful basis for obtaining and using this data.

Purposes and lawful bases for processing

We process your personal data only where we have a valid lawful basis under data protection law. The main purposes and lawful bases are:

To provide quotations and respond to enquiries. We use contact details and service information to prepare quotes, answer questions and arrange site visits. The lawful basis is our legitimate interest in responding to potential customers and growing our business.

To perform a contract with you. When you book our services, we use your identification, contact, service and transaction data to schedule and deliver the work, manage access, issue invoices and receive payment. The lawful basis is performance of a contract and taking steps at your request before entering into a contract.

To manage our business and keep records. We maintain records of services provided and payments received for accounting, tax and administrative purposes. The lawful bases are legal obligation and our legitimate interest in running an efficient business and maintaining accurate records.

To communicate with you about your services. We may contact you with updates about appointments, changes in service, safety information, or significant updates to our terms or policies. The lawful bases are performance of a contract, legal obligation, and our legitimate interest in ensuring good customer service.

To send optional service updates or offers. Where permitted, we may occasionally send information about new or related services that may be relevant to you. The lawful basis is our legitimate interest in marketing our services or your consent where this is required. You can opt out at any time.

To ensure safety and prevent misuse. We may process data to protect our staff, customers, property and equipment, and to prevent or investigate fraud or other unlawful activity. The lawful basis is our legitimate interest in security and protection of our business and customers.

Data retention and storage

We keep personal data only for as long as it is reasonably necessary for the purposes described in this Privacy Policy, including to meet legal, accounting or reporting requirements.

In general, enquiry and quotation information that does not lead to a booking is kept for a limited period, after which it is deleted or anonymised unless we need to keep it longer for legal reasons.

Customer records, including basic contact, service and transaction data, are typically kept for the duration of our relationship with you and for a number of years afterwards to comply with tax and accounting obligations and to handle any queries or disputes that may arise.

Where data is held solely on the basis of your consent, and you withdraw that consent, we will delete or anonymise that data unless we have another lawful basis to retain it.

We implement appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access or disclosure, alteration or destruction.

Data sharing and processors

We do not sell your personal data. We may share your data with carefully selected third parties where this is necessary for the operation of our business or the performance of our contract with you.

Examples include payment processing providers, bookkeeping or accounting service providers, messaging or communication platforms used to manage enquiries and bookings, and specialist IT or cloud storage providers that securely store our records.

These organisations act as data processors and only process your personal data on our instructions. We require all processors to implement appropriate security measures and to treat your information in accordance with applicable data protection laws.

We may also need to share limited personal data with professional advisers such as accountants or legal advisers, or with public authorities where we are legally required to do so. In such cases, we only share what is strictly necessary.

International transfers

Where any of our service providers or systems are located outside the United Kingdom, we take steps to ensure that your personal data is afforded a level of protection that is essentially equivalent to that under UK data protection law. This may include using standard contractual clauses or relying on other appropriate safeguards permitted by law.

Your data protection rights

You have a number of rights in relation to your personal data under data protection law. These rights may be subject to certain conditions and legal exemptions. They include:

The right of access. You can request information about whether we hold personal data about you and obtain a copy of that data.

The right to rectification. You can ask us to correct incomplete or inaccurate personal data.

The right to erasure. In some circumstances, you can ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you have withdrawn consent.

The right to restrict processing. You can ask us to limit the way we use your data in certain situations, such as while we are considering a correction request.

The right to object. You can object to processing based on our legitimate interests, including direct marketing. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is required for legal claims.

The right to data portability. Where processing is based on your consent or on a contract and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used and machine-readable format, or that we transfer it to another controller where technically feasible.

The right to withdraw consent. Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with a data protection supervisory authority if you are concerned about how we handle your personal data.

Children and vulnerable individuals

Our services are primarily directed at adult property owners, tenants and businesses. We do not knowingly provide services directly to children without the involvement of a responsible adult. If we become aware that we are processing personal data from a child without appropriate authorisation, we will take steps to delete this data where required.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, business practices or legal obligations. The latest version will always apply to the way we process your personal data from the date it is published. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your information.