Privacy Policy - Gardeners Maryland

Gardeners Maryland values privacy and is committed to protecting personal data in line with the General Data Protection Regulation (GDPR) and applicable privacy laws. This Privacy Policy explains how personal data is collected, used, stored, shared, and protected when customers engage with our gardening services. It applies to all Gardeners Maryland customers in the service area, including residential and commercial clients, prospective customers, and individuals who interact with us in connection with our services.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed by Gardeners Maryland in connection with service inquiries, quotations, bookings, service delivery, billing, after-service communication, and customer support. It covers data processed through direct communication, service records, administrative systems, and any other means by which we handle customer information. By using our services, requesting information, or otherwise engaging with Gardeners Maryland, individuals acknowledge that their data may be processed as described below.

This policy is designed to be transparent about how we process personal data and to ensure that customers understand their rights under GDPR.

2. Personal Data We Collect

We collect only the personal data necessary to provide gardening services, manage our business operations, and comply with legal obligations. The categories of information we may process include:

Identity details such as name and title.
Contact details such as address, email address, and telephone number.
Service information including property details, requested services, service preferences, and scheduling information.
Billing and payment information needed to issue invoices, process payments, and maintain financial records.
Communication records including correspondence relating to quotes, service updates, complaints, or follow-up requests.
Technical data that may be collected when interacting with digital systems, such as basic device or usage information, where applicable.
Special category data is not intentionally collected. If such data is ever provided incidentally, it will be handled with appropriate legal safeguards and only where necessary.

We do not seek to collect more information than is required for service provision and lawful business administration. Customers should avoid sharing unnecessary personal information unless it is relevant to the services requested.

3. How We Use Personal Data

Gardeners Maryland processes personal data for specific and legitimate purposes. These purposes include:

Responding to enquiries and providing quotations.
Managing service bookings, schedules, and operational arrangements.
Delivering gardening services at customer properties.
Preparing invoices, receiving payments, and maintaining accounts.
Communicating service updates, changes, or follow-up information.
Handling customer support, feedback, and complaints.
Maintaining internal records for quality control and business administration.
Complying with legal, tax, accounting, and regulatory obligations.

We only use personal data in ways that are compatible with the original purpose for which it was collected, unless a compatible or legally permitted further purpose applies.

4. Lawful Basis for Processing

Under GDPR, Gardeners Maryland processes personal data only where a lawful basis applies. Depending on the context, our lawful bases may include:

Contract

We process personal data where it is necessary to enter into or perform a contract with a customer. This includes arranging services, completing work, issuing invoices, and managing customer accounts.

Legal Obligation

We may process data where required to comply with laws and regulatory obligations, including tax, accounting, record-keeping, and other legal requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by the rights and freedoms of the individual. Such interests may include business administration, service improvement, fraud prevention, record management, and responding to customer enquiries. Where we rely on legitimate interests, we consider whether the processing is reasonable, proportionate, and limited to what is necessary.

Consent

In limited situations, we may rely on consent. Where consent is used as a lawful basis, it will be informed, specific, and freely given. Individuals have the right to withdraw consent at any time where processing is based on consent.

5. Data Sharing and Processors

Gardeners Maryland may share personal data with trusted third-party processors that help us operate our business and deliver services. These processors act on our instructions and are required to protect personal data in accordance with GDPR and contractual obligations.

Processors may include:

Payment service providers for processing transactions.
Accounting and bookkeeping providers for financial administration.
IT and cloud service providers for secure data storage, email, and operational systems.
Scheduling or business management tools used to organize service delivery.
Professional advisers such as legal or financial advisers where needed for compliance or business matters.

We do not sell personal data. We do not disclose personal information to third parties for their own marketing purposes. If data is transferred outside the United Kingdom or European Economic Area, appropriate safeguards will be used to protect the information, such as adequacy decisions or standard contractual clauses where applicable.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, and reporting obligations. Retention periods may vary depending on the type of data and the nature of the relationship with the customer.

In general:

Customer service records are kept for the duration of the service relationship and for a reasonable period afterwards.
Financial and invoicing records are retained for the period required by law.
Enquiry records may be kept for a limited period if no service is booked, to manage follow-up and business administration.
Where data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe manner.

We review retention practices periodically to ensure data is not kept longer than necessary. Retention is based on necessity, legal requirements, and the practical need to manage legitimate business records.

7. Data Security

Gardeners Maryland takes appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, restricted internal access, and procedures for handling information securely. While no system can be guaranteed to be completely secure, we work to maintain a level of protection appropriate to the nature of the data processed.

Only authorised personnel and approved processors may access personal data where necessary for legitimate business purposes.

8. User Rights Under GDPR

Individuals whose personal data is processed by Gardeners Maryland have rights under GDPR. Subject to legal limitations and verification of identity, customers may exercise the following rights:

Right of access – to request confirmation of whether personal data is being processed and to obtain a copy.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of data in certain circumstances.
Right to restriction – to request limited processing in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – to receive data in a structured, commonly used format where the legal conditions are met.
Right to withdraw consent – where processing is based on consent, to withdraw it at any time.

If a customer believes personal data is being processed unlawfully, they also have the right to lodge a complaint with the relevant data protection authority in their jurisdiction. We encourage individuals to raise concerns so that we may address them promptly and fairly.

9. Children’s Data

Gardeners Maryland’s services are not directed to children, and we do not knowingly collect personal data from children as part of our ordinary operations. If we become aware that such data has been collected without appropriate authorisation, we will take steps to delete it or handle it lawfully as required.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or the services we provide. Any revised version will apply from the date it is published or otherwise communicated. Customers should review this policy periodically to stay informed about how personal data is handled.

11. Summary of Our Commitment

Gardeners Maryland is committed to processing personal data fairly, lawfully, and transparently. We collect only the information needed to provide gardening services, rely on appropriate lawful bases for processing, retain data only as long as necessary, use vetted processors with suitable safeguards, and respect the rights of individuals under GDPR. This approach is intended to ensure that customer information is handled responsibly throughout the course of our services.

By engaging Gardeners Maryland, customers in the service area can expect their personal data to be treated with care, confidentiality, and respect for privacy rights.