GDPR Compliance

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Data Controller

Gladridge Garden Services is the data controller responsible for your personal information. We are registered in the United Kingdom and operate in accordance with UK data protection legislation.

Contact details:
Gladridge Garden Services
47 Thornbury Lane
Bristol BS7 8QE
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so:

  • Contractual necessity: Processing required to perform our service obligations or take steps before entering into a contract
  • Legitimate interests: Processing necessary for our business operations, fraud prevention, and service improvement, provided this does not override your rights
  • Legal obligation: Processing required to comply with legal or regulatory requirements
  • Consent: Processing based on your explicit agreement, which you may withdraw at any time

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data along with supplementary information.

Right to Rectification

You can request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure

In certain circumstances, you can request deletion of your personal data, including when it is no longer necessary for the purposes collected or when you withdraw consent.

Right to Restriction

You can request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You can request transfer of your personal data to you or another organisation in a structured, commonly used, machine-readable format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

How to Exercise Your Rights

To exercise any of your data protection rights, contact us at [email protected] or write to the address above. We will respond to your request within one month, though this may be extended by two months for complex requests.

We may request proof of identity to verify your request and protect against unauthorised disclosure of personal data.

Data Security Measures

We implement appropriate technical and organisational measures to ensure data security, including:

  • Encryption of data in transit and at rest
  • Access controls limiting data access to authorised personnel only
  • Regular security assessments and updates
  • Staff training on data protection obligations
  • Secure data backup and recovery procedures

Data Retention

We retain personal data only as long as necessary for the purposes collected or as required by law. Our standard retention periods are:

  • Active customer records: duration of service relationship plus seven years
  • Enquiry records: three years from last contact
  • Financial records: seven years for tax and accounting purposes
  • Marketing consent: until withdrawn or three years of inactivity

International Data Transfers

We primarily store and process data within the United Kingdom. If we transfer personal data outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of a breach where required.

Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us immediately.

Right to Complain

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

Updates to This Notice

We may update this GDPR compliance notice to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website or by direct notification where appropriate.

Last updated: October 2026