Privacy Policy

Last updated: January 2026

Torfela Horticultural Services Limited ("Torfela", "we", "us" or "our") is committed to protecting the privacy and personal data of our clients, website visitors and business contacts. This Privacy Policy explains how we collect, use, store, share and protect your personal information when you interact with our website, book our gardening services, communicate with us by phone, email or messaging platforms, or otherwise engage with our business. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection legislation. The data controller responsible for your personal information is Torfela Horticultural Services Limited, registered at 103 Stamford St, London, with company registration number 94728106. James Hawthorne is the Director and primary contact for data protection matters.

Information We Collect

We may collect and process the following categories of personal data depending on how you interact with us. Identity and contact data includes your full name, postal address, email address, telephone number and postcode. Booking and service data includes details about the gardening services you request, preferred dates, property access instructions, garden specifications and any notes you provide through our booking or contact forms. Communication data includes records of correspondence when you contact us by email, phone, WhatsApp, Viber or through our website contact forms. Technical data includes your IP address, browser type, device information and pages visited when you use our website, collected through standard server logs and cookies as described in our Cookie Policy. Payment and transaction data includes billing information and payment records when you purchase our services, though we do not store full credit card details on our systems. We collect this information directly from you when you submit forms, call our office, or correspond with us, and indirectly through automated technologies when you browse our website.

How We Use Your Information

We use your personal data for the following purposes, each supported by an appropriate legal basis under UK GDPR. To perform our contract with you: processing bookings, delivering gardening services, issuing quotes and invoices, and communicating about scheduled appointments. Based on legitimate interests: improving our services, managing client relationships, sending service-related notifications, maintaining our website, and protecting against fraud or misuse. Based on consent: sending marketing communications about seasonal offers or gardening tips where you have opted in, and placing non-essential cookies on your device. Based on legal obligation: maintaining records required by tax, employment and health and safety law, and responding to lawful requests from authorities. We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects. We will not sell your personal data to third parties under any circumstances.

Data Sharing and Third Parties

We may share your personal data with trusted third parties only where necessary to deliver our services or comply with legal requirements. Service providers who assist with scheduling software, email delivery, payment processing and website hosting may access limited data under strict contractual obligations. Professional advisers including accountants, insurers and legal counsel may receive relevant data when required for their services to us. Regulatory bodies and law enforcement may receive data when we are legally compelled to disclose it. Green waste disposal partners receive only property addresses when collection from your site is required. All third-party processors are required to implement appropriate security measures and process data only according to our instructions. We do not transfer personal data outside the United Kingdom unless adequate safeguards are in place as required by UK GDPR.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Client booking and service records are retained for seven years following the last transaction to comply with tax and accounting requirements. Contact form submissions from non-clients are deleted after twenty-four months unless an ongoing business relationship develops. Marketing consent records are retained until you withdraw consent plus a reasonable period to demonstrate compliance. Website server logs are retained for twelve months. When data is no longer needed, we securely delete or anonymise it using appropriate technical methods.

Your Rights

Under UK GDPR, you have the following rights regarding your personal data. The right of access allows you to request a copy of the personal data we hold about you. The right to rectification enables you to request correction of inaccurate or incomplete data. The right to erasure allows you to request deletion of your data in certain circumstances. The right to restrict processing permits you to limit how we use your data in specific situations. The right to data portability allows you to receive your data in a structured, machine-readable format. The right to object enables you to object to processing based on legitimate interests or for direct marketing. The right to withdraw consent applies where processing is based on consent. To exercise any of these rights, contact us at torfela@hotmail.com or write to 103 Stamford St, London. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.

Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include secure server hosting, encrypted data transmission via HTTPS, access controls limiting staff access to personal data on a need-to-know basis, regular software updates and security patches, and staff training on data protection responsibilities. While we take reasonable precautions, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security of data transmitted to or from our website.

Children's Privacy

Our services and website are not directed at individuals under the age of eighteen. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or business operations. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Material changes affecting how we process your data will be communicated to active clients by email where appropriate.

Contact Us

If you have questions, concerns or requests regarding this Privacy Policy or our data processing practices, please contact Torfela Horticultural Services Limited at torfela@hotmail.com, call +442074019000, or write to us at 103 Stamford St, London. We will endeavour to address your enquiry promptly and thoroughly.