Privacy
Privacy & your data
Bon Gardening is a small, independent gardening business run by Thomas Huber in Mendlesham Green, Suffolk. This notice explains, plainly, what personal information the website and garden portal collect, why, where it is stored and how you can get a copy of it or have it removed.
Who is responsible
Bon Gardening (proprietor Thomas Huber) is the data controller. Contact: hello@bon-gardening.co.uk or 07572 924434.
What is collected, and why
- Enquiries and bookings — name, telephone, email, address, preferred day and a description of the work, so a visit can be arranged and quoted.
- Photographs you upload — for garden assessments, estimates, plant identification and your garden record. Please avoid including people, number plates or neighbouring property where you can.
- Your Garden Profile — location, soil, aspect, plants, goals, notes, journal entries, tasks, reminders and wildlife sightings that you choose to record.
- Account information — email address and password (held by the authentication provider; passwords are never visible to Bon Gardening).
- Payments and membership — handled by Stripe. Card details are never received or stored by Bon Gardening; only the order, amount and status are kept.
- Work records — visit notes, before/after photographs and voice notes dictated by Tom on site, which are transcribed to keep an accurate record of the work.
- “What Could It Cost?” enquiries — your photographs, description, postcode and contact details, used to prepare and send an estimate.
- Assistant conversations — what you ask the on-site assistant, so answers stay in context across visits.
Lawful bases
Enquiries, quotes, bookings and paid work are processed to take steps at your request and to perform a contract. Keeping accurate service records, improving estimating accuracy and protecting the website from misuse rely on legitimate interests. Marketing emails, where sent, rely on consent and every email carries an unsubscribe link. Invoices and payment records are kept to meet legal accounting obligations.
Artificial intelligence
Some features use AI models to draft text and analyse photographs — the garden assistant, plant identification, garden assessments, estimate drafting, work summaries and message drafts. Content you submit (text and photographs) is sent to the AI provider for processing and returned to Bon Gardening. AI output is always a draft: estimates, assessments and messages are reviewed by Tom before they are relied upon or sent. No automated decision with legal or similarly significant effect is made about you.
Who else is involved
- Hosting, database, file storage and authentication — the platform that runs this site.
- AI model providers — for the assistant, identification, assessment and drafting features.
- Stripe — payments and membership subscriptions.
- IONOS — email delivery for confirmations, estimates and updates.
Your information is never sold, and it is not shared for advertising.
Where it is stored and how it is protected
Data is held in a managed, access-controlled database with row-level security so that each customer can only reach their own records. Photographs, voice recordings and reports live in private storage buckets — they are never publicly linkable, and are served only through short-lived signed links to the person entitled to see them. The admin area is restricted to verified administrator accounts, and the whole site is served over HTTPS.
How long it is kept
These periods are applied automatically by a daily housekeeping routine — nothing depends on someone remembering to tidy up.
- Voice recordings — the audio is deleted as soon as it has been transcribed, usually within seconds. Only the written note is kept. Anything left by an interrupted recording is cleared within seven days.
- Cost enquiries that never became work — the enquiry and its photographs are deleted after two years.
- Garden profiles created without an account — deleted, with their photographs, after twelve months of no activity.
- Assistant conversations held without signing in — deleted after twelve months.
- Plant identifications not saved into a garden — the photograph and result are deleted after six months.
- Customer and garden records — kept for the life of the working relationship, and for a reasonable period afterwards in case you return.
- Invoices, payments and membership records — kept for six years to meet UK accounting requirements.
- Anything you delete yourself in My Garden → Your data is removed immediately, including the stored photograph files — you do not have to wait for any of the periods above.
Your rights
You have the right to a copy of your data, to correction, to erasure, to restrict or object to processing, and to data portability. Two of these are self-service: sign in and open My Garden → Your data to download everything held about you as a file, or to delete your garden record, photographs and assistant history in one step — or close your account entirely, which does the same and removes your sign-in as well. For anything else, email hello@bon-gardening.co.uk and it will be dealt with within one month. If you are unhappy with how a request is handled you can complain to the Information Commissioner's Office (ico.org.uk).
Cookies and similar technology
There is no advertising or third-party tracking on this site. A small amount of information is stored in your browser so the site can work: your sign-in session, and an identifier that keeps your garden discovery answers together before you create an account. Nothing is used to profile you across other websites.
Children
The site and portal are intended for adults arranging garden care. Accounts are not knowingly created for children.
Changes
This notice will be updated as the service grows. It was last reviewed in August 2026.
Questions about any of this are welcome — send a note and Tom will answer plainly.