Privacy Policy - Tree Surgeons Palmersgreen

This Privacy Policy explains how Tree Surgeons Palmersgreen collects, uses, stores, shares, and protects personal data when providing tree surgery and related services. It applies to all Tree Surgeons Palmersgreen customers in the area, including individuals, households, landlords, tenants, property managers, and business clients who enquire about, book, or receive our services.

We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is written to help you understand what data we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have in relation to your data.

1. Personal Data We Collect

We may collect and process personal data directly from you, from third parties acting on your behalf, or from publicly available sources where appropriate and lawful. The information we collect depends on the nature of your enquiry or the services we provide.

Information you provide to us

Identity details such as your name and, where relevant, the name of your organisation.
Contact details including telephone number and email address.
Property details such as service address, access information, and site-specific instructions.
Service information relating to the trees, hedges, or outdoor areas you want us to assess or work on.
Communication records including emails, messages, quotations, booking notes, and feedback.
Payment-related information where needed to process invoices, receipts, or payment confirmations.

Information we may collect automatically

Technical data such as device type, browser information, and basic usage data if you communicate with us electronically.
Operational records such as appointment history, quote status, work completion notes, and service preferences.
Site and safety information gathered during inspections or service delivery, including notes that are relevant to risk assessment or compliance.

We only collect information that is relevant and necessary for the purposes described in this policy. We do not seek to collect unnecessary personal data.

2. How We Use Your Data

Tree Surgeons Palmersgreen uses personal data for legitimate business and legal purposes connected to service delivery. This may include:

Responding to enquiries and preparing quotations.
Scheduling visits, inspections, and appointments.
Carrying out tree surgery, pruning, removal, maintenance, and related services.
Managing customer accounts, records, and service history.
Issuing invoices, processing payments, and handling financial administration.
Providing customer support and responding to complaints or follow-up requests.
Meeting legal, regulatory, insurance, and health and safety obligations.
Maintaining internal records for quality assurance, training, and business management.

We may also use limited data to protect our business interests, such as preventing fraud, maintaining site safety, or resolving disputes.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Tree Surgeons Palmersgreen relies on the following lawful bases, depending on the circumstances:

Contract

We process data where it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes quoting, booking, delivering services, and handling payment administration.

Legal obligation

We may process data to comply with legal requirements, including tax, accounting, insurance, health and safety, and record-keeping obligations.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. Examples include managing service records, improving operations, protecting our business from misuse, and communicating about existing services.

Consent

In limited situations, we may rely on your consent, for example where it is appropriate to send optional communications not required for service delivery. Where consent is used, you may withdraw it at any time.

Vital interests and public interest

In rare cases, data may be processed where necessary to protect someone’s vital interests or where processing is needed for a task carried out in the public interest, although this is not normally the basis for routine tree surgery services.

4. How Long We Retain Your Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, insurance, and operational requirements. Retention periods vary depending on the type of data and the reason for holding it.

Enquiry and quotation records are typically kept for a reasonable period to manage follow-up requests and maintain service history.
Customer and job records may be retained for the duration of the service relationship and afterwards where needed for legal, tax, or dispute-resolution purposes.
Financial records are retained in line with statutory accounting and tax obligations.
Health and safety or compliance records may be stored for longer periods where required by law or insurance practice.

When data is no longer required, we will securely delete, anonymise, or archive it in a manner appropriate to the circumstances. Retention is reviewed periodically to ensure information is not kept longer than necessary.

5. Processors and Data Sharing

We may share personal data with trusted third-party service providers who act as processors on our behalf. These processors are only permitted to handle data according to our instructions and are required to protect it appropriately.

Examples of processors may include:

Accounting and bookkeeping providers.
IT support, data storage, and cloud service providers.
Scheduling, invoicing, or administrative software providers.
Payment processing providers.
Professional advisers such as insurers, auditors, or legal advisers where necessary.

We may also disclose personal data where required by law, court order, or regulatory authority, or where necessary to protect our rights, property, staff, customers, or the public.

We do not sell your personal data. Any sharing is limited to what is necessary for service delivery, legal compliance, or legitimate business operations.

6. Data Security

We take reasonable and appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and restricted handling of sensitive records.

However, no system is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. If a data incident occurs, we will act in accordance with legal obligations and take appropriate steps to reduce any risk.

7. Your Rights Under Data Protection Law

As a data subject, you have certain rights in relation to your personal data. These rights are subject to legal conditions and exemptions, and they may not apply in every case.

Right of access – you may request confirmation of whether we process your data and obtain a copy of it.
Right to rectification – you may ask us to correct inaccurate or incomplete information.
Right to erasure – in some circumstances, you may request deletion of your data.
Right to restriction – you may ask us to limit how we use your data in certain situations.
Right to object – you may object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – you may request certain data in a structured, commonly used format where legally applicable.
Right to withdraw consent – where processing relies on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we may need to verify your identity before responding. We aim to deal with requests promptly and within the time limits set by law.

8. Children’s Data

Tree Surgeons Palmersgreen does not intentionally collect personal data from children. Our services are intended for adult customers, property owners, and authorised representatives. If we become aware that we have unintentionally collected information relating to a child, we will take appropriate steps to delete or protect it.

9. International Transfers

Where a processor or service provider stores or accesses data outside the UK, we will ensure that appropriate safeguards are in place to protect your information in line with data protection law. Any transfer will be subject to lawful mechanisms designed to maintain an adequate level of protection.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any revised version will apply from the date it is published or communicated. We encourage customers in the Palmers Green area to review this policy periodically so they remain aware of how their data is handled.

11. Complaints

If you are concerned about how your data has been handled, you have the right to raise the issue with us first so that we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office if you believe your data protection rights have been infringed.

By engaging with Tree Surgeons Palmersgreen, you acknowledge that your personal data may be processed in accordance with this Privacy Policy. We aim to handle all information responsibly, transparently, and in a way that respects your privacy and legal rights.