Privacy Policy - Tree Surgeons Barkingside

This Privacy Policy explains how Tree Surgeons Barkingside collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Barkingside customers in the area, including anyone who enquires about our services, receives a quote, books work, or otherwise interacts with us in relation to tree surgery, tree care, hedge maintenance, stump removal, or related services.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is written to help you understand what information we process, why we process it, how long we keep it, who may process it on our behalf, and what rights you have over your data.

1. Information We Collect

We may collect and process different types of personal data depending on how you use our services. The information we collect is limited to what is necessary for the purposes described in this policy.

Categories of data

Identity information such as your name, title, and, where relevant, the name of your business or property owner.
Contact information such as your address, email address, and telephone number.
Service and property details such as the location of the property, details about trees, hedges, or stumps, access arrangements, and instructions related to the work requested.
Payment and billing details such as invoices, payment status, and transaction references. We do not retain full payment card details where a secure third-party payment provider is used.
Communication records such as emails, messages, call notes, and correspondence related to enquiries, quotations, scheduling, complaints, or follow-up work.
Technical information where applicable, such as basic website usage data, IP address, browser type, and device information collected through standard server logs or analytics tools.
Photographic records where needed to assess work, document completed services, support quotations, or demonstrate outcomes before and after tree surgery.

We do not intentionally collect special category data unless it is necessary and lawful to do so. If such data is provided to us inadvertently, we will treat it with appropriate care and only process it where a valid legal basis exists.

2. How We Use Your Data

We use personal data only for specified, explicit, and legitimate purposes. These include:

responding to enquiries and providing quotations;
arranging site visits and carrying out tree surgery or related services;
managing bookings, scheduling, and service delivery;
issuing invoices, recording payments, and managing accounts;
maintaining business records and service history;
handling complaints, queries, or disputes;
meeting legal, regulatory, tax, insurance, and health and safety obligations;
improving our services, internal operations, and customer experience;
protecting our business, staff, customers, and property from fraud, misuse, or security incidents.

We will not use your data for unrelated purposes unless we have informed you and, where required, obtained consent or identified another lawful basis.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the circumstances, Tree Surgeons Barkingside may rely on one or more of the following lawful bases:

Contract: processing is necessary to provide a quotation, deliver services, manage bookings, or fulfil our obligations under a contract with you.
Legal obligation: processing is necessary to comply with laws and regulations, including tax, accounting, insurance, and health and safety requirements.
Legitimate interests: processing is necessary for our legitimate business interests, such as responding to enquiries, maintaining records, improving services, and ensuring site and operational security, provided your rights do not override those interests.
Consent: in limited cases, we may rely on your consent, for example where it is required for certain marketing activities or optional uses of data. You may withdraw consent at any time.

Where we rely on legitimate interests, we balance our interests against your privacy rights. If you would like more information about this balancing exercise, you may request it using the contact channels provided in our customer communications.

4. Sharing and Processors

We may share personal data with trusted third parties who act as data processors on our behalf. These processors are only permitted to process your data in accordance with our instructions and are required to implement appropriate security measures.

Examples of processors and recipients

IT and cloud service providers that host email, data storage, scheduling, or backup systems.
Accountants and bookkeeping providers who assist with financial records, invoicing, and tax compliance.
Payment service providers that process payments securely on our behalf.
Insurance providers, legal advisers, and claims handlers where needed to manage risk, disputes, or legal matters.
Subcontractors or specialist contractors where support is required to deliver certain services, provided they only receive the information necessary to do their work.
Regulators, law enforcement, or public authorities where disclosure is required by law or is necessary to protect rights, property, or safety.

We do not sell your personal data. Where data is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as standard contractual protections or equivalent legal mechanisms, to keep your information secure and compliant with UK GDPR requirements.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and to meet legal, accounting, and operational requirements. Retention periods vary depending on the type of data and the reason for processing.

Typical retention periods

Enquiry and quotation records: kept for a reasonable period to manage follow-up, customer service, and business administration, unless they become part of a contract or ongoing matter.
Customer service and contract records: retained for the duration of the relationship and for a further period where needed for warranty, dispute resolution, or legal purposes.
Invoices and accounting records: retained in line with statutory financial and tax obligations.
Health and safety or incident records: retained for the period necessary to satisfy legal obligations and manage any claims or investigations.
Marketing preferences: retained until you withdraw consent or object, where applicable.

When data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices and applicable law. Retention is always limited to what is necessary and proportionate.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, restricted permissions, password protection, staff training, and regular review of our data handling practices.

Although we work to protect your information, no system can be guaranteed to be completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will take appropriate steps in line with legal requirements.

7. Your Rights

You have a number of rights under data protection law in relation to your personal data. These rights apply subject to certain legal limits and exemptions.

Your rights include:

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: you may request deletion of your data in certain circumstances.
Right to restriction: you may request that we limit how we use your data in certain situations.
Right to data portability: where applicable, you may request that we provide certain data in a structured, commonly used format.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law. We may need to verify your identity before responding to your request. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed.

8. Children’s Data

Our services are intended for adults and business or property contacts. We do not knowingly collect data from children unless it is incidentally provided in the course of a service request or site visit. If we become aware that we have collected such information unlawfully, we will take steps to delete it where appropriate.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage you to review this policy periodically so that you remain informed about how your information is used.

10. Summary of Our Commitment

Tree Surgeons Barkingside is committed to processing personal data lawfully, securely, and transparently. We collect only the information necessary to provide and manage our services, rely on appropriate lawful bases, keep data only for as long as needed, use trusted processors under contract, and respect your rights over your personal information. This policy applies to all Tree Surgeons Barkingside customers in the area and is designed to support privacy, trust, and responsible data handling at every stage of our service relationship.