Privacy Policy - Tree Surgeon Richmonduponthames

This Privacy Policy explains how Tree Surgeon Richmonduponthames collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeon Richmonduponthames customers in the area, including individuals who make enquiries, request quotations, book services, receive site visits, or otherwise interact with us in connection with tree surgery, arboricultural work, and related services.

We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only collect data that is relevant for legitimate business purposes and keep it no longer than necessary.

1. Information We Collect

We may collect and process the following categories of personal data:

Identity data such as your name, title, and, where relevant, the name of your business or property owner representative.
Contact data including your address, email address, and telephone number.
Service and property data such as details of the trees or land requiring work, access notes, photographs, site conditions, and other information needed to assess and deliver services.
Transaction data including records of quotations, invoices, payments, and service history.
Communication data from emails, messages, calls, and any feedback or complaints you provide.
Technical data if you visit any digital channels we may use, such as IP address, device information, browser type, and usage patterns.
Health and safety information where needed to manage risk on site, such as access restrictions, safety concerns, or other conditions affecting work.

We do not intentionally collect special category data unless it is necessary for a specific legal or operational purpose and lawful grounds apply. If such data is ever required, we will handle it with extra care and in accordance with data protection law.

2. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To assess sites and plan tree surgery or related services.
To carry out work safely and effectively.
To manage bookings, scheduling, invoicing, and payment processing.
To maintain service records and customer history.
To communicate about appointments, service updates, and follow-up matters.
To comply with legal, tax, insurance, and regulatory requirements.
To resolve disputes, investigate complaints, or defend legal claims.
To improve our services, customer experience, and operational efficiency.

We only use personal data where we have a valid reason to do so and where that use is consistent with the original purpose for which the data was collected.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis before processing personal data. Tree Surgeon Richmonduponthames relies on the following lawful bases:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes preparing quotations, arranging visits, carrying out tree work, issuing invoices, and providing related support.

Legal Obligation

We may process personal data to meet legal obligations, such as record-keeping, tax compliance, safety requirements, or responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, improving services, securing our operations, and maintaining internal records.

Consent

In limited cases, we may rely on your consent, for example where we need permission for a specific optional use of your data. When consent is used, you may withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties who support the delivery of our services. These parties act as processors or, in some cases, independent controllers. We only share the minimum data necessary for the task.

Examples of processors and service providers may include:

Accounting and bookkeeping providers who assist with financial records and tax compliance.
Payment service providers who process transactions securely.
IT, hosting, and data storage providers who support our systems and secure record keeping.
Communication tools used for email, messaging, scheduling, or customer management.
Professional advisers such as lawyers, insurers, or auditors where necessary.

Processors are required to handle personal data only on our instructions, protect it appropriately, and use it solely for the agreed purpose. We do not sell personal data.

We may also disclose personal data where required by law, where necessary to establish or defend legal rights, or where needed to protect the safety of individuals or property.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, and to satisfy legal, accounting, insurance, and operational requirements. Retention periods may vary depending on the type of data and the nature of the service provided.

In general:

Enquiry and quotation records may be kept for a reasonable period after the initial contact, even if no work is carried out.
Customer and job records may be kept for the duration of the service relationship and for a period afterward to manage follow-up issues, claims, or future reference.
Financial records are typically retained for the period required by tax and accounting law.
Health and safety records may be retained where needed to demonstrate compliance and manage risk.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

6. Data Security

We use appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff awareness, and limiting access to those who need it for legitimate business purposes.

However, no system is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

7. International Transfers

Where any processor or service provider stores or accesses data outside the UK, we will take steps to ensure that adequate safeguards are in place. This may include the use of approved contractual protections or other lawful transfer mechanisms to protect your personal data.

8. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may apply depending on the circumstances:

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – you may ask us to delete your data in certain circumstances.
Right to restriction – you may ask us to restrict how we use your data in certain situations.
Right to object – you may object to processing based on legitimate interests, and to direct marketing where applicable.
Right to data portability – you may request that certain data be provided to you or another provider in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

Please note that some rights are subject to legal limits and may not apply in every case. We may need to retain certain information where required by law or where it is necessary to protect our legitimate interests.

9. Automated Decision-Making

We do not normally use automated decision-making or profiling in a way that produces legal or similarly significant effects for customers. If this changes in the future, we will provide clear information about how it works and your rights in relation to it.

10. Children’s Data

Our services are intended for adults responsible for property and tree care arrangements. We do not knowingly collect personal data from children. If we become aware that we have collected such data without appropriate authority, we will take reasonable steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or the way we handle personal data. Any updated version will apply from the date it is published. We encourage customers to review this policy periodically to stay informed.

12. Summary of Our Commitment

Tree Surgeon Richmonduponthames handles personal data responsibly, lawfully, and transparently. We collect only what is necessary, use it for clear and legitimate purposes, share it only with trusted processors when required, and keep it only as long as needed. We respect your privacy and your rights under data protection law.

By using our services, making an enquiry, or allowing us to carry out work, you acknowledge that this Privacy Policy applies to you as a Tree Surgeon Richmonduponthames customer in the area.