Privacy Policy - Tree Surgeons Chingford

This Privacy Policy explains how Tree Surgeons Chingford collects, uses, stores, shares, and protects personal data in connection with the services we provide. It applies to all Tree Surgeons Chingford customers in the area, including prospective customers, residential clients, commercial clients, and anyone who contacts us for a quotation, consultation, or tree surgery service. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services or providing us with your information, you acknowledge that your personal data may be processed as described in this Privacy Policy. We only collect and use personal data where we have a valid reason to do so and where that use is necessary for the provision, management, and improvement of our services.

1. Personal Data We Collect

We may collect and process different types of personal data depending on the nature of the service requested. The information we collect may include:

Identity details such as your name or business name.
Contact details such as telephone number, email address, and service address.
Service information including details about the trees, site conditions, requested works, and access requirements.
Quotation and booking information including your preferences, appointment notes, and correspondence.
Payment and billing details where required for invoicing and payment processing.
Technical and usage information if you communicate with us electronically, such as email metadata or device-related information.
Records of communication including emails, messages, call notes, and any feedback or complaints.

We generally collect this information directly from you when you request a quote, make an enquiry, confirm a booking, or otherwise engage with our services. In some cases, we may also receive information from third parties such as property managers, contractors, insurers, or local representatives where this is necessary for carrying out work or managing a job.

2. How We Use Your Personal Data

We use personal data only where it is relevant and necessary for our business operations. The main purposes for processing include:

Providing quotations and assessing the scope of work.
Scheduling, carrying out, and managing tree surgery services.
Communicating with you about appointments, access, safety, or changes to service arrangements.
Preparing invoices, handling payments, and maintaining financial records.
Responding to enquiries, feedback, and complaints.
Maintaining internal records and service history.
Meeting legal, insurance, and regulatory obligations.
Improving our services, operations, and customer experience.

We do not use personal data in ways that are incompatible with the purposes for which it was collected, unless we are otherwise permitted or required by law.

3. Lawful Basis for Processing

We process personal data under one or more lawful bases set out in the UK GDPR. These may include:

Contract

We process your personal data when it is necessary to enter into or perform a contract with you. This includes providing quotes, booking services, carrying out agreed work, and managing related communications.

Legal Obligation

We may need to process and retain certain information to comply with legal obligations, including tax, accounting, health and safety, and record-keeping requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This can include maintaining service records, improving operations, preventing fraud, and managing customer communications. Where we rely on legitimate interests, we consider the nature of the data, the impact on individuals, and whether the processing is reasonably expected.

Consent

In limited circumstances, we may rely on your consent, particularly where specific optional processing is involved. If we do so, you can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

4. How We Share Personal Data

We only share personal data where necessary and appropriate for the purposes described in this Policy. We may share information with trusted processors and service providers who act on our instructions. These may include:

IT and cloud service providers used for storage, communication, and business administration.
Accounting and bookkeeping processors used for invoicing, financial management, and tax compliance.
Payment service providers who handle transactions securely.
Operational contractors or subcontractors assisting with service delivery, where required.
Professional advisers such as accountants, insurers, or legal advisers.
Regulators, authorities, or law enforcement where disclosure is required by law.

We require our processors to protect your information and to process it only for the permitted purposes. They are not allowed to use your data for their own unrelated purposes.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, and reporting requirements. Retention periods may vary depending on the type of information and the reason it is held.

For example, customer and service records may be retained for a period needed to manage warranties, disputes, insurance matters, and statutory obligations. Financial records are usually kept for a longer period in line with tax and accounting rules. When personal data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a safe manner.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, confidentiality practices, and limiting access to data to those who need it for business purposes. While no system can be guaranteed to be completely secure, we work to ensure that data is handled carefully and responsibly.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to legal limits, these may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to data portability – to receive certain data in a usable format where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent.

You also have the right to raise concerns with the relevant supervisory authority if you believe your data protection rights have been infringed. We encourage you to contact us first so that we can try to resolve any concerns promptly and fairly.

8. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children except where it is incidental to providing services to a property or household and only where this is necessary and lawful. If we become aware that we have collected information from a child without a valid basis, we will take appropriate steps to delete it.

9. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it. These safeguards may include recognised legal transfer mechanisms and contractual protections designed to keep the data secure and processed in line with applicable privacy laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or how we process personal data. Any updated version will apply from the date it is published or otherwise communicated. We encourage you to review this Policy periodically to stay informed about how your information is handled.

11. Contact and Further Information

If you have questions about this Privacy Policy, your personal data, or how we process information, you may raise your concerns through our usual business communication channels. We will respond to privacy-related requests in accordance with applicable data protection law and within the required timeframes.

Summary of our commitment: we process personal data fairly, securely, and only for legitimate purposes connected to Tree Surgeons Chingford services. We keep information only as long as necessary, use trusted processors, and respect your rights under the law.