Privacy Policy - Tree Surgeons Blackwall

This Privacy Policy explains how Tree Surgeons Blackwall collects, uses, stores, shares, and protects personal data in connection with the services we provide. It applies to all Tree Surgeons Blackwall customers in the area, including prospective customers, existing customers, and individuals who interact with us for quotes, bookings, surveys, or service delivery. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

By engaging our services, requesting information, or otherwise providing us with personal data, you acknowledge that you have read and understood this Privacy Policy. We only process personal data where there is a valid legal reason to do so.

1. Information We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, and, where relevant, business name.
Contact data: address, email address, and telephone number.
Service and property data: details about trees, access conditions, site notes, photos, and service requirements.
Financial data: payment details, billing records, and transaction history.
Communication data: messages, enquiries, complaint records, and correspondence.
Technical data: limited information relating to device usage if you contact us through electronic means, such as IP address or browser details, where applicable.
Health and safety data: information necessary to carry out work safely, such as site hazards, special access requirements, or vulnerability considerations.

We generally collect data directly from you when you request a quote, arrange a survey, book a service, make a payment, or communicate with us. In some cases, we may also receive personal data from third parties such as property owners, agents, insurers, or subcontractors where this is necessary to deliver our services.

2. How We Use Your Personal Data

We use personal data for the following purposes:

to provide quotes and assess service requirements;
to schedule, carry out, and manage tree surgery and related services;
to communicate with you about bookings, changes, and service updates;
to process invoices, payments, refunds, and accounting records;
to maintain service records and evidence of work completed;
to meet legal, regulatory, and insurance obligations;
to handle complaints, disputes, and enquiries;
to improve our services, systems, and operational efficiency;
to ensure health and safety on-site and protect property, staff, and third parties.

We will only use personal data for the purposes for which it was collected unless we reasonably consider that we need to use it for another compatible purpose and that purpose is lawful.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Tree Surgeons Blackwall relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes, arranging services, carrying out work, processing payments, and managing customer accounts.

Legal Obligation

We process certain information where necessary to comply with legal requirements, such as tax records, accounting obligations, insurance requirements, and health and safety duties.

Legitimate Interests

We may process data for our legitimate interests where those interests are not overridden by your rights and freedoms. These interests may include managing our business, preventing fraud, improving service quality, maintaining accurate records, and protecting property and personnel. When relying on legitimate interests, we assess the impact on your privacy and ensure appropriate safeguards are in place.

Consent

In limited situations, we may rely on your consent, particularly for optional communications or specific uses of information not covered by another lawful basis. Where consent is used, you may withdraw it at any time.

Vital Interests

In rare situations, we may process data to protect someone’s vital interests, for example where urgent health and safety action is required on a site.

4. Sharing Your Data and Processors

We may share personal data with trusted third parties who help us operate our business and deliver our services. These parties act as processors or, in some cases, independent controllers. We only share data where necessary and with appropriate safeguards.

Payment providers to process transactions securely;
Accounting and bookkeeping processors to manage invoices and financial records;
IT and software providers that store or support our systems;
Cloud storage and email processors used for administrative and communication purposes;
Subcontractors and specialist contractors engaged to support service delivery;
Insurers, legal advisers, and professional advisers where needed for claims, disputes, or compliance;
Public authorities where required by law or to protect legal rights.

All processors are required to handle personal data securely and only in accordance with our instructions, unless they are acting as independent controllers. We aim to ensure that any third party involved in processing personal data provides sufficient guarantees regarding confidentiality, integrity, and security.

5. International Transfers

If any of our processors store or access data outside the United Kingdom, we will take steps to ensure that appropriate safeguards are in place. This may include using standard contractual clauses, adequacy regulations, or other legally recognised transfer mechanisms to protect your personal data.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, insurance, and reporting obligations. Retention periods may vary depending on the type of data and the reason for processing.

Customer and service records: typically retained for several years after completion of work to support warranty, complaint, and business record purposes.
Financial and tax records: retained for the period required by law.
Health and safety records: retained where needed to demonstrate compliance and manage risk.
Enquiry records: retained for a reasonable period if no service is booked.

When personal data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe manner.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction. These measures may include access controls, secure storage, password protection, confidentiality obligations, and regular review of our handling practices. While we take data security seriously, no system can be guaranteed to be entirely risk-free.

8. Your Rights

As a data subject, you have rights in relation to your personal data. Subject to legal limitations, these may include:

Right of access: you may request a copy of the personal data we hold about you;
Right to rectification: you may ask us to correct inaccurate or incomplete data;
Right to erasure: you may request deletion of your data in certain circumstances;
Right to restriction: you may ask us to limit how we use your data;
Right to data portability: you may request transfer of certain data in a structured format;
Right to object: you may object to processing based on legitimate interests or direct marketing;
Right to withdraw consent: where consent applies, you may withdraw it at any time;
Right to complain: you may lodge a complaint with the UK Information Commissioner’s Office if you believe your rights have been infringed.

To exercise your rights, you may need to provide information to help us verify your identity. We will respond within the timeframe required by law and may refuse requests where legal exceptions apply.

9. Cookies and Similar Technologies

If you interact with our online services, we may use cookies or similar technologies to support functionality, remember preferences, and understand how our services are used. Where required, we will ask for consent before placing non-essential cookies. You can adjust browser settings to manage cookies, although doing so may affect site performance.

10. Children’s Data

Our services are generally not directed at children, and we do not knowingly collect personal data from children except where necessary in connection with a service request or site access arrangement. If we become aware that we have collected such data without appropriate authority, we will take reasonable steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service arrangements. Any updated version will apply from the date it is published or otherwise communicated. We encourage you to review this policy periodically to remain informed about how we process personal data.

12. Summary of Key Points

Tree Surgeons Blackwall processes personal data to provide tree surgery services, manage customer relationships, comply with legal obligations, and maintain safe and efficient operations. We collect only the information necessary, use it for clear and lawful purposes, retain it only as long as needed, and share it only with trusted processors or where required by law. Your privacy rights remain central to how we operate.

This policy applies to all Tree Surgeons Blackwall customers in the area.