Privacy Policy - Tree Surgeons Brentcross

Tree Surgeons Brentcross is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, share, store, and protect personal information when you interact with our services. It applies to all Tree Surgeons Brentcross customers in the Brentcross area, including anyone who requests a quote, books work, receives tree surgery services, or contacts us about our work.

1. Who We Are

For the purposes of data protection law, Tree Surgeons Brentcross acts as the data controller for the personal data we process in connection with our services. This means we determine the purposes and means of processing your personal information. We take our responsibilities under the UK GDPR and the Data Protection Act 2018 seriously and work to ensure that your information is handled lawfully, fairly, and transparently.

2. Personal Data We Collect

We may collect and process different types of personal data depending on how you use our services. The data we collect may include:

Identity details such as your name and title.
Contact details such as your address, email address, and phone number.
Service information including details of the work requested, site access notes, and relevant property information.
Billing and payment information such as invoice details, payment status, and transaction records.
Communication records such as messages, call notes, and correspondence about quotations, schedules, complaints, or service updates.
Technical information if you interact with digital forms or messages, which may include device or browser-related data needed for security and service administration.
Site-related images or documents if you provide photographs, plans, or other materials relevant to the tree surgery work.

We only collect personal data that is relevant and necessary for providing our services, managing customer relationships, meeting legal obligations, and running our business effectively.

3. How We Use Your Personal Data

We use your information for the following purposes:

To provide quotes and assess service requirements.
To schedule, carry out, and manage tree surgery services.
To communicate with you about your booking, property access, and job updates.
To issue invoices, process payments, and keep financial records.
To respond to enquiries, complaints, and service requests.
To maintain internal records and improve our services.
To comply with legal, tax, accounting, health and safety, and insurance obligations.
To protect our rights, property, staff, contractors, and customers.

We always aim to limit the use of personal data to what is necessary for the specific purpose for which it was collected.

4. Lawful Basis for Processing

We process personal data only where we have a lawful basis to do so under data protection law. Depending on the situation, our lawful bases include:

Contract – when processing is necessary to prepare for or perform a contract with you, such as providing a quotation or carrying out tree surgery services.
Legal obligation – when we must process information to comply with legal and regulatory duties, such as tax, accounting, or safety requirements.
Legitimate interests – when processing is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include managing enquiries, maintaining service records, preventing fraud, and improving operations.
Consent – in limited cases, where we rely on your permission, for example for certain optional communications or the use of non-essential information. Where consent is used, you may withdraw it at any time.

Where special category data is ever processed, we will do so only when permitted by law and with appropriate safeguards. In most cases, Tree Surgeons Brentcross does not need to process special category data.

5. Sharing Your Data and Processors

We may share personal data with carefully selected third parties that help us operate our business and deliver services. These third parties act as processors where they handle personal data on our instructions and under contract. Examples may include:

IT and cloud service providers who host data, maintain systems, or support email and record management.
Accounting or bookkeeping processors who help manage invoices, payments, and financial records.
Administrative service providers who assist with document handling or operational support.
Waste disposal or subcontracted service partners where necessary for completing a job, provided they are instructed to handle data appropriately.
Professional advisers such as insurers, legal advisers, or auditors where disclosure is required for advice, claims, or compliance.

We require all processors to protect your data, use it only for the permitted purpose, and apply appropriate technical and organisational security measures. We do not sell your personal data.

6. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods depend on the type of information and the reason it is held.

In general:

Quotation and customer enquiry records may be kept for a reasonable period to manage follow-up, service history, and business administration.
Invoice, payment, and accounting records are retained for the period required by tax and financial laws.
Service and contract records may be retained to support warranty, dispute resolution, compliance, or operational continuity.
Communication records are kept only as long as needed to resolve the matter and support lawful business purposes.

When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in a safe and appropriate manner.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and restricted handling of sensitive records. While no system can be guaranteed completely secure, we work hard to maintain a high standard of data protection.

8. International Transfers

If any processor stores or accesses data outside the United Kingdom, we ensure appropriate safeguards are in place, such as approved transfer mechanisms and contractual protections, so that your data remains protected to a standard consistent with UK data protection law.

9. Your Rights

As a data subject, you have important rights in relation to your personal data. Subject to legal conditions and exemptions, these may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing where applicable.
Right to data portability – to request certain data in a structured, commonly used format where legally applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in line with applicable legal requirements. We may need to verify your identity before responding to your request.

10. Marketing Communications

We will only send marketing communications where permitted by law. You may opt out of marketing at any time, and we will respect your preferences. Transactional or service-related messages may still be sent where necessary to fulfil our obligations or provide the services you requested.

11. Complaints and Supervisory Authority

If you have concerns about how your personal data is handled, we encourage you to raise them with us so that we can address the issue promptly. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or the relevant UK data protection authority if you believe your data protection rights have been infringed.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any revised version will apply from the date it is published. We encourage customers in the Brentcross area to review this policy periodically so they remain informed about how their personal data is protected.

Summary of Our Commitment

Tree Surgeons Brentcross only processes personal data when necessary, uses it for clear and lawful purposes, shares it only with trusted processors under contract, retains it for no longer than needed, and respects your rights under the UK GDPR. This policy applies to all customers in the Brentcross area who use or enquire about our services.