Privacy Policy - Tree Surgeons Islington

This Privacy Policy explains how Tree Surgeons Islington collects, uses, stores, shares, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies to all Tree Surgeons Islington customers in the area, including anyone who requests a quote, books services, makes an enquiry, or otherwise interacts with us in connection with tree surgery and related services.

We are committed to handling personal information fairly, lawfully, and transparently. We only collect data that is necessary for providing our services, managing our business, and meeting legal or regulatory obligations. We also aim to ensure that personal data is accurate, kept secure, and retained only for as long as needed.

1. Information We Collect

We may collect and process the following categories of personal data:

Identity information such as your name and title.
Contact information such as your address, email address, and telephone number.
Property and service details such as property access notes, job location, service requirements, and photographs relevant to tree surgery work.
Communication records including enquiries, messages, quotes, service updates, complaints, and feedback.
Payment and transaction data including billing details, payment confirmations, and records of services supplied.
Technical data such as basic device or browser information if you interact with us online, where applicable.
Operational information relating to appointments, site visits, risk assessments, work schedules, and service outcomes.

We usually collect personal data directly from you. In some cases, we may receive information from third parties such as property owners, managing agents, subcontractors, or public sources where this is necessary for service delivery or lawful business purposes.

2. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotes.
To assess job requirements, arrange site visits, and deliver tree surgery services.
To communicate about bookings, works, changes, and service-related matters.
To prepare invoices and process payments.
To manage customer relationships and maintain service records.
To comply with health and safety, insurance, tax, accounting, and legal obligations.
To handle complaints, disputes, or claims.
To improve our services, business operations, and customer experience.

We only use personal data for purposes that are compatible with the reasons for which it was collected. Where we need to use your information for a new purpose that is not compatible with the original purpose, we will ensure that we have a valid lawful basis and, where required, provide you with additional information.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. We rely on the following lawful bases depending on the activity:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes providing quotes, scheduling work, carrying out tree surgery services, issuing invoices, and managing related communications.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This may include managing our customer relationships, maintaining internal records, improving services, preventing fraud, and protecting our business operations.

Legal Obligation

We process personal data where necessary to comply with legal obligations, including taxation, accounting, employment, insurance, health and safety, and regulatory requirements.

Consent

In limited circumstances, we may rely on your consent, for example where it is appropriate for certain types of optional communications or specific uses of data. Where consent is used, you have the right to withdraw it at any time.

4. Sharing and Processors

We may share personal data with trusted third parties who help us run our business and deliver services. These third parties act as processors or independent controllers, depending on the nature of their role.

Examples of processors or service providers may include:

IT and cloud storage providers.
Accounting and bookkeeping providers.
Payment processing services.
Customer administration and scheduling support tools.
Subcontractors assisting with tree surgery work under our instruction.
Insurance providers and professional advisers.

Where a third party processes personal data on our behalf, we require them to process it only in accordance with our instructions, to keep it secure, and to comply with applicable data protection law. We do not allow processors to use your information for their own independent purposes unless they are separately acting as a controller and have a lawful basis to do so.

We may also disclose personal data if required by law, to protect our rights or property, to prevent or detect fraud or misuse, or in connection with legal claims or proceedings.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements.

Retention periods vary depending on the type of data and the context in which it was collected. For example:

Customer and service records may be retained for the duration of the working relationship and for a reasonable period afterwards.
Financial and tax records are generally retained for the period required by law.
Health and safety or insurance-related records may be kept for longer where necessary to manage claims or legal obligations.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful selection of third-party processors.

Although we work hard to protect information, no system can be guaranteed to be completely secure. We therefore encourage individuals to take care when sharing personal information and to contact us promptly if they believe their data may have been compromised.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the legal basis for processing.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – you can request deletion of your personal data in certain situations.
Right to restrict processing – you can ask us to limit how we use your data in certain cases.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request transfer of certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing relies on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will assess your request in line with applicable law and respond within the required timeframe. In some cases, we may need to retain certain information despite a request, where a legal obligation or another lawful reason applies.

8. International Transfers

If any personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it, such as adequacy regulations or approved contractual protections, where required by law.

9. Third-Party Links and External Services

Where our business communications or systems involve third-party services, those providers may operate under their own privacy policies. We encourage you to read any relevant third-party privacy notices so you understand how your information is handled by them. We are not responsible for the privacy practices of external websites or services that are not under our control.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will apply from the date it is made available. We recommend reviewing this policy periodically to stay informed about how your personal data is used.

11. Children’s Data

Our services are intended for adult customers and property-related contacts. We do not knowingly collect personal data from children except where it is incidental and necessary for service or safety purposes. If we become aware that we have collected information about a child without an appropriate lawful basis, we will take steps to delete it where required.

12. Summary of Our Commitment

Tree Surgeons Islington is committed to handling personal data responsibly and in compliance with the law. We use information only where we have a valid lawful basis, we keep it only for as long as necessary, we share it carefully with trusted processors, and we respect your rights over your personal data. Our privacy practices apply to all Tree Surgeons Islington customers in the area, and we aim to maintain trust, transparency, and accountability in everything we do.

This policy is designed to provide clear and lawful information about our data practices. It should be read together with any applicable service terms or notices provided at the time of enquiry or booking.