Privacy Policy - Tree Surgeons Kentishtown

This Privacy Policy explains how Tree Surgeons Kentishtown collects, uses, stores, shares, and protects personal data when providing tree surgery and related arboricultural services. It applies to all Tree Surgeons Kentishtown customers in area, including prospective customers, current customers, former customers, and individuals who enquire about our services. We are committed to handling personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable privacy laws.

1. Who We Are

Tree Surgeons Kentishtown provides tree care and maintenance services, including inspections, pruning, removals, stump grinding, emergency call-outs, and site assessments. In doing so, we may need to collect and process personal data about individuals, property owners, site managers, tenants, and other persons connected with a service request or job site.

We act as a data controller for personal data we determine the purposes and means of processing. Where we use third-party service providers to process data on our behalf, they act as processors or, in some cases, independent controllers depending on the service.

2. Personal Data We Collect

We only collect personal data that is necessary for legitimate business, legal, and service delivery purposes. The data we collect may include:

Identity data such as name, title, and company or organisation name.
Contact data such as postal address, email address, and telephone number.
Property and site data such as site access details, photos, tree locations, and relevant property information.
Service and transaction data such as quotes, invoices, job records, payment status, and service history.
Communication data such as messages, notes from calls, complaints, and correspondence.
Technical data such as IP address, browser type, and device information if our systems record it.
Legal and compliance data such as records needed for insurance, accounting, health and safety, and regulatory compliance.

We do not intentionally collect special category data unless it is strictly necessary and permitted by law. If such data is ever provided to us incidentally, we will handle it with additional care and only where there is a lawful basis to do so.

3. How We Use Personal Data

We use personal data to provide professional services and manage our business effectively. This includes:

Responding to enquiries and preparing quotes.
Planning, scheduling, and carrying out tree surgery services.
Managing access to sites and coordinating work safely.
Preparing invoices, taking payment, and maintaining accounting records.
Keeping service records, correspondence, and job documentation.
Handling complaints, disputes, and insurance matters.
Meeting legal obligations, including tax, health and safety, and record-keeping duties.
Improving our services, internal processes, and customer communications.

We will only use your personal data for the purpose for which it was collected unless we reasonably consider that we need to use it for a compatible purpose or another lawful basis applies.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. We rely on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. For example, we need your contact details and property information to provide a quote, arrange services, and complete a job.

Legal Obligation

We may process personal data where necessary to comply with legal requirements, such as accounting rules, tax obligations, insurance requirements, and health and safety laws.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining business records, improving service quality, preventing fraud, protecting property, and managing customer relationships. We consider the impact of such processing and apply safeguards where appropriate.

Consent

In limited cases, we may rely on your consent, for example where it is required for a particular type of optional communication or processing. If we rely on consent, you may withdraw it at any time.

5. How We Share Personal Data

We may share personal data with trusted third parties only where necessary and lawful. Such parties may include:

Processors who provide IT, storage, scheduling, administration, accounting, or communication services on our behalf.
Payment service providers who process payments or support invoicing.
Professional advisers such as accountants, insurers, legal advisers, or auditors.
Public authorities where required by law, regulation, or court order.
Subcontractors or specialist contractors assisting with specific works, where needed to complete a service safely and effectively.

Where we engage processors, they are only permitted to process personal data on our instructions and must implement appropriate security measures. We do not sell personal data. We also do not share personal data for unrelated marketing purposes without a lawful basis.

6. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and to meet legal, accounting, insurance, and operational needs. Retention periods may vary depending on the type of record and the reason for keeping it.

Customer and service records are retained for a reasonable period to manage services, resolve disputes, and support business administration.
Financial records are kept for the period required by law and accounting practice.
Health and safety records are retained where needed for legal compliance and risk management.
Enquiry records may be kept for a shorter period if no service is booked.

When data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention practices. Retention is reviewed periodically to ensure we do not keep data longer than necessary.

7. International Transfers

If any personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent legal protections, depending on the destination and the service used.

8. Data Security

We take reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. Such measures may include access controls, secure storage, staff awareness, and careful selection of trusted processors. While no system can be guaranteed completely secure, we work to reduce risks and respond appropriately to incidents.

9. Your Rights

Depending on the circumstances, you may have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain cases.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to raise a concern with the UK Information Commissioner’s Office if you believe your data protection rights have not been respected. We encourage you to contact us first so we can try to resolve any issue promptly and fairly.

10. Children’s Data

Our services are generally directed to adults and business customers. We do not knowingly collect personal data from children unless it is incidental to a property or service arrangement and lawful to process. Where children’s data is involved, we will apply appropriate safeguards.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. Any revised version will apply from the date it is made available. We recommend reviewing this policy periodically to stay informed about how we process personal data.

12. Summary of Our Approach

Tree Surgeons Kentishtown is committed to processing personal data fairly, transparently, and securely. We collect only what is needed, use it for clear and lawful purposes, keep it only as long as necessary, and share it only with trusted parties where required. We respect the rights of our customers and all individuals whose data we process, and we aim to maintain the highest standards of privacy and compliance.