Privacy Policy - Tree Surgeons Acton

This Privacy Policy explains how Tree Surgeons Acton collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Acton customers in the area, including individuals, households, landlords, tenants, and business clients who engage our tree surgery and related services. We are committed to handling personal data in a fair, lawful, transparent, and secure manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tree Surgeons Acton provides arboricultural and tree care services, including tree pruning, tree removal, stump grinding, hedge maintenance, site clearance, emergency tree work, and related assessments. In delivering these services, we may need to process personal information about customers, site representatives, property owners, and other relevant contacts.

2. Information We Collect

We only collect personal data that is necessary for service delivery, administration, and compliance. The types of information we may collect include:

Identity details such as name, title, and business name where relevant.
Contact details such as telephone number, email address, and service address.
Property and site information such as access details, instructions, photographs, and notes about trees, boundaries, and hazards.
Payment and billing details such as invoice records, transaction references, and payment status.
Communication records such as emails, messages, quotes, service updates, complaints, and feedback.
Technical data such as basic website or device information if you interact with our online services, where applicable.
Legal or compliance information where required for insurance, accident reporting, planning, or dispute handling.

We generally collect data directly from you when you request a quote, make an enquiry, confirm a booking, approve work, or communicate with us. In some cases, data may also be provided by a property manager, landlord, neighbour, insurer, or another person arranging services on your behalf.

3. How We Use Your Data

We use personal data for the following purposes:

To provide quotes, arrange visits, and carry out tree surgery services.
To assess site conditions, safety requirements, and access arrangements.
To manage bookings, invoicing, and payment processing.
To communicate with you about service updates, changes, or follow-up matters.
To maintain accurate business records and respond to queries or complaints.
To meet legal, tax, insurance, and health and safety obligations.
To protect our business, customers, staff, and contractors from fraud, misuse, or legal claims.

We do not use your personal data for unrelated purposes without first ensuring that we have a valid legal basis to do so.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing personal data. Tree Surgeons Acton relies on the following lawful bases depending on the situation:

Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes preparing quotes, confirming work, delivering services, issuing invoices, and completing the agreed task.

Legal Obligation

We may process data to comply with legal requirements, including tax and accounting duties, record keeping, insurance obligations, and health and safety laws.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include managing enquiries, improving service quality, preventing fraud, maintaining security, and handling internal administration. We only rely on this basis where it is fair and reasonable to do so.

Consent

In limited circumstances, we may rely on consent, for example where you choose to receive certain marketing communications. Where consent is used, you may withdraw it at any time.

5. Sharing Your Information

We may share personal data with trusted third parties where necessary for the delivery of our services or where required by law. These may include:

Payment providers and accounting services used to process invoices and records.
IT and hosting providers that support our business systems and data storage.
Subcontractors or specialist contractors who assist with specific aspects of a job under our instruction.
Insurers, legal advisers, or dispute resolution professionals where needed to manage claims or legal matters.
Public authorities where disclosure is required by law or to protect rights, property, or safety.

We only share the information needed for the relevant purpose and require processors and service providers to handle data securely and in accordance with applicable data protection laws.

6. Data Processors

When we use external service providers to process personal data on our behalf, they act as data processors. These processors may provide services such as secure data storage, email systems, document management, accounting software, customer administration, or payment processing. They are only permitted to process your data according to our instructions and must not use it for their own purposes.

We take reasonable steps to ensure that processors are selected carefully and have appropriate technical and organisational security measures in place. Where required, we put contractual safeguards in place to protect your information and ensure compliance with GDPR standards.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. The retention period may vary depending on the type of data and the nature of the service provided.

For example:

Quote and service records may be kept for a reasonable period to manage ongoing business administration and follow-up queries.
Invoice and tax-related information may be retained for the period required by law.
Communication records may be kept where needed to evidence instructions, agreements, or complaints.
Safety and incident records may be retained longer where required for legal, insurance, or operational reasons.

When data is no longer needed, we securely delete or anonymise it.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures are designed to reflect the nature of the information we hold and the risks involved. While no system can be guaranteed completely secure, we take reasonable precautions to safeguard your data.

9. Your Rights

As a data subject under UK GDPR, you have several rights regarding your personal data. These include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – you can request deletion of your data in certain circumstances.
Right to restrict processing – you can ask us to limit how we use your data in certain cases.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you may request that certain data be provided in a structured, commonly used format.

Where our processing is based on consent, you also have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.

10. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is necessary in the context of a property, household, or family arrangement and only to the extent required to provide the service lawfully and appropriately.

11. International Transfers

If any service provider stores or processes data outside the UK, we will take steps to ensure that appropriate safeguards are in place so that your data remains protected to a standard that is consistent with UK GDPR requirements.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. Any updated version will apply from the date it is published. We encourage customers to review this policy periodically to remain informed about how we use personal data.

13. Summary of Your Privacy

Tree Surgeons Acton values your privacy and only processes data when it is necessary, lawful, and proportionate. We collect limited personal information, use it for service delivery and compliance, retain it for appropriate periods, and share it only with trusted processors or where required by law. You have strong rights over your data, and we aim to respect and support those rights at all times.

This policy applies to all Tree Surgeons Acton customers in the area.