Privacy Policy - Tree Surgeons Hainault

This Privacy Policy explains how Tree Surgeons Hainault collects, uses, stores, shares, and protects personal data when providing tree surgery and related services. It applies to all Tree Surgeons Hainault customers in the area, including individuals, households, landlords, property managers, and businesses that request or receive our services. We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tree Surgeons Hainault provides arboricultural services such as tree pruning, tree removal, stump grinding, hedge maintenance, emergency tree work, site surveys, and related property care services. In delivering these services, we may need to process personal data about customers, site visitors, employees, contractors, and other relevant individuals.

For the purposes of data protection law, Tree Surgeons Hainault acts as a data controller when deciding why and how personal data is processed for customer service, administration, legal compliance, and business operations.

2. Personal Data We Collect

We only collect personal data that is necessary for the services we provide and for running our business responsibly. Depending on your interaction with us, we may collect the following categories of information:

Identity data: name, title, and, where relevant, business name or property ownership details.
Contact data: postal address, email address, telephone number, and other communication details.
Service and property data: details about the property, access arrangements, tree locations, images of trees or sites, and service instructions.
Transaction data: payment records, invoices, quotes, estimates, and service history.
Communication data: records of calls, emails, messages, complaints, feedback, and correspondence.
Technical data: limited information gathered from digital systems used for security, record keeping, or website performance where applicable.
Legal and compliance data: documentation required for permits, insurance, health and safety, or dispute management.

We do not intentionally collect special category data unless it is necessary and lawful to do so. If such data is ever provided to us inadvertently, it will be handled carefully and only for a lawful purpose.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide quotations, assess jobs, and schedule services;
to carry out tree surgery, arboricultural inspections, and related site work;
to communicate with customers about appointments, access, service changes, or urgent matters;
to issue invoices, process payments, and maintain financial records;
to manage customer relationships, complaints, and service queries;
to meet legal, insurance, tax, and health and safety obligations;
to improve service quality, planning, and internal operations;
to defend legal claims or resolve disputes where necessary.

We will only use personal data for the purposes for which it was collected, unless we reasonably determine that another lawful purpose is compatible with the original purpose.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing personal data. Tree Surgeons Hainault relies on the following lawful bases, depending on the context:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotations, arranging work, delivering services, and managing billing or service-related communication.

Legal Obligation

We may process data to comply with legal duties, including tax record keeping, insurance requirements, workplace safety obligations, environmental rules, and other regulatory responsibilities.

Legitimate Interests

We may use personal data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. These interests may include business administration, service improvement, fraud prevention, security, and record keeping. We always consider whether our legitimate interests are proportionate and respectful of privacy.

Consent

In limited cases, we may rely on consent, for example if we need permission to use certain optional information or to send non-essential communications. Where consent is used, it can be withdrawn at any time.

5. Data Sharing and Processors

We may share personal data only when necessary, and always with appropriate safeguards. We may use trusted third-party processors who act on our instructions and are required to protect personal data. These may include:

IT and cloud service providers that store records, communication systems, or business files;
accounting and bookkeeping providers that support invoicing, tax, and financial administration;
payment service providers that handle card or electronic payments;
communication and scheduling tools used for customer management and operational planning;
professional advisers such as insurers, legal advisers, or auditors where needed;
subcontractors or specialist contractors who assist with specific services under our direction;
public authorities or regulators where disclosure is required by law.

We do not sell personal data. Any processor engaged by Tree Surgeons Hainault must provide suitable data protection commitments, use data only for the agreed purpose, and apply reasonable security measures.

6. International Transfers

If personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place. This may include adequacy regulations, standard contractual clauses, or equivalent legal protections. We will only transfer data where doing so is lawful and necessary for business operations.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law. Our retention periods depend on the type of information and the reason it is held. In general:

customer and service records are kept for the period needed to manage the relationship and handle follow-up issues;
financial and tax records are retained for the legally required duration;
health and safety, insurance, and job-related documentation is retained for as long as necessary to protect legal interests and comply with obligations;
communications and correspondence are retained only as long as needed for service management, dispute resolution, or record keeping.

When personal data is no longer required, it will be securely deleted, anonymised, or archived in line with our retention procedures.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, regular review of records, and careful management of third-party systems. While no system can be guaranteed completely secure, we take data protection seriously and continuously seek to reduce risk.

9. Your Rights

Under data protection law, you have important rights in relation to your personal data. Subject to legal conditions and exemptions, you may have the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete information;
erase your data in certain circumstances;
restrict how we use your data;
object to processing based on legitimate interests or direct marketing;
data portability for information you provided to us in certain situations;
withdraw consent where processing is based on consent;
lodge a complaint with the Information Commissioner’s Office if you are concerned about our handling of your data.

We will respond to requests in line with applicable legal requirements and may need to verify your identity before taking action. Some rights may not apply in every situation, particularly where we must retain data for legal, contractual, or legitimate business reasons.

10. Children’s Data

Our services are intended for adults, property owners, and authorised representatives. We do not knowingly collect personal data from children unless it is necessary for a specific lawful purpose and with appropriate care. If we become aware that we have received child-related data unexpectedly, we will handle it in accordance with applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or the services we offer. Any revised version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically to stay informed about how their data is handled.

12. Summary of Our Commitment

Tree Surgeons Hainault respects your privacy and is committed to using personal data responsibly. We collect only what is needed, use it for clear and lawful purposes, share it only with trusted processors or where required by law, and keep it only for as long as necessary. We also aim to make it easy for customers to understand and exercise their rights. If you are a customer in the Hainault area, this policy applies to you whenever we process your personal data in connection with our services.

This Privacy Policy is designed to support lawful, fair, and transparent processing for all Tree Surgeons Hainault customers in the area.