Privacy Policy - Tree Surgeons Tufnellpark

This Privacy Policy explains how Tree Surgeons Tufnellpark collects, uses, stores, shares, and protects personal data in connection with our services. It applies to all Tree Surgeons Tufnellpark customers in the area, including individuals who request quotes, book work, communicate with us, or receive tree surgery services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tree Surgeons Tufnellpark provides tree surgery and related arboricultural services to residential and commercial customers in Tufnellpark and nearby surrounding locations. For the purposes of data protection law, we act as the data controller for the personal data we collect and use in relation to our customers, suppliers, and website or service enquiries where applicable.

This means we decide why and how personal data is processed and are responsible for ensuring that processing complies with the law.

2. Personal Data We Collect

We only collect personal data that is necessary for the services we provide, for administration, and to meet legal obligations. Depending on how you interact with us, we may collect the following types of information:

Identity data such as your name and title.
Contact data such as address, email address, and phone number.
Service data including property details, site access information, photographs of trees or work areas, and records of jobs requested or completed.
Payment and transaction data such as billing records, payment confirmation, and invoice details.
Communication data including messages, emails, notes of calls, complaints, feedback, and service updates.
Technical data where relevant, such as basic device or browser information if you contact us through digital channels.
Legal and compliance data such as records needed for insurance, health and safety, tax, or regulatory purposes.

We do not intentionally collect special category data unless it is required for a lawful purpose or you choose to provide it. If such information is shared with us, we will only process it where an appropriate legal condition applies.

3. How We Use Your Data

We use personal data for specific and limited purposes connected with our services. These may include:

providing quotes and assessing job requirements;
booking, planning, and carrying out tree surgery or related work;
communicating with customers about appointments, site access, changes, or completion details;
issuing invoices, processing payments, and maintaining accounting records;
responding to enquiries, complaints, and requests;
maintaining health and safety records and risk assessments;
meeting legal, tax, insurance, and regulatory obligations;
protecting our business, staff, customers, and property;
improving our service quality and record-keeping.

We will only use personal data for the purpose for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose and that the law allows this.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing personal data. Tree Surgeons Tufnellpark may rely on one or more of the following lawful bases:

Contract - where processing is necessary to provide a quote, arrange services, carry out work, or manage our agreement with you.
Legal obligation - where we must process data to comply with tax law, accounting rules, health and safety duties, insurance obligations, or other statutory requirements.
Legitimate interests - where processing is necessary for our legitimate business interests and does not override your rights and freedoms, such as managing enquiries, improving services, preventing fraud, and keeping internal records.
Consent - in limited situations where we need your permission, for example for optional marketing or certain types of image use, and where consent is required by law.
Vital interests - in rare circumstances if processing is needed to protect someone’s life.

Where we rely on legitimate interests, we assess whether the processing is necessary and whether your privacy rights are affected. Where consent is used, you may withdraw it at any time.

5. Data Sharing and Processors

We may share personal data with trusted third parties when necessary to deliver our services or comply with legal requirements. These third parties act either as processors or independent controllers, depending on the relationship.

Examples of processors or service providers may include:

accounting and bookkeeping providers;
IT support, cloud storage, and data backup providers;
payment processing services;
surveying, scheduling, or administrative tools;
health and safety or insurance-related service providers;
subcontractors or specialist professionals engaged to complete part of a job, where necessary.

We require processors to handle personal data securely, only on our instructions, and in compliance with data protection law. We do not sell personal data. If information is shared with independent controllers, such as tax authorities, insurers, or regulators, those parties will handle the data under their own legal responsibilities.

6. International Transfers

If any of our processors store or access data outside the United Kingdom, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We take steps to make sure your data remains protected to a standard consistent with UK data protection law.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, and insurance requirements. Retention periods may vary depending on the type of record and the reason it is held.

As a general approach:

job and customer records are kept for a period necessary to manage service history and disputes;
financial and invoice records are retained for the period required by tax and accounting law;
health and safety records are kept for the duration required by applicable legislation and risk management needs;
communications and enquiries are retained for as long as needed to respond properly and maintain appropriate business records.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

8. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss, disclosure, or destruction. These measures may include access controls, password protection, secure storage, limited staff access, and careful handling of paper and digital records.

Although no system can be guaranteed completely secure, we review our safeguards regularly and aim to reduce privacy and security risks as far as reasonably possible.

9. Your Rights

As a data subject, you have rights in relation to your personal data. Subject to legal conditions and exemptions, you may have the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete information;
erase your data in certain circumstances;
restrict processing in certain situations;
object to processing based on legitimate interests or direct marketing;
data portability for information you have provided where the law allows;
withdraw consent where we rely on consent for processing.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

10. Marketing Preferences

If we send any optional marketing communications, we will do so only where permitted by law. You may opt out at any time, and we will respect your preferences. We do not use personal data for marketing in a way that is incompatible with the original purpose of collection.

11. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is necessary in connection with a customer’s property, safety, or service request and provided by an adult with authority to do so.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational needs. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how we handle personal data.

13. Summary of Key Points

What we collect

We collect only the data needed to provide tree surgery services, manage customer relationships, meet legal obligations, and maintain accurate business records.

Why we use it

We use data to deliver services, communicate with customers, process payments, keep safe records, and comply with the law.

How long we keep it

We retain personal data only for as long as necessary and then securely delete or anonymise it.

Your control

You have legal rights over your personal data, including rights of access, correction, objection, and deletion in appropriate circumstances.

Tree Surgeons Tufnellpark is committed to respecting privacy and protecting personal information. We handle all data in a lawful, transparent, and proportionate way, with safeguards designed to support customer trust and compliance across all services delivered in the area.