Privacy Policy - Tree Surgeons Yeading

This Privacy Policy explains how Tree Surgeons Yeading collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Yeading customers in the area, including anyone who makes an enquiry, requests a quotation, books a service, or interacts with us in connection with tree surgery, arboricultural work, or related services. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tree Surgeons Yeading provides tree surgery and related property maintenance services. In the context of this policy, we, us, and our refer to Tree Surgeons Yeading as the data controller for personal information collected and processed in the course of our business.

Personal data means any information that relates to an identified or identifiable living person. This may include names, addresses, contact details, service records, and other information that can be linked to an individual. We only collect and use personal data where we have a valid reason to do so.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity details, such as your name or the name of a property owner, tenant, or authorised representative.
Contact details, such as telephone number, email address, and service address.
Property and service information, including details about trees, access requirements, work requested, site conditions, and photographs taken for assessment or record-keeping.
Payment and billing information, where relevant to invoicing, payment processing, or account management.
Communication records, such as emails, messages, notes from calls, and correspondence related to quotations, bookings, complaints, or follow-up service.
Technical data, if you interact with our digital systems, which may include basic device or usage information used for security, troubleshooting, and service improvement.
Health and safety information, where necessary to carry out work safely, for example details about hazards on site, access restrictions, or relevant risk factors.

We do not seek to collect unnecessary personal data. Where possible, we limit the information requested to what is needed to provide our services properly and safely.

3. How We Collect Data

We may collect personal data directly from you when you contact us, request a quotation, make a booking, provide instructions, or communicate with us during or after a job. We may also receive data from:

property owners, tenants, or managing agents who arrange work on behalf of another person;
subcontractors, insurers, or professional advisers where necessary for service delivery or legal compliance;
publicly available sources when needed to verify property details or manage a job;
cameras or photographs taken on site for evidence, assessment, or safety purposes.

Where we receive personal data about someone else, the person providing it should ensure they have the authority to do so and that the other individual is aware of this Privacy Policy where appropriate.

4. Lawful Basis for Processing

We only process personal data when we have a lawful basis under data protection law. Depending on the situation, our lawful bases may include:

Contract

We process personal data when it is necessary to provide a quotation, schedule work, complete services, issue invoices, or manage the customer relationship before and after a contract.

Legal obligation

We may process and retain data to comply with legal duties, including tax requirements, accounting rules, health and safety obligations, and record-keeping duties.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This can include responding to enquiries, preventing fraud, maintaining security, improving services, and keeping internal business records.

Consent

In limited cases, we may rely on your consent, for example where it is appropriate to use certain types of optional marketing communications or specific photographs not otherwise necessary for service delivery. You may withdraw consent at any time where consent is the lawful basis.

5. How We Use Personal Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to arrange and deliver tree surgery and related services;
to communicate about appointments, access, work progress, or aftercare;
to create and maintain job records;
to generate invoices, manage payments, and handle accounts;
to comply with legal, regulatory, tax, and insurance requirements;
to manage complaints, claims, and disputes;
to improve safety, quality, and operational efficiency;
to protect our business, staff, customers, and property;
to keep evidence of work completed, where appropriate.

We only use personal data in ways that are compatible with the purpose for which it was collected, unless we have a lawful reason to use it for another compatible purpose.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, and to meet legal or operational requirements. Retention periods vary depending on the type of information and the reason for processing.

In general:

quotation and enquiry records may be kept for a reasonable period in case of follow-up or dispute;
customer service and job records may be retained for business administration, warranty, or claims purposes;
financial and tax records are typically retained for the period required by law;
health and safety records may be retained where necessary to demonstrate compliance and manage risk.

When data is no longer needed, we will securely delete, destroy, or anonymise it. Where records are archived, they will be protected and accessed only when necessary.

7. Sharing Personal Data and Processors

We may share personal data with trusted third parties when necessary to deliver our services, operate our business, or comply with law. These third parties may act as processors or independent controllers depending on the context.

Examples of processors or service providers may include:

IT and cloud storage providers;
accounting and invoicing systems;
payment processing services;
communication and email service providers;
professional advisers such as accountants, lawyers, or insurers;
subcontractors who assist with service delivery under our instructions;
regulatory bodies, law enforcement, or public authorities where required by law.

Where we use processors, we ensure appropriate contractual and security safeguards are in place. Processors are only permitted to act on our instructions and may not use your data for their own independent purposes. We do not sell personal data.

8. International Transfers

If any of our service providers process data outside the UK, we will take steps to ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other legally recognised transfer mechanisms designed to protect your information.

9. Data Security

We use reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. Such measures may include access controls, secure storage, limited staff access, and careful management of records and devices.

While we take data security seriously, no system can be guaranteed completely secure. We will act promptly if we become aware of a data incident and will handle any incident in line with our legal obligations.

10. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete data.
Right to erasure - to ask us to delete your data in certain circumstances.
Right to restrict processing - to ask us to limit how we use your data in certain cases.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent - where we rely on consent, you may withdraw it at any time.

These rights are not absolute and may be subject to legal exceptions. If you make a request, we may need to verify your identity before responding. We will respond within the time limits required by law.

11. Children’s Data

Our services are not directed to children, and we do not knowingly collect personal data from children unless it is provided by an adult in the course of arranging or managing services. Where child-related information is incidentally recorded, we will handle it carefully and only where necessary.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. Any updated version will apply from the date it is published. We encourage customers in the area to review this policy periodically so they remain informed about how their personal data is handled.

13. Complaints

If you have concerns about how we process your personal data, you may raise them with us so that we can address the issue. You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed.

Summary of our approach: We only collect personal data needed to provide services, rely on valid lawful bases, keep data securely, share it only with trusted processors or where required by law, retain it only as long as necessary, and respect user rights under UK GDPR.