Privacy Policy - Tree Surgeons Hackbridge

This Privacy Policy explains how Tree Surgeons Hackbridge collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Hackbridge customers in the area, including current, former, and prospective customers who request services, make enquiries, or otherwise interact with us. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tree Surgeons Hackbridge provides tree care and related services for domestic and commercial customers in the local area. In the course of carrying out our services, we may need to collect and use personal data about customers, property owners, site managers, contractors, and other individuals connected with our work.

Privacy is important to us, and we only collect data that is necessary for legitimate business purposes, legal obligations, and service delivery.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity information: name, title, and any business or organisation name you provide.
Contact information: address, email address, telephone number, and other communication details.
Service and property information: details about the property, trees, access arrangements, service history, and instructions related to the work.
Financial information: payment records, invoice details, and transaction history.
Communication records: messages, quotes, complaints, feedback, and other correspondence.
Technical information: limited data such as IP address, browser type, or device information if you contact us through digital channels.
Site safety and operational information: risk assessments, photographs relevant to the job, and records needed for health and safety compliance.

We generally do not seek to collect special category data. However, if you voluntarily provide information that reveals health or access needs, we will only use it when necessary to support service delivery or safety.

3. How We Collect Personal Data

We may collect personal data directly from you when you:

request a quote or booking;
communicate with us by phone, email, or other means;
enter into a service agreement;
make a payment;
provide feedback or make a complaint;
interact with us during the provision of services.

We may also receive data from third parties where necessary, such as property owners, managing agents, insurers, local authorities, utility providers, or subcontractors engaged in the work. Where appropriate, we may use publicly available sources to verify address or property details.

4. Lawful Basis for Processing

We only process personal data where we have a valid lawful basis under the UK GDPR. The lawful bases we rely on may include the following:

Contract

We process data to provide services requested by you, including preparing quotes, booking work, carrying out the service, issuing invoices, and managing customer accounts. This processing is necessary for entering into or performing a contract.

Legal Obligation

We may process personal data to comply with legal requirements, including tax, accounting, health and safety, insurance, and record-keeping obligations.

Legitimate Interests

We may use personal data where it is necessary for our legitimate business interests and where your rights do not override those interests. This may include responding to enquiries, improving services, preventing fraud, managing risk, maintaining service quality, and keeping internal records. We always consider whether the processing is necessary and proportionate.

Consent

In some cases, we may rely on your consent, for example where it is appropriate to use certain optional information. Where consent is used, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. How We Use Your Data

We use personal data for the following purposes:

to respond to enquiries and provide quotes;
to arrange and deliver tree surgery and related services;
to communicate with you before, during, and after a job;
to process payments and manage invoices;
to maintain customer and service records;
to comply with legal and regulatory obligations;
to manage safety, access, and operational requirements;
to handle complaints, disputes, and insurance matters;
to improve our services and customer experience.

We will only use your personal data for the purposes for which it was collected, unless we reasonably determine that we need to use it for a compatible purpose or another lawful basis applies.

6. Sharing Personal Data and Processors

We may share personal data with trusted third parties where necessary for business operations or legal compliance. These third parties act as processors or independent controllers depending on the circumstances.

Examples of processors or service providers may include:

accounting and bookkeeping providers who assist with financial administration;
IT and cloud service providers who support secure data storage and communications;
payment service providers who handle transactions;
administrative or scheduling systems used to manage customer bookings;
subcontractors who help deliver specific parts of a service under our instruction;
insurance providers, legal advisers, or auditors where required for claims, compliance, or professional advice.

We require processors to handle personal data securely and only in accordance with our instructions. We do not sell your personal data.

We may also disclose data where required by law, court order, government request, or to protect the rights, property, or safety of Tree Surgeons Hackbridge, our customers, or others.

7. International Transfers

If a processor stores or accesses data outside the United Kingdom, we will take appropriate safeguards to protect your personal data. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent lawful transfer mechanisms.

8. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy. The length of time may vary depending on the type of information and our legal or operational obligations.

Customer and service records: retained for the period needed to manage the relationship and handle follow-up queries.
Financial and tax records: retained for the period required by law and accounting rules.
Health and safety records: retained for a period appropriate to the nature of the work and legal compliance.
Communications and enquiries: retained only as long as necessary to respond and maintain records of the interaction.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

9. Security of Your Data

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality expectations, and careful selection of service providers.

While no system can be completely secure, we take reasonable steps to protect your information and regularly review our processes to improve data security.

10. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These may include:

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: in certain cases, you can ask us to delete your data.
Right to restriction: you can ask us to limit how we use your data in certain circumstances.
Right to object: you can object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability: in some cases, you can request that we provide your data in a structured, commonly used format.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in line with legal requirements. We may need to verify your identity before acting on your request.

11. Automated Decision-Making

We do not currently use automated decision-making or profiling in a way that produces legal or similarly significant effects. If this changes, we will update this Privacy Policy and provide appropriate information about how such processing works.

12. Complaints

If you have concerns about how we use your personal data, we encourage you to raise the matter with us first so that we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office if you believe your data protection rights have been infringed.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. The latest version will apply to your use of our services from the date it is published or otherwise communicated.

14. Summary of Our Commitment

Tree Surgeons Hackbridge is committed to protecting personal data and using it responsibly. We collect only what we need, use it for clear and lawful purposes, retain it only as long as necessary, and share it only with trusted processors or where required by law. This policy applies to all Tree Surgeons Hackbridge customers in the area and is intended to ensure transparency, trust, and compliance with data protection law.

By using our services or making an enquiry, you acknowledge that you have read and understood this Privacy Policy.