Privacy Policy - Tree Surgeons Newcross

This Privacy Policy explains how Tree Surgeons Newcross collects, uses, stores, and protects personal data relating to all customers in the Newcross area. It applies to all Tree Surgeons Newcross customers in area, including individuals who request quotes, make enquiries, book services, receive tree surgery work, or otherwise interact with us. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We take privacy seriously and aim to only collect the information we need to provide our services properly, manage our business, meet legal obligations, and improve the experience of our customers. This policy should be read carefully to understand how your information is used.

1. Information We Collect

We may collect and process different types of personal data depending on the nature of your enquiry or service request. The information we collect may include:

Identity information such as your name and title.
Contact details such as your address, phone number, and email address.
Property information such as access details, service location, and information relevant to the tree work requested.
Enquiry and correspondence details such as messages, call notes, and quotation requests.
Service records such as job history, work completed, invoices, and payment records.
Technical information such as basic website or device data if you contact us through digital channels.
Health and safety information where required for safe service delivery, such as access restrictions, site hazards, or other relevant conditions.

We do not intentionally collect special category data unless it is necessary, relevant, and permitted by law. If such information is provided to us, we will handle it with extra care and only process it where there is a valid lawful basis.

2. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange site visits, assessments, and tree surgery services.
To carry out the work requested and manage customer relationships.
To process payments, issue invoices, and keep accounting records.
To communicate with you about appointments, service updates, or follow-up matters.
To maintain records of completed work, complaints, and service history.
To meet legal, tax, insurance, and regulatory obligations.
To protect our business interests, including the prevention of fraud or misuse.
To improve service quality, internal administration, and operational efficiency.

We only use your information for the purposes for which it was collected, unless we reasonably determine that another compatible purpose applies and we are permitted by law to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the situation, Tree Surgeons Newcross may rely on one or more of the following lawful bases:

Contract

We process your personal data where it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes providing quotes, arranging services, completing tree surgery work, and managing payments.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your interests and rights do not override those interests. This can include responding to enquiries, keeping records, improving our services, managing risk, and maintaining secure and efficient operations. Where we rely on legitimate interests, we assess the impact on your privacy.

Legal Obligation

We may process and retain certain information to comply with legal obligations, such as accounting requirements, tax rules, health and safety duties, and insurance-related record keeping.

Consent

In limited situations, we may rely on your consent, for example where you voluntarily provide optional information or agree to specific forms of communication. Where consent is used, you have the right to withdraw it at any time.

4. Sharing Your Information and Processors

We may share personal data with trusted third parties where necessary for business operations, service delivery, or legal compliance. These third parties act as processors or independent controllers depending on the context.

Typical processors and recipients may include:

IT and cloud service providers that host data, email, or secure storage systems.
Accounting and bookkeeping providers that help maintain financial records.
Payment service providers that process payments securely.
Scheduling or administration tools used for appointment management and record keeping.
Professional advisers such as insurers, lawyers, or consultants where needed.
Public authorities where disclosure is required by law or to protect legal rights.

We only work with processors that provide appropriate security measures and act under written agreements where required. These parties are only permitted to use your personal data according to our instructions and for the purposes we specify.

We do not sell personal data. We also do not share information for unrelated marketing purposes without a lawful basis.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, insurance, or reporting requirements. The retention period will depend on the type of information and why it is held.

In general:

Enquiry records may be kept for a reasonable period to manage follow-up communications and service history.
Customer and job records may be retained for the duration of the working relationship and afterward where needed for business continuity, dispute handling, or warranty-related issues.
Financial and tax records are retained in line with applicable legal requirements.
Health and safety or risk-related records may be retained for as long as necessary to demonstrate compliance and support incident management.

When information is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention procedures. We review retention practices periodically to ensure data is not kept longer than necessary.

6. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, misuse, destruction, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and data minimisation practices.

Although we take reasonable steps to safeguard data, no system can be guaranteed to be completely secure. If a personal data breach occurs and it presents a risk to your rights and freedoms, we will handle it in accordance with our legal obligations.

7. Your Rights

As a data subject under UK GDPR, you have several rights in relation to your personal data. These include:

The right of access to request a copy of the personal data we hold about you.
The right to rectification to ask us to correct inaccurate or incomplete information.
The right to erasure in certain circumstances, also known as the right to be forgotten.
The right to restrict processing where you want us to limit how we use your data.
The right to object to processing based on legitimate interests or direct marketing.
The right to data portability in certain cases where processing is based on consent or contract and carried out by automated means.
The right to withdraw consent where we rely on your consent for processing.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully or if your concerns are not resolved. We encourage customers to raise concerns directly first so that we can address them promptly and fairly.

8. Cookies and Online Data

If we use a website or digital form to receive enquiries, basic technical information may be collected automatically through cookies or similar technologies. This may include device details, browser type, and usage information. Where required, we will provide appropriate notice and obtain consent for non-essential cookies.

Any online data collected will be used only for legitimate operational purposes, analytics where permitted, and to improve the functionality and security of our digital services.

9. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is necessary in connection with a lawful service request and appropriate safeguards are in place. If we learn that we have collected data from a child without a proper basis, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

11. Contacting Us About Privacy

If you have questions about this policy, wish to exercise your rights, or want to raise a concern about how your data is used, you should contact us through the usual business communication channels provided at the time of service engagement. We will respond in accordance with applicable data protection law.

Summary statement: Tree Surgeons Newcross processes customer personal data lawfully, securely, and transparently, using it only for service delivery, administration, compliance, and legitimate business needs.

Last reviewed: for use by Tree Surgeons Newcross customers in the Newcross area.