Privacy Policy - Tree Surgeons Hendon

This Privacy Policy explains how personal data is collected, used, stored, and protected by Tree Surgeons Hendon. It applies to all Tree Surgeons Hendon customers in area, including individuals, households, landlords, property managers, and business clients who request tree surgery, arboricultural, or related services. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, making an enquiry, or providing information to us, you acknowledge that your personal data may be processed as described in this policy. We take privacy seriously and aim to ensure that all information is used only for legitimate business purposes and in a manner that respects your rights.

1. Information We Collect

We may collect and process several types of personal data depending on how you interact with us. The information we collect is limited to what is relevant and necessary for providing our services.

Information you provide directly

Identity information such as your name, title, and, where relevant, company name.
Contact details including address, email address, and telephone number.
Service details relating to the work you request, such as tree location, access details, job instructions, and any preferences.
Billing and payment information required for invoicing, payment processing, and record keeping.
Correspondence such as messages, complaints, feedback, and notes from calls or meetings.
Property and access information needed to carry out a site visit or perform tree surgery safely.

Information collected automatically

When you contact us by phone, email, or other communication methods, we may create internal records of the interaction. We may also collect technical information from our systems, such as dates, times, and service history, to help us manage enquiries and maintain accurate records.

We do not intentionally collect more information than we need. If special circumstances require additional information, such as health and safety details or site-specific risk information, we will only use it for the relevant purpose.

2. How We Use Your Personal Data

We use personal data to provide and manage our services effectively. The main purposes include:

Responding to enquiries and providing quotations.
Scheduling visits, carrying out tree surgery, and managing service delivery.
Maintaining safety, quality, and operational records.
Preparing invoices, processing payments, and handling financial administration.
Communicating updates, appointment details, and service-related information.
Dealing with complaints, disputes, and customer support matters.
Meeting legal, regulatory, insurance, and tax obligations.
Improving our internal processes and keeping accurate business records.

We may also use personal data to protect our legitimate business interests, including fraud prevention, risk management, and ensuring that services are carried out in a professional and safe manner.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing personal data. Depending on the context, we rely on one or more of the following:

Contract: where processing is necessary to provide a service requested by you or to take steps before entering into a contract.
Legal obligation: where we need to retain records or share information to comply with accounting, tax, insurance, health and safety, or other legal requirements.
Legitimate interests: where processing is necessary for our business operations, customer service, service improvement, and record management, provided your rights do not override those interests.
Consent: in limited cases where we ask for your permission, for example for certain communications or optional uses of information. You may withdraw consent at any time where consent is the lawful basis.

We assess each processing activity to ensure that the chosen lawful basis is appropriate and proportionate.

4. Sharing Your Information

We may share personal data with trusted third parties who help us run our business and deliver services. These parties act as processors or independent controllers depending on the context. We only share what is necessary and only for legitimate purposes.

Examples of processors and recipients

IT and cloud service providers used to store and manage business records securely.
Accounting and bookkeeping services that support invoicing, payroll, and tax compliance.
Payment processors that handle card or online payments where applicable.
Insurance providers and claims handlers where required for risk management or claims processing.
Professional advisers such as solicitors, auditors, or consultants where necessary for legal or business advice.
Public authorities or regulators where we are required to provide information by law.

All processors are expected to protect data properly, use it only on our instructions, and comply with data protection law. We do not sell your personal data.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, insurance, and reporting requirements. Retention periods depend on the type of information and the reason for holding it.

Customer and service records are generally kept for the duration of the business relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law and standard accounting practice.
Safety, site, and work records may be kept longer where needed for insurance, dispute resolution, or legal compliance.
Enquiry information that does not lead to a booking may be retained for a limited period to manage follow-up and administrative purposes.

When data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices. We regularly review stored information to ensure it is not kept longer than necessary.

6. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and careful handling of documents and digital records.

Although no system can be guaranteed completely secure, we take reasonable steps to protect the information entrusted to us. Where we use third-party processors, we require them to apply suitable safeguards as well.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights apply subject to certain legal conditions and exceptions.

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you can request deletion of your data in certain circumstances.
Right to restrict processing: you can ask us to limit how your data is used in some situations.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you can request certain data in a structured, commonly used format where applicable.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will consider your request in line with data protection law and respond within the required timeframes. We may need to verify your identity before processing the request.

You also have the right to raise concerns with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

8. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. Any such transfer will be carried out with due regard to the security and privacy of your information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or the services we provide. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically to stay informed about how their personal data is handled.

10. Scope of This Policy

This Privacy Policy applies to all Tree Surgeons Hendon customers in area and to anyone who interacts with us in connection with our services. It is intended to provide a clear explanation of how we process personal data and the standards we follow when handling information. We are committed to fairness, transparency, accountability, and privacy by design in all our data processing activities.

Tree Surgeons Hendon values the trust of its customers and aims to protect personal information at every stage of the service relationship. By maintaining secure records and limiting data use to necessary purposes only, we seek to uphold the highest practical standards of data protection.