Privacy Policy - Tree Surgeons Staines

Tree Surgeons Staines is committed to protecting the privacy and personal data of all customers, prospective customers, and website or enquiry users in the Staines area. This Privacy Policy explains how personal data is collected, used, stored, shared, and protected in connection with our tree surgery services. It applies to all Tree Surgeons Staines customers in the area, including anyone who requests a quotation, makes an enquiry, books a service, or receives ongoing arboricultural work from us.

We are committed to processing personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our services or providing your information to us, you acknowledge the practices described in this Privacy Policy.

1. Who this Policy Applies To

This Privacy Policy applies to all Tree Surgeons Staines customers in the area, including residential clients, commercial clients, landlords, property managers, and other individuals who interact with us in relation to tree surgery, tree maintenance, surveys, stump removal, pruning, felling, hedge work, or related services. It also applies where we collect personal data from third parties connected to a service request, such as tenants, site representatives, or contractors.

2. Personal Data We Collect

We may collect and process different categories of personal data depending on the nature of your enquiry or service request. The information we collect may include:

Identity information, such as your name or business name.
Contact information, such as address details and other communication information necessary to manage your request.
Service information, including details about the work requested, site access, tree condition, risk concerns, and instructions you provide.
Payment and billing information, where relevant to invoicing and payment processing.
Communication records, such as emails, notes, messages, and call summaries.
Technical information, if you interact with online forms or digital systems, such as device and usage data.
Site-related information, including photographs, measurements, and other records needed to assess or carry out tree surgery work.

We do not intentionally collect special category data unless it is strictly necessary and you choose to provide it. If such information is ever relevant, we will process it only where a lawful basis applies and with appropriate safeguards.

3. How We Use Your Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To assess work requirements, site conditions, and access needs.
To deliver tree surgery and related services safely and effectively.
To manage bookings, scheduling, invoicing, and payment administration.
To maintain records of work completed, safety checks, and customer instructions.
To comply with legal, tax, insurance, health and safety, and regulatory obligations.
To handle complaints, disputes, and service follow-up.
To improve our operations, customer service, and service quality.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose and the law allows this.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Depending on the circumstances, Tree Surgeons Staines relies on one or more of the following lawful bases:

Contract — to provide quotations, arrange services, perform tree surgery work, manage payments, and fulfil our obligations to you.
Legitimate interests — to operate and improve our business, communicate with customers, keep accurate records, protect against fraud, and maintain safe working practices, provided these interests are not overridden by your rights.
Legal obligation — to retain records and process data as required for tax, accounting, insurance, health and safety, or other legal requirements.
Consent — where we rely on your clear permission for a specific purpose, such as certain marketing communications or optional data collection. You may withdraw consent at any time where consent is the basis for processing.

When we process special category data, if ever necessary, we will do so only in accordance with an applicable condition under data protection law and with suitable protection measures.

5. Sharing and Processors

We may share personal data with trusted third parties where necessary to provide our services or meet legal requirements. These third parties act as processors or independent controllers depending on the context. Typical recipients may include:

Payment and accounting providers, who help process invoices, payments, and bookkeeping tasks.
IT and system providers, who support secure storage, email, file management, or customer record systems.
Subcontractors and specialist contractors, where support is needed to complete specific parts of a project safely and effectively.
Insurance providers, legal advisers, and auditors, where disclosure is necessary to manage claims, advice, or compliance.
Public authorities and regulators, where disclosure is required by law or necessary for a lawful request.

We require our processors to handle personal data securely, only for specified purposes, and in accordance with data protection law. We do not sell personal data.

6. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including for service delivery, record-keeping, legal compliance, and the establishment or defence of legal claims. Retention periods may vary depending on the type of record and the relevant legal or business requirement.

As a general approach:

Quotation and enquiry records are retained for a period that allows us to manage follow-up and service history.
Customer service and project records are kept for a period appropriate to the nature of the work completed.
Financial and tax records are retained for the period required by law.
Technical logs and security-related records are retained only as long as needed for operational purposes.

When personal data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful management of files and records.

Although no system can be guaranteed to be completely secure, we work to minimise risk and regularly review our handling procedures to help safeguard the information we hold.

8. International Transfers

Where any processor or service provider is located outside the UK, we will only transfer personal data where appropriate safeguards are in place and the transfer is lawful. Any such transfer will be assessed to ensure that your data remains protected to a standard consistent with UK data protection requirements.

9. Your Rights

Under data protection law, you have several rights regarding your personal data. These rights may be subject to conditions and exemptions depending on the legal basis for processing and the circumstances of the request. Your rights may include:

Right of access — to request a copy of the personal data we hold about you.
Right to rectification — to request correction of inaccurate or incomplete data.
Right to erasure — to request deletion of your data in certain circumstances.
Right to restriction — to request limited use of your data in certain situations.
Right to object — to object to processing based on legitimate interests or to direct marketing.
Right to data portability — to request transfer of certain data in a structured format where applicable.
Right to withdraw consent — where processing is based on consent.

If you wish to exercise any of these rights, we will consider your request in accordance with data protection law and respond within the required time period where possible.

10. Marketing Communications

We may send service-related communications where necessary for the delivery of our work. We will only send marketing communications where we are permitted to do so under the law. If you no longer wish to receive optional marketing messages, you may object or withdraw consent where applicable.

Tree Surgeons Staines respects your choices and will handle requests to stop marketing carefully and promptly.

11. Cookies and Digital Data

If you interact with our online systems, we may collect limited technical information to help the service function properly and to improve performance. This may include basic usage data or device information. Where cookies or similar technologies are used, they will be handled in line with applicable law and any required consent standards.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service arrangements. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this Privacy Policy periodically to stay informed about how personal data is handled.

13. Summary of Our Commitment

Tree Surgeons Staines is committed to processing personal data lawfully, securely, and transparently. We collect only the information needed to deliver our services, rely on appropriate lawful bases, retain data for only as long as necessary, and use trusted processors under proper safeguards. We also recognise and respect your rights under data protection law.

This Privacy Policy applies to all Tree Surgeons Staines customers in the area and is intended to provide clear, fair, and accessible information about how we use personal data.