Privacy Policy - Tree Surgeon Walthamforest

This Privacy Policy explains how Tree Surgeon Walthamforest collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeon Walthamforest customers in the area, including prospective customers, current customers, and individuals who enquire about our services. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tree Surgeon Walthamforest provides tree surgery and related arboricultural services to residential and commercial customers in the local area. For the purposes of data protection law, we act as a data controller when we decide why and how personal data is processed. This means we are responsible for ensuring that personal information is used only for legitimate and lawful purposes.

2. Personal Data We Collect

We may collect and process different types of personal data depending on how you interact with us. The information we collect may include:

Identity information such as your name and title.
Contact information such as address, phone number, and email address.
Service information including details of the work requested, property access notes, and job specifications.
Payment and billing information where relevant for invoicing and payment processing.
Communication records including emails, messages, quotes, complaints, and customer service notes.
Site and property details where necessary for carrying out tree surgery safely and effectively.
Technical information such as basic website or device data if you contact us through digital channels.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it yourself, or unless another lawful condition applies. If such information is ever required, we will handle it with additional care and safeguards.

3. How We Use Your Personal Data

We use personal data only for specified and legitimate purposes. These may include:

Responding to enquiries and providing quotations.
Arranging site visits, assessments, and appointments.
Delivering tree surgery, maintenance, and related services.
Managing customer accounts, billing, and payment administration.
Keeping records of work completed, customer preferences, and service history.
Handling complaints, disputes, or insurance-related matters.
Complying with legal, regulatory, and safety obligations.
Improving our services, processes, and customer communications.

We will never use your personal data for purposes that are incompatible with the reasons it was collected unless we have a valid lawful basis to do so.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each type of processing activity. Depending on the situation, Tree Surgeon Walthamforest may rely on the following lawful bases:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes preparing quotations, scheduling work, delivering services, and invoicing.

Legal Obligation

We may process personal data where required to comply with legal obligations, including tax rules, health and safety requirements, insurance obligations, and record-keeping duties.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include maintaining business records, preventing fraud, improving customer service, and managing service quality. When relying on legitimate interests, we consider the impact on your privacy and apply safeguards as needed.

Consent

In some circumstances, we may rely on your consent, for example for certain optional communications or marketing activities. Where consent is used, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We may share personal data with trusted third parties who assist us in running our business. These parties act as processors when they process data on our behalf and under our instructions. Processors may include:

Payment service providers.
Accounting and invoicing software providers.
IT and cloud storage providers.
Customer management and communication systems.
Professional advisers such as insurers, accountants, or legal advisers where necessary.

We require processors to protect personal data and to use it only for the purposes we specify. We do not sell personal data. We may also disclose information where required by law, to prevent fraud, to protect our rights, or to respond to lawful requests from public authorities.

6. International Transfers

If personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms designed to protect your information to the required standard.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods vary depending on the nature of the data and the reason it is held.

In general:

Quotation and enquiry records may be kept for a limited period after the enquiry ends.
Customer service and job records may be retained for the duration of the business relationship and for a reasonable period afterwards.
Invoice and payment records are usually retained for statutory accounting and tax periods.
Health, safety, and compliance records may be retained for longer where required by law or insurance obligations.

When personal data is no longer needed, we will securely delete, anonymise, or destroy it in accordance with our retention practices.

8. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful selection of processors. While no system can be guaranteed completely secure, we work to maintain a level of protection appropriate to the risks involved.

9. Your Rights

Under data protection law, you have a number of rights regarding your personal data. These include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to request limited use of your data in specific situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached. We encourage you to raise concerns directly so we can attempt to resolve them promptly and fairly.

10. Children’s Data

Our services are intended for adults and property-related customers. We do not knowingly collect personal data from children unless it is incidental and necessary for a lawful business purpose, such as communication involving a property owner or authorised representative. If we become aware that we have collected data unlawfully, we will take steps to delete it where appropriate.

11. Automated Decision-Making

We do not use personal data for automated decision-making that produces legal or similarly significant effects. If this position changes in the future, we will update this policy and provide additional information where required.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updates will take effect when published. We encourage you to review this policy periodically so you remain informed about how your data is used.

13. Summary of Our Commitment

Tree Surgeon Walthamforest respects your privacy and is committed to responsible data handling. We collect only the information we need, use it for clear and lawful purposes, keep it only as long as necessary, and work with processors who provide appropriate data protection safeguards. We also recognise and support your rights under UK data protection law.

This Privacy Policy applies to all Tree Surgeon Walthamforest customers in the area and is designed to provide transparent information about our data practices.