Privacy Policy - Tree Surgeons Anerley

This Privacy Policy explains how Tree Surgeons Anerley collects, uses, stores, and protects personal data in connection with our services. It applies to all Tree Surgeons Anerley customers in the area, including individuals, households, landlords, tenants, and business clients who enquire about, receive, or use our tree surgery services.

We are committed to handling personal information fairly, lawfully, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is written to help you understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over it.

1. Personal Data We Collect

We only collect data that is necessary to provide our services, manage customer relationships, meet legal obligations, and improve our operations. The types of personal data we may collect include:

Identity details: name, title, and, where relevant, business name.
Contact details: address, email address, and telephone number.
Service information: details about the work requested, site access notes, property information, and service preferences.
Payment and billing information: invoice details, payment status, and transaction records.
Communication records: emails, messages, call notes, and correspondence related to quotes, bookings, complaints, or follow-up.
Technical information: limited information such as IP address or device data if you interact with our digital systems or online forms.
Photographs and site images: images of trees, properties, or work areas where needed for quotations, planning, insurance, or proof of completed work.

We do not intentionally collect special category data unless it is strictly necessary and permitted by law. If such information is ever provided to us, we will handle it carefully and only for a lawful purpose.

2. How We Use Your Data

We use personal data to operate our business effectively and to deliver tree surgery services safely and professionally. Typical uses include:

responding to enquiries and providing quotations;
arranging site visits, appointments, and service delivery;
carrying out tree surgery, pruning, removal, or maintenance work;
issuing invoices and processing payments;
keeping records of work completed;
handling complaints, disputes, and warranty or aftercare matters;
meeting insurance, tax, accounting, and legal obligations;
improving our services, training, and operational efficiency;
protecting our business, staff, clients, and property from fraud or misuse.

We will only use your data for the purpose it was collected unless we reasonably believe another lawful purpose applies.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Tree Surgeons Anerley may rely on one or more of the following bases:

Contract

We process data where it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes providing quotes, booking work, carrying out the service, and managing invoices.

Legal Obligation

We may process data to comply with legal requirements, such as tax, accounting, insurance, health and safety, or record-keeping duties.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights do not override those interests. This may include customer administration, service improvement, fraud prevention, and maintaining business records. We always consider whether our use is fair and proportionate.

Consent

In some limited cases, we may rely on your consent, such as for optional marketing communications. Where consent is used, you can withdraw it at any time.

Vital Interests

In rare circumstances, we may process data to protect someone’s vital interests, for example in an emergency or safety-related situation.

4. Data Sharing and Processors

We do not sell personal data. However, we may share information with trusted third parties when necessary to deliver our services or meet legal obligations. These third parties act as processors or, in some cases, separate controllers.

Processors may include:

IT and cloud service providers: for secure storage, email, and business systems;
accounting and bookkeeping providers: for invoicing, tax, and financial administration;
payment service providers: for card or online payment processing;
insurance providers and brokers: where claims, risk management, or proof of work is relevant;
waste disposal or subcontracted service providers: where they are needed to complete a job;
professional advisers: such as solicitors, accountants, or consultants;
regulators, law enforcement, or public authorities: where disclosure is required by law.

Where we use processors, we ensure they are subject to appropriate contractual safeguards and only process data on our instructions. This means your information is not used for unrelated purposes.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose it was collected, including legal, accounting, or insurance requirements. Retention periods may vary depending on the nature of the information and the service provided.

Quotation and enquiry records: usually kept for a reasonable period to manage follow-up and business administration.
Customer and service records: kept for the duration of the working relationship and afterward where needed for warranty, dispute resolution, or legal compliance.
Financial and tax records: generally retained for the period required by law.
Correspondence and complaint records: kept long enough to evidence decisions and resolve issues.

When data is no longer needed, we securely delete, destroy, or anonymise it. Retention is reviewed regularly to ensure we are not keeping information longer than necessary.

6. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and careful selection of processors. While no system can be completely risk-free, we strive to keep your data safe and handle it responsibly.

7. International Transfers

If any of our service providers store or process data outside the UK, we will ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws. This may include approved transfer mechanisms or adequacy decisions where required.

8. Your Rights

You have important rights in relation to your personal data. Subject to legal conditions and exemptions, these may include:

Right of access: to request a copy of the personal data we hold about you;
Right to rectification: to ask us to correct inaccurate or incomplete data;
Right to erasure: to request deletion of your data in certain circumstances;
Right to restriction: to ask us to limit how we use your data;
Right to object: to object to processing based on legitimate interests or direct marketing;
Right to data portability: to receive certain data in a usable format, where applicable;
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time;
Right to complain: to raise concerns with the UK Information Commissioner’s Office if you believe your rights have been breached.

We may need to verify your identity before responding to a rights request. We aim to respond within the time limits set by law.

9. Marketing Communications

We will only send marketing messages where permitted by law. If consent is required, we will ask for it clearly. You can opt out of marketing communications at any time. Transactional or service-related messages, such as booking updates or invoice information, may still be sent when necessary to provide the service.

10. Children’s Data

Our services are not directed at children, and we do not knowingly collect data from children unless it is necessary in a limited context, such as property access or communication arrangements made by a parent, guardian, or responsible adult. If we become aware that we have collected data inappropriately, we will take steps to delete it where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or service arrangements. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their information is handled.

12. Summary of Our Commitment

Tree Surgeons Anerley respects your privacy and is committed to protecting your personal data. We collect only what we need, use it for clear and lawful purposes, retain it for appropriate periods, and share it only with trusted processors or when required by law. We also recognise your rights and will work to respond to your requests fairly and promptly.

In short: your information is handled with care, used responsibly, and protected according to GDPR standards.