Privacy Policy - Tree Surgeons Neasden

This Privacy Policy explains how Tree Surgeons Neasden collects, uses, stores, shares, and protects personal data in connection with tree surgery, arboricultural, and related services. It applies to all Tree Surgeons Neasden customers in the area, including prospective customers, current customers, and anyone who makes an enquiry, requests a quotation, books a service, or otherwise interacts with us.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only collect the information we need, use it for clear and legitimate purposes, and keep it only for as long as necessary.

1. Who This Policy Covers

This policy applies to individuals who engage with Tree Surgeons Neasden in the course of requesting or receiving arboricultural services. It includes domestic and commercial customers, property owners, tenants, site managers, and representatives who communicate with us on behalf of another person or organisation. It also applies where we receive personal data from third parties acting on your behalf.

Please read this policy carefully so that you understand how your personal data is handled.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity information such as your name and, where relevant, the name of your company or organisation.
Contact information such as your telephone number, email address, and postal address.
Property and service details including information about the site, trees, access needs, work requested, job history, and service preferences.
Communication records including enquiries, messages, notes from phone calls, and correspondence.
Billing and payment information such as invoice details, payment status, and transaction references.
Technical data where relevant, such as basic website usage information, device data, or IP-related logs if you interact with our digital services.
Safety and site information including access arrangements, risk-related notes, and other details needed to complete work safely.

We do not intentionally collect special category data unless it is necessary and lawful to do so. If such information is provided to us incidentally, for example in correspondence, we will handle it with additional care and only where there is a valid reason to do so.

3. How We Collect Your Data

We may collect personal data directly from you when you:

make an enquiry or request a quotation;
book or receive tree surgery services;
communicate with us by phone, email, or other means;
submit feedback or make a complaint;
provide information for invoicing, access, or safety purposes.

We may also receive data from third parties where necessary, such as property managers, neighbours arranging work with permission, insurers, contractors, or public bodies. In some cases, we may collect limited information from publicly available sources when required for legitimate business purposes.

4. Why We Use Your Personal Data

We use personal data only for specific and lawful purposes, including:

to respond to enquiries and provide quotations;
to arrange, deliver, and manage tree surgery services;
to carry out site assessments, scheduling, and work planning;
to process payments and issue invoices;
to maintain accurate business and service records;
to comply with legal and regulatory obligations;
to manage health, safety, and operational risks;
to resolve disputes, complaints, or insurance matters;
to improve our services and customer experience;
to defend or establish legal claims where necessary.

We will not use your personal data for unrelated purposes without ensuring that we have a lawful basis to do so.

5. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing your personal data. The main lawful bases we rely on are:

Contract

We process your data when it is necessary to enter into or perform a contract with you, such as providing a quotation, carrying out tree surgery, managing appointments, or issuing invoices.

Legal Obligation

We may process data to comply with legal duties, including tax, accounting, health and safety, and record-keeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include handling service records, responding to enquiries, preventing fraud, improving operations, and maintaining secure systems.

Consent

In limited situations, we may rely on your consent, for example where we need permission to send certain marketing communications. Where consent is used, you can withdraw it at any time.

We do not rely on consent where another lawful basis is more appropriate.

6. Sharing Your Personal Data

We may share personal data with carefully selected third parties known as processors or service providers, but only where necessary and subject to appropriate safeguards. These may include:

IT and software providers that support our email, record management, scheduling, or data storage systems;
accounting and invoicing providers that help manage billing and tax records;
payment processors that handle card or transfer transactions;
professional advisers such as accountants, insurers, or legal advisers;
subcontractors or operational partners who assist in delivering services under our instruction;
public authorities where disclosure is required by law or to protect rights, safety, or property.

All processors are required to handle personal data securely, use it only for the agreed purpose, and comply with data protection requirements. We do not sell your personal data.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including to meet legal, accounting, and reporting requirements. Retention periods may vary depending on the type of record and the reason it is held.

Quotation and enquiry records may be retained for a reasonable period to manage follow-up and service history.
Customer and invoice records are generally retained for tax and accounting purposes in line with statutory requirements.
Health and safety records may be retained for longer where needed to evidence compliance or manage potential claims.
Communication records may be retained where they are relevant to service delivery, complaints, or legal obligations.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, password protection, and limiting access to data on a need-to-know basis.

While no system can be guaranteed to be completely secure, we take reasonable and proportionate steps to safeguard the information entrusted to us.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These may include:

The right of access to obtain a copy of the personal data we hold about you;
The right to rectification if your data is inaccurate or incomplete;
The right to erasure in certain circumstances, also known as the right to be forgotten;
The right to restrict processing in certain situations;
The right to object to processing based on legitimate interests or direct marketing;
The right to data portability where applicable;
The right to withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to raise any concerns with us first so we can try to resolve them promptly.

10. Automated Decision-Making

Tree Surgeons Neasden does not generally use fully automated decision-making that produces legal or similarly significant effects about you. If this position changes, we will ensure that any such processing is carried out lawfully and with appropriate safeguards.

11. International Transfers

Where personal data is transferred outside the UK, we will ensure that suitable legal safeguards are in place to protect it. This may include recognised adequacy regulations or approved contractual protections.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or the way we process personal data. Any revised version will apply from the date it is published or otherwise communicated. We recommend reviewing this policy periodically.

13. Final Statement

By using Tree Surgeons Neasden services, making an enquiry, or otherwise providing personal data to us, you acknowledge that your information may be processed in accordance with this Privacy Policy. We are committed to protecting your privacy, respecting your rights, and handling your data responsibly and transparently.

This Privacy Policy applies to all Tree Surgeons Neasden customers in area.