Privacy Policy - Tree Surgeons Highgate

This Privacy Policy explains how Tree Surgeons Highgate collects, uses, stores, and protects personal data when providing tree surgery and related services. It applies to all Tree Surgeons Highgate customers in the area, including individuals, property owners, tenants, landlords, and business clients who request quotations, book services, or otherwise engage with us.

1. Introduction

We are committed to handling personal data lawfully, fairly, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have in relation to your personal data.

By using our services or contacting us about tree surgery, you acknowledge that your information may be processed in accordance with this policy. We only collect data that is relevant and necessary for the services we provide and for the purposes set out below.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity data such as your name and, where relevant, the name of your business or organisation.
Contact data including postal address, email address, and telephone number.
Service details such as the location of the property, type of work requested, site access notes, and job specifications.
Payment and billing information where needed to issue invoices, record payments, or handle accounting.
Communication records such as emails, messages, call notes, quotes, complaints, and service updates.
Technical data including basic website or device usage data if you interact with our online content, where applicable.
Images or site photographs taken for quotations, planning, safety assessments, or evidence of completed work.

We do not intentionally collect special category data unless it is necessary and you have provided it yourself for a specific reason. If such information is ever shared with us, we will process it only where a lawful basis applies and where appropriate safeguards are in place.

3. How We Use Your Data

We use personal data for the following purposes:

To provide quotations and assess service requirements.
To schedule, carry out, and manage tree surgery work.
To communicate with you about bookings, changes, and service updates.
To produce invoices, process payments, and keep financial records.
To manage complaints, queries, and aftercare.
To comply with legal, tax, insurance, and health and safety obligations.
To maintain internal records and improve service quality.

We will only use your personal data for the purpose for which it was collected unless we reasonably believe we need to use it for another compatible reason. If we need to use your data for an unrelated purpose, we will explain the lawful basis for doing so.

4. Lawful Basis for Processing

We process personal data only where we have a valid lawful basis under UK GDPR. Depending on the circumstances, we rely on one or more of the following:

Contract

We process your data where it is necessary to enter into or perform a contract with you. This includes providing quotes, confirming bookings, carrying out tree surgery services, and issuing invoices.

Legal Obligation

We may process data where required to comply with legal duties, such as accounting records, tax obligations, insurance requirements, or health and safety responsibilities.

Legitimate Interests

We may process information where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include maintaining business records, responding to enquiries, improving operations, or protecting our business against fraud or misuse.

Consent

Where required, we may ask for your consent before processing certain types of information. If we rely on consent, you may withdraw it at any time. This will not affect the lawfulness of any processing carried out before withdrawal.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods depend on the type of data and the reason it was collected.

Quotation and enquiry records are typically retained for a reasonable period to support follow-up communications and service history.
Customer and job records are retained for the duration of the service relationship and for a period afterwards to manage disputes, warranties, and evidence of work completed.
Financial and tax records are kept for the period required by applicable law.
Communication records may be retained where needed for business administration, complaint handling, or legal protection.

When data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner. We review retention practices regularly to ensure we do not keep personal data for longer than necessary.

6. Processors and Third Parties

We may share personal data with trusted third parties who help us run our business. These organisations act as data processors or independent controllers depending on the service provided. They are only permitted to process your data for specified purposes and must protect it appropriately.

Examples of processors or third parties may include:

IT and cloud service providers that store or back up business records.
Accounting and invoicing providers that support payment processing and financial administration.
Communication service providers that help us manage emails, telephone systems, or messaging tools.
Insurance, legal, or regulatory advisers where disclosure is necessary for advice or compliance.
Subcontractors or specialist service partners where needed to complete work safely and effectively.

We require processors to implement suitable technical and organisational measures to protect personal data. We do not sell personal information. Where data is transferred outside the UK, we will ensure appropriate safeguards are in place in accordance with data protection law.

7. Data Security

We take the security of your personal data seriously and use reasonable measures to protect it from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access restrictions, secure storage, password protection, and careful handling of paper and electronic records.

While we do our best to protect your information, no method of transmission or storage is completely secure. If a data breach occurs and your rights or freedoms are likely to be affected, we will respond in line with legal requirements.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These include:

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete information.
Right to erasure – you may request deletion of your data in certain circumstances.
Right to restriction – you may ask us to limit how your data is used in some cases.
Right to object – you may object to processing based on legitimate interests or direct marketing where applicable.
Right to data portability – you may request certain information in a commonly used electronic format.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

These rights are not absolute and may be subject to legal exceptions. We will respond to requests in accordance with applicable law and within the required timeframes.

9. How We Protect Children’s Data

Our services are generally directed to adults and property-related customers. We do not knowingly collect personal data from children except where it is incidental and necessary for service delivery, such as property access arrangements. If we become aware that we have collected data from a child without appropriate justification, we will take steps to delete it where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or how we process personal data. Any changes will take effect when published in the revised version. We encourage customers to review this policy periodically so they remain informed about how their information is handled.

11. Final Statement

This Privacy Policy applies to all Tree Surgeons Highgate customers in the area and is intended to provide clear, transparent information about our data practices. We are committed to respecting your privacy and using your personal data responsibly, lawfully, and securely. If you continue to use our services, you do so with the understanding that your information will be processed in line with this policy and applicable data protection law.