Privacy Policy - Tree Surgeons Colindale

This Privacy Policy explains how Tree Surgeons Colindale collects, uses, stores, shares, and protects personal data relating to our customers and prospective customers. It applies to all Tree Surgeons Colindale customers in the area, including anyone who enquires about, receives, or has received our tree surgery and related services. We are committed to handling personal data in accordance with the UK GDPR and the Data Protection Act 2018.

Tree Surgeons Colindale is committed to respecting your privacy and ensuring that your personal information is processed fairly, lawfully, and transparently. This policy is intended to help you understand what data we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your information.

1. Personal Data We Collect

We may collect personal data directly from you when you make an enquiry, request a quotation, book a service, or communicate with us about tree surgery work. We may also receive information from third parties where necessary to provide our services lawfully and effectively.

The categories of data we may collect include:

Identity data: your name, title, and any relevant business or property ownership details.
Contact data: your address, email address, telephone number, and preferred communication method.
Service data: details of the work requested, site access notes, property information, and service history.
Payment data: invoicing details, payment status, and transaction records where applicable.
Technical data: basic website or device information if you interact with our digital systems, such as IP address and browser type.
Correspondence data: records of emails, messages, complaints, feedback, and other communications.
Visual data: photographs or site images used to assess tree work, safety requirements, or completion records.

We only collect data that is relevant and necessary for the provision, management, and improvement of our services. We do not intentionally collect special category data unless you provide it to us for a specific reason and we have a lawful basis to process it.

2. How We Use Your Data

We use personal data to manage our relationship with you and to deliver our services safely and efficiently. This may include:

responding to enquiries and providing quotations;
arranging site visits and service appointments;
carrying out tree surgery, arboricultural assessments, and related work;
processing payments and maintaining records;
communicating about service updates, safety matters, or changes to appointments;
handling complaints, disputes, and follow-up matters;
meeting legal, tax, insurance, and regulatory obligations;
improving our operations, service quality, and customer experience.

We may also use data for internal administration, such as reporting, auditing, and service planning. Where required, we may keep evidence of work completed to demonstrate compliance, safety, or contractual performance.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each use of personal data. The lawful bases we rely on may include the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotations, booking jobs, carrying out tree surgery work, issuing invoices, and managing customer accounts.

Legal Obligation

We may process personal data where required to comply with legal duties, such as record-keeping, tax obligations, health and safety requirements, and insurance-related obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided that your rights and freedoms do not override those interests. Examples include managing our operations, preventing fraud, maintaining service records, and improving our services. Where we rely on legitimate interests, we ensure that the processing is proportionate and necessary.

Consent

In limited cases, we may rely on your consent, for example for certain optional communications or where you provide information that is not required for the service. If we rely on consent, you may withdraw it at any time. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to deliver our services, manage our business, or comply with legal requirements. These third parties may act as data processors or independent controllers depending on the circumstances.

Processors are organisations that process personal data on our behalf and under our instructions. They may include:

IT and cloud storage providers;
accounting and bookkeeping services;
payment processing providers;
customer management or scheduling systems;
professional advisers such as insurers, legal advisers, or auditors;
subcontractors involved in specialist work, where required for service delivery.

Where processors are used, we ensure appropriate contractual safeguards are in place to protect your data and require them to process information only in accordance with our instructions and applicable law.

We may also disclose data to public authorities, courts, regulators, or law enforcement agencies where required by law or where necessary to protect our rights, customers, staff, or the public.

We do not sell personal data. We do not share personal data for unrelated marketing purposes without a lawful basis.

5. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, insurance, or reporting obligations.

Retention periods may vary depending on the type of data and the reason for processing. In general:

customer enquiry records may be kept for a limited period to manage follow-up and service continuity;
job records, quotations, and invoices may be retained for tax, accounting, and contractual purposes;
correspondence and complaint records may be kept to resolve disputes and maintain evidence of service;
safety-related records may be retained longer where required by law or insurance needs.

When data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices. We review retention needs regularly to ensure data is not held longer than necessary.

6. Security of Your Information

We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include restricted access, secure storage, password protection, staff awareness, and supplier due diligence.

Although no system can be guaranteed completely secure, we aim to maintain a level of protection appropriate to the risk associated with the personal data we process.

7. Your Rights

Subject to certain legal conditions and exemptions, you have the following rights under data protection law:

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you can request deletion of your data in certain circumstances.
Right to restriction: you can ask us to limit how we use your data in certain situations.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you can request transfer of certain data to you or another organisation where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise your rights, you may make a request using the appropriate communication channel provided to you at the time of service. We may need to verify your identity before responding. We aim to respond without undue delay and within the time limits required by law.

If you believe that we have not handled your personal data properly, you also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO). We would appreciate the opportunity to address any concerns directly first.

8. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it. This may include using service providers located in approved jurisdictions or relying on standard contractual protections and equivalent security measures.

9. Children’s Data

Our services are directed to adult customers, property owners, managers, and authorised representatives. We do not knowingly collect personal data from children unless it is incidentally included in correspondence or site-related information and there is a lawful reason to process it. If we become aware that we have collected data from a child without an appropriate basis, we will take reasonable steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage you to review this policy periodically so that you remain informed about how your data is handled.

11. Scope of This Policy

This policy applies to all Tree Surgeons Colindale customers in the area, including those who contact us for advice, request quotations, commission work, receive aftercare, or otherwise interact with our services. By engaging with our services, you acknowledge that your personal data may be processed in accordance with this Privacy Policy and applicable law.

Tree Surgeons Colindale values privacy, transparency, and trust. We will continue to process personal data responsibly and only to the extent necessary for lawful business purposes, customer service, and compliance with legal obligations.