Privacy Policy - Tree Surgeons Chislehurst

This Privacy Policy explains how Tree Surgeons Chislehurst collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Chislehurst customers in the area, including prospective customers, current customers, former customers, and anyone who contacts us about tree surgery, hedge maintenance, stump removal, site clearance, or related arboricultural services.

We are committed to handling personal data in a lawful, fair, and transparent way in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only collect data that is relevant and necessary for providing our services, managing our business, meeting legal obligations, and improving customer experience.

1. Data We Collect

We may collect and process the following categories of personal data:

Identity data, such as your name and title.
Contact data, such as your address, email address, and telephone number.
Service and enquiry data, including details about the work requested, property access requirements, quotations, survey notes, and communication records.
Billing and transaction data, such as payment status, invoicing details, and records of services supplied.
Technical data if you interact with our digital systems, such as device identifiers, browser type, and basic usage information.
Correspondence data, including messages, complaints, feedback, and any other information you choose to provide.

We generally do not collect special category data unless it is strictly necessary and you have provided it voluntarily or a legal requirement applies. Where such data is involved, we will apply additional safeguards.

2. How We Collect Data

We may collect personal data directly from you when you:

request a quotation or site visit;
book or use our services;
contact us by phone, email, form, or other communication method;
make a payment or query an invoice;
provide feedback or raise a complaint.

We may also receive data from third parties where lawful and appropriate, such as:

property owners, tenants, or managing agents;
business partners or subcontractors working on your project;
publicly available sources where relevant to the work requested.

We only use data obtained from third parties where we have a valid legal reason to do so.

3. Why We Use Personal Data

We use personal data for the following purposes:

to provide quotations, carry out surveys, and deliver tree surgery services;
to communicate with you about bookings, scheduling, and service updates;
to process payments and manage accounts;
to maintain internal records and service history;
to respond to enquiries, complaints, and requests;
to comply with legal, tax, insurance, and health and safety obligations;
to protect our business, staff, customers, and property;
to improve our services and operational processes.

We do not use personal data for purposes that are incompatible with the original reason it was collected unless we have a lawful basis to do so.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each use of personal data. Depending on the situation, we rely on one or more of the following:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes, arranging services, completing work, issuing invoices, and managing service-related communication.

Legal Obligation

We process personal data where required to comply with the law, such as tax record keeping, insurance obligations, health and safety requirements, or responding to lawful requests from authorities.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and your rights do not override those interests. This may include managing client records, preventing fraud, improving service quality, and ensuring efficient business administration. We always balance our interests against your privacy rights.

Consent

In some cases, we may rely on your consent, for example where it is required for a specific optional use of data. If we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, or as required by law. Retention periods vary depending on the nature of the information and our legal or contractual obligations.

Quotation and enquiry records may be kept for a reasonable period to manage follow-up questions and business administration.
Customer and service records may be kept for the duration of the service relationship and for an additional period where needed for warranties, disputes, or legal defence.
Financial and tax records are retained for the period required by accounting and tax laws.
Health and safety records may be retained longer where required by law or insurance needs.

When data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices. We aim to keep retention limited to what is necessary and proportionate.

6. Processors and Third Parties

We may share personal data with trusted third parties who act as processors or independent controllers, but only where necessary and lawful. These may include:

accounting and bookkeeping providers;
payment service providers;
IT and cloud storage providers;
communication or customer management systems;
subcontractors or specialist contractors supporting the delivery of services;
professional advisers, such as insurers, legal advisers, or auditors;
regulatory, tax, or law enforcement bodies where required by law.

Where a third party acts as a processor, they are only permitted to process data on our instructions and must implement appropriate security measures. We require processors to handle personal data securely and in accordance with data protection law.

We do not sell your personal data.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and limiting access to data on a need-to-know basis.

Although we work hard to protect personal data, no system can be guaranteed completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will act in accordance with applicable law.

8. Your Rights

Under data protection law, you have rights regarding your personal data. These include:

Right of access – you can ask for a copy of the personal data we hold about you.
Right to rectification – you can request correction of inaccurate or incomplete data.
Right to erasure – in certain circumstances, you may ask us to delete your data.
Right to restriction – you may ask us to limit how we use your data in some situations.
Right to object – you can object to processing based on legitimate interests in certain cases.
Right to data portability – where applicable, you may request transfer of certain data in a structured format.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

These rights are not absolute. In some situations, legal obligations or legitimate grounds may mean we cannot fully comply with a request. If that happens, we will explain why.

9. International Transfers

If any of our service providers store or process data outside the UK, we will ensure appropriate safeguards are in place to protect your personal data. These safeguards may include adequacy regulations or approved contractual protections.

10. Children’s Data

Our services are intended for adults and property-related customers. We do not knowingly collect personal data from children unless it is necessary and lawful in the context of a service arrangement, and only with suitable safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will apply from the date it is published or otherwise made available.

By using our services, you acknowledge that your personal data may be processed in accordance with this Privacy Policy and applicable data protection law. We encourage all customers in the Tree Surgeons Chislehurst area to review this policy periodically so they remain informed about how their information is handled.

12. Summary of Our Commitment

We respect privacy and handle personal data responsibly. Our approach is based on lawfulness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality. We use personal data only when necessary, retain it only for as long as needed, and share it only with trusted processors or where the law requires.

For every Tree Surgeons Chislehurst customer in the area, our goal is to deliver reliable tree surgery services while protecting privacy at every stage. If you provide us with personal data, we will process it in a way that is appropriate, proportionate, and compliant with data protection law.