Privacy Policy - Tree Surgeon Redbridge

This Privacy Policy explains how Tree Surgeon Redbridge collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeon Redbridge customers in the area, including prospective customers, existing customers, and anyone who contacts us for tree surgery, arboricultural, or related services. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tree Surgeon Redbridge provides tree surgery and related services to residential and commercial customers. In this policy, references to “we,” “us,” and “our” mean Tree Surgeon Redbridge. References to “you” mean any person whose personal data we process, including customers, site visitors, and service users in the Redbridge area.

2. Personal Data We Collect

We collect only the personal data that is necessary for our business operations and service delivery. The types of data we may collect include:

Identity information such as your name and, where relevant, the name of your organisation or property owner.
Contact details such as address, email address, and telephone number.
Service information including property details, requested work, job history, quotations, invoices, and scheduling preferences.
Communication records such as emails, messages, call notes, complaints, and feedback.
Payment-related information needed to process transactions and manage accounts, although we do not store unnecessary payment data.
Technical data where relevant, such as basic website usage information or device data collected through standard analytics or security tools.
Special category data only where strictly necessary and usually only if you voluntarily provide it or if it is relevant to a health, safety, or access requirement.

We do not intentionally collect more data than is needed. If we receive personal data that is not required, we will securely delete or anonymise it where appropriate.

3. How We Collect Data

We may collect personal data in the following ways:

When you request a quote, book a service, or make an enquiry.
When you communicate with us by phone, email, message, or in person.
When you complete forms or provide details during a site visit.
When payment, invoicing, or contract administration is required.
When data is supplied by a third party acting on your behalf, such as a landlord, managing agent, or business representative.
When we must collect information for legal, safety, insurance, or record-keeping purposes.

4. How We Use Your Data

We use personal data only where we have a lawful reason to do so. The main purposes for which we use data are:

To respond to enquiries and provide quotations.
To plan, deliver, and manage tree surgery and related services.
To communicate with you about appointments, work progress, and service updates.
To process payments, manage invoices, and keep accurate financial records.
To meet legal, regulatory, tax, and insurance obligations.
To maintain business records and improve service quality.
To handle complaints, disputes, or claims.
To protect our staff, customers, and property.

We do not use your personal data for purposes that are incompatible with those listed above without first ensuring that we have a valid legal basis.

5. Lawful Basis for Processing

Under the UK GDPR, we must identify a lawful basis for each type of processing. Depending on the situation, we may rely on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotes, scheduling work, completing services, and managing invoices.

Legal Obligation

We may process personal data to comply with legal requirements, including tax law, accounting rules, health and safety obligations, and record retention requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. This may include maintaining service records, protecting against fraud, improving operations, and managing customer communication.

Consent

In limited cases, we may rely on your consent, particularly where the law requires it or where you have actively agreed to a specific type of processing. If consent is used, you can withdraw it at any time.

Vital Interests

In rare situations, we may process personal data to protect someone’s vital interests, such as during a serious emergency or urgent safety situation.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected. Retention periods vary depending on the type of record and the legal or operational need for keeping it.

Customer and service records are generally kept for the period needed to manage the relationship and for a reasonable period after completion of work.
Financial records are retained for the period required by tax and accounting laws.
Health and safety records are retained where necessary for compliance, risk management, or potential claims.
Complaint or dispute records may be retained longer where required to resolve issues or defend legal claims.

When data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner. We regularly review the data we hold to ensure it is not retained longer than necessary.

7. Processors and Data Sharing

We may share personal data with trusted third-party processors who help us provide our services or run our business. These processors act on our instructions and are required to protect your data and use it only for authorised purposes.

Examples of processors may include:

Accounting and bookkeeping providers who support invoicing and financial record management.
IT and cloud service providers who store or help secure business systems and records.
Communication service providers used for email, messaging, or telephone support.
Payment processing providers where payment handling is required.
Professional advisers such as legal or insurance advisers where needed.

We may also disclose personal data where required by law, court order, regulatory request, or to protect our rights, customers, staff, or the public.

We do not sell your personal data. We also ensure that any processors we use are subject to appropriate contractual and security safeguards.

8. International Transfers

If any of our service providers process data outside the UK, we will ensure that appropriate legal safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent protection mechanisms. Our aim is to keep your personal data protected to a standard that is consistent with UK GDPR requirements.

9. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and careful selection of trusted processors.

While no system can be guaranteed to be completely secure, we work to reduce risk and review our safeguards on a regular basis. Staff and contractors with access to personal data are expected to handle it confidentially and responsibly.

10. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may not apply in every case, but we will assess each request carefully. Your rights include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can ask us to delete your data in certain circumstances.
Right to restrict processing – you can ask us to limit how we use your data in certain cases.
Right to data portability – you can ask for certain data to be provided in a structured, commonly used format where applicable.
Right to object – you can object to processing based on legitimate interests or direct marketing where relevant.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

You also have the right to raise concerns about how we handle your personal data. If you believe your data has been processed unlawfully, you may complain to the relevant data protection authority. In the UK, this is the Information Commissioner’s Office (ICO).

11. Children’s Data

Our services are generally aimed at adults and property owners, not children. We do not knowingly collect children’s personal data unless it is necessary for a specific service and there is a valid legal basis. If we become aware that we have collected data from a child without appropriate justification, we will take steps to delete it securely.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our data handling practices. Any updated version will apply from the date it takes effect. We encourage you to review this policy periodically so you remain informed about how we use personal data.

13. Summary of Our Commitment

Tree Surgeon Redbridge is committed to treating your personal data with care, respect, and accountability. We collect only what is necessary, use it for clear and lawful purposes, retain it only for as long as needed, and share it only with trusted processors or where required by law. We also respect your rights and aim to respond to data protection requests promptly and fairly.

This Privacy Policy applies to all Tree Surgeon Redbridge customers in the area.