Privacy Policy - Tree Surgeons Gunnersbury

This Privacy Policy explains how Tree Surgeons Gunnersbury collects, uses, stores, and protects personal data in connection with the services we provide. It applies to all Tree Surgeons Gunnersbury customers in the area, including individuals, property owners, tenants, landlords, and business clients who engage our services or communicate with us in relation to tree surgery, tree maintenance, stump removal, hedge trimming, or related work.

We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy sets out what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your personal data.

1. Personal Data We Collect

We only collect personal data that is necessary for delivering our services, managing enquiries, fulfilling contractual obligations, and meeting legal requirements. The categories of information we may collect include:

Identity details such as your name and, where relevant, the name of your organisation or property management company.
Contact details such as telephone number, email address, and postal address.
Property details including the address of the site where services are required, access instructions, and information about trees, hedges, or other vegetation.
Service information such as quotes requested, services booked, job notes, site observations, and project history.
Payment and billing information where needed to issue invoices, process payments, or maintain financial records.
Communication records including emails, messages, call notes, and complaint or feedback records.
Technical data such as limited website usage information if you interact with our online services, where applicable.

We do not seek to collect special category data unless it is strictly necessary and permitted by law. If such data is ever provided to us accidentally, we will only process it where a valid lawful basis exists and where appropriate safeguards are in place.

2. How We Use Your Data

Your personal data is used for specific and legitimate purposes connected to our services. These purposes may include:

responding to enquiries and providing quotations;
assessing site requirements and planning work;
carrying out tree surgery and related services;
managing appointments, scheduling, and job updates;
issuing invoices, processing payments, and handling account administration;
maintaining records of work completed;
dealing with complaints, disputes, or insurance matters;
meeting legal, tax, accounting, and regulatory obligations;
improving our service quality and operational efficiency;
protecting our rights, property, staff, customers, and contractors.

We will not use your personal data for unrelated purposes without informing you and, where required, obtaining the appropriate consent or identifying another lawful basis.

3. Lawful Basis for Processing

Under data protection law, we must have a valid lawful basis to process personal data. Depending on the nature of the interaction, we rely on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotes, arranging services, completing agreed work, and managing payment or billing matters.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include responding to enquiries, maintaining business records, preventing fraud, improving service delivery, and handling customer communications.

Legal Obligation

Some information must be retained and processed to comply with legal obligations, such as accounting, tax, health and safety, insurance, and record-keeping duties.

Consent

In limited situations, we may rely on your consent, for example where required for certain communications or optional processing. If we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

Vital Interests

In rare circumstances, we may process data to protect someone’s vital interests, such as in an emergency involving safety or serious harm.

4. Sharing Your Data and Processors

We may share personal data only where necessary and only with trusted third parties who assist us in running our business. These third parties act as processors when they handle personal data on our instructions, or as independent controllers where they determine their own purposes.

Processors or service providers may include:

accounting and bookkeeping providers;
payment processing services;
IT and cloud storage providers;
email, communication, and scheduling tools;
customer record management systems;
subcontractors or specialist contractors supporting service delivery;
insurance providers and claims handlers where relevant;
professional advisers such as legal or tax advisers.

We require processors to protect personal data, use it only for agreed purposes, and comply with data protection obligations. We do not sell your personal data.

We may also disclose information where required by law, by a court order, or to public authorities where we are legally obliged to do so. In the event of a business transfer, merger, or restructuring, your data may be shared with relevant parties under appropriate safeguards.

5. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, insurance, and reporting requirements. Retention periods depend on the type of data and the reason it was collected.

In general:

enquiry records may be kept for a limited period after the enquiry ends;
customer and job records may be retained for the duration of the service relationship and for a reasonable period afterwards;
invoices, payment records, and tax-related documents are typically retained for the period required by law;
complaints, disputes, and insurance-related records may be retained for longer where necessary to defend legal claims or resolve issues.

When personal data is no longer needed, we will delete it securely or anonymise it so it can no longer identify you.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or misuse. These measures are designed to reflect the nature of the data we hold and the risks involved.

Examples of safeguards may include:

restricted access to records;
password protection and secure storage systems;
data minimisation practices;
staff awareness and confidentiality obligations;
secure disposal of records when they are no longer needed.

While we work hard to protect your information, no system can be guaranteed to be completely secure. Where required by law, we will notify affected individuals and regulators of any personal data breach.

7. Your Rights

As a data subject, you have rights under data protection law. Subject to legal limits, these may include:

The right to be informed about how your data is used;
The right of access to request a copy of your personal data;
The right to rectification if your information is inaccurate or incomplete;
The right to erasure in certain circumstances;
The right to restrict processing in certain circumstances;
The right to object to processing based on legitimate interests or direct marketing;
The right to data portability where processing is based on consent or contract and carried out by automated means;
Rights relating to automated decision-making, where applicable.

If we rely on consent for any processing, you have the right to withdraw that consent at any time. This will not affect processing carried out before withdrawal.

You also have the right to raise concerns about how your personal data is handled. If you believe your rights have been infringed, you may lodge a complaint with the relevant supervisory authority in the UK. We encourage you to contact us first so we can try to resolve any concerns promptly and fairly.

8. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place. This may include the use of approved contractual clauses, adequacy regulations, or other lawful transfer mechanisms. We will only transfer data where it is necessary for business operations and where adequate protection can be maintained.

9. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is necessary in exceptional circumstances, such as where a parent, guardian, or responsible adult provides information on a child’s behalf in connection with a service. If we become aware that we have collected data from a child without a valid basis, we will take steps to delete it where appropriate.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service arrangements. Any updated version will apply from the date it is published or otherwise brought into effect. We encourage you to review this policy periodically to stay informed about how we protect your information.

11. Summary of Key Principles

Tree Surgeons Gunnersbury is committed to processing personal data lawfully, securely, and transparently. We collect only the information needed to provide our services, use it for clear and legitimate purposes, retain it only as long as necessary, and share it only with trusted processors or where required by law. We respect your rights and aim to handle every customer’s data with care, accountability, and professionalism.

This Privacy Policy applies to all Tree Surgeons Gunnersbury customers in the area.