Privacy Policy - Tree Surgeons Wembley

This Privacy Policy explains how Tree Surgeons Wembley collects, uses, stores, shares, and protects personal data relating to its customers and prospective customers. It applies to all Tree Surgeons Wembley customers in the area, including individuals, householders, landlords, tenants, property managers, and businesses who use or enquire about our tree surgery and related services. We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By engaging our services, requesting a quote, making an enquiry, or otherwise interacting with Tree Surgeons Wembley, you acknowledge that your personal information may be processed as described in this policy. We only collect and use data where it is necessary for legitimate business purposes, legal obligations, service delivery, or with consent where required.

1. Information We Collect

Tree Surgeons Wembley may collect and process personal data that you provide directly to us, data generated through service delivery, and data obtained from third parties where appropriate and lawful. The types of information we may collect include:

Identity details: name, title, and any relevant account or reference details.
Contact details: address, email address, telephone number, and property location information.
Service information: details of the work requested, site notes, access requirements, quotations, invoices, and service history.
Communication records: messages, call notes, complaint details, and correspondence relating to our services.
Payment information: transaction records and billing details. We do not intentionally store full card details where payment processing is handled securely by third parties.
Technical data: limited information such as device or browser details when you interact with digital systems we use for administration.
Site and operational data: photographs, inspection notes, risk assessments, and job completion records where needed for tree surgery work.

In some cases, we may also process information about access arrangements, health and safety requirements, or other relevant details needed to carry out work safely. Where such data is necessary, we handle it carefully and only to the extent required for the service.

2. How We Use Personal Data

We use personal data to provide tree surgery services efficiently, safely, and lawfully. Typical uses include:

Preparing quotations, surveys, and service proposals.
Scheduling and carrying out tree surgery, maintenance, pruning, felling, stump work, and related services.
Managing customer accounts, invoicing, and payment administration.
Communicating with customers about bookings, access, changes, complaints, or service updates.
Maintaining records of work completed, safety checks, and quality assurance.
Meeting legal, regulatory, tax, insurance, and health and safety obligations.
Handling disputes, claims, and enquiries.
Improving service delivery, staff training, and internal administration.

We only use personal data where it is relevant and proportionate to the service provided. We do not sell personal data, and we do not use customer information for unrelated purposes without a lawful basis.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis before processing personal data. Tree Surgeons Wembley relies on the following lawful bases, depending on the situation:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes taking enquiries, providing quotes, arranging work, delivering services, issuing invoices, and managing customer records.

Legal Obligation

We may process data to comply with legal requirements such as tax, accounting, employment, insurance, health and safety, and regulatory duties.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests do not override your rights and freedoms. This may include service administration, record keeping, fraud prevention, service improvement, and managing customer communication.

Consent

Where required, we rely on your consent. For example, this may apply to optional marketing communications or certain non-essential uses of information. You may withdraw consent at any time, without affecting processing carried out before withdrawal.

Vital Interests and Public Task

In rare circumstances, we may process information to protect someone’s vital interests or where required by law in the public interest, such as urgent safety-related matters.

4. Sharing Data and Processors

We may share personal data with trusted third parties when necessary for running our business and delivering services. These third parties act as processors or independent controllers depending on the context. We only share the minimum data required and ensure appropriate safeguards are in place.

Examples of processors and service providers may include:

IT and cloud storage providers used for secure data storage, backup, and administration.
Accounting and invoicing providers used to manage financial records and tax compliance.
Payment service providers used to process transactions securely.
Communication service providers used for email, messaging, and customer administration.
Insurance and professional advisers where required to manage risk, claims, or legal obligations.
Subcontractors or specialist contractors where needed to complete a job safely and effectively.

Where a processor is used, they are required to protect personal data, act only on our instructions, and comply with data protection law. We may also disclose information if required by law, court order, regulatory authority, or to prevent fraud or serious harm.

5. Data Retention

Tree Surgeons Wembley keeps personal data only for as long as necessary for the purpose for which it was collected. Retention periods depend on the nature of the data, the type of service provided, and any legal or contractual obligations.

Quotation and enquiry records: retained for a reasonable period to manage follow-up, disputes, or service history.
Customer service and job records: retained for as long as needed for warranty, safety, operational, and contractual purposes.
Financial and tax records: retained in line with accounting and statutory requirements.
Safety and incident records: retained where necessary to meet legal obligations and support risk management.

When personal data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention procedures. We review retention regularly to ensure we do not keep information longer than necessary.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, restricted permissions, staff awareness, and supplier oversight. While no system can be guaranteed completely secure, we take data protection seriously and continually review our safeguards.

7. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These rights may be subject to legal limitations and exemptions depending on the circumstances.

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you can request deletion of your data in certain situations.
Right to restriction: you can ask us to limit processing in specific cases.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you may request certain information in a structured, commonly used format.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you wish to exercise your rights, we may need to verify your identity before responding. We aim to handle requests within the timeframes required by law. You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data has been mishandled.

8. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is necessary in connection with property ownership, access arrangements, or another lawful service-related purpose. Where such information is processed, it is handled with care and only where appropriate.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, service practices, or operational requirements. Any updated version will apply from the date it is made available. We encourage customers to review it periodically so they remain informed about how their data is handled.

10. Summary of Our Commitment

Tree Surgeons Wembley respects your privacy and aims to process personal data responsibly, transparently, and securely. We collect only the information necessary to deliver services, meet legal duties, and manage our business effectively. We use lawful bases under UK GDPR, work with appropriate processors, keep data only as long as needed, and support your rights over your personal information. This policy applies to all Tree Surgeons Wembley customers in the area, and it is designed to ensure your data is handled fairly at every stage of our service relationship.