Privacy Policy - Tree Surgeons Coventgarden

This Privacy Policy explains how Tree Surgeons Coventgarden collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Coventgarden customers in the area, including private household clients, commercial clients, property managers, landlords, tenants, and any other individuals who request or receive tree surgery or related arboricultural services.

We are committed to processing personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to help customers understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights individuals have over their data.

1. Data We Collect

We may collect and process different types of personal data depending on the service requested, the nature of the project, and how you interact with us. The information we collect may include:

Identity details such as your name, title, and, where relevant, the name of the business or organisation you represent.
Contact details such as address, email address, and telephone number.
Service and property details including location of the site, access notes, tree locations, work requested, and relevant information about the property or land.
Quotation and contract information such as records of your enquiries, preferred service dates, estimates, invoices, and payment status.
Communication records including emails, messages, notes from telephone conversations, and correspondence relating to your service request.
Site and operational records such as photographs taken before, during, or after work, risk assessments, work schedules, and completion notes.
Financial information such as payment records and transaction references. We do not normally store full card details if payment is processed through secure third-party systems.
Technical information where you interact with any digital service we use, such as basic device or usage information, if applicable.

We do not seek to collect unnecessary personal data. Where special category data is ever required, it will only be processed when strictly necessary and with an appropriate lawful basis.

2. How We Use Your Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to assess site requirements and plan tree surgery work safely;
to arrange appointments, access, and service delivery;
to perform contracted services and manage customer relationships;
to issue invoices, process payments, and maintain financial records;
to communicate important updates about jobs, schedules, or service changes;
to maintain business records for administrative, tax, and audit purposes;
to manage complaints, disputes, or warranty-related matters;
to comply with legal, regulatory, health and safety, or insurance obligations;
to protect our business, staff, clients, and property from fraud, misuse, or unlawful activity.

We only use data for the purposes for which it was collected unless we reasonably determine that we need to use it for a compatible purpose, or unless the law requires or permits otherwise.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Tree Surgeons Coventgarden relies on the following lawful bases:

Contract

We process personal data when it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes providing quotations, scheduling work, completing tree surgery services, and handling billing.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include maintaining service records, improving operational efficiency, preventing fraud, and managing business administration.

Legal Obligation

We process certain data when necessary to comply with legal obligations, such as tax, accounting, health and safety, employment, and insurance requirements.

Consent

In limited situations, we may rely on consent, for example where it is appropriate to request permission for a specific optional use of data. If we rely on consent, you may withdraw it at any time.

We do not sell personal data. We only use customer information in ways that are consistent with the above legal grounds and with reasonable expectations based on the services requested.

4. Who May Process Your Data

We may share personal data with carefully selected third parties, known as processors, who help us run our business and deliver our services. These processors only act on our instructions and are required to keep your information secure and confidential. They may include:

IT and cloud service providers that store emails, files, and business records;
Accounting and bookkeeping providers that support invoicing, tax, and financial administration;
Payment service providers that handle payment transactions securely;
Scheduling or administration systems used to organise jobs and customer records;
Insurance providers where a claim, incident, or risk matter must be reported;
Subcontractors or specialist arboricultural professionals where their involvement is necessary to complete a job;
Professional advisers such as legal or compliance advisers when needed;
Public authorities where disclosure is required by law or to protect rights, safety, or property.

Where processors are used, we take reasonable steps to ensure appropriate contractual safeguards are in place. If data is transferred outside the UK, we will ensure that suitable protection measures are applied in line with data protection law.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and to meet legal, accounting, insurance, and operational requirements. Retention periods may vary depending on the type of record and the reason it is held.

Customer enquiry and quotation records are generally kept for a limited period to manage follow-up and business administration.
Contract and service records are retained for the duration of the working relationship and for a reasonable period afterward.
Invoices, payment records, and tax-related information are retained for the period required by law.
Health and safety documentation, incident records, and insurance-related files may be retained for longer where necessary to deal with claims or legal obligations.

When personal data is no longer required, we will securely delete, anonymise, or archive it in a manner consistent with applicable law and good practice.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, password protection, staff awareness, and limited sharing on a need-to-know basis. While no system is completely risk-free, we review our safeguards regularly and update them where appropriate.

7. Your Rights

Individuals whose data we process have rights under data protection law. Subject to legal limits and verification of identity, you may have the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete data;
erase personal data in certain circumstances;
restrict our processing in certain circumstances;
object to processing based on legitimate interests, including direct objection to some uses;
data portability for information you provided to us where applicable;
withdraw consent where processing is based on consent;
lodge a complaint with the Information Commissioner’s Office if you believe your rights have been infringed.

We will respond to valid requests without undue delay and within the timeframes required by law. In some cases, we may need additional information to confirm your identity or understand the scope of your request.

8. Children’s Data

Our services are generally aimed at adults, property owners, occupiers, and business customers. We do not knowingly collect personal data from children in the ordinary course of providing tree surgery services. If we become aware that we have collected such data without a valid reason, we will take appropriate steps to delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or data processing activities. Any revised version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

10. Scope of This Policy

This Privacy Policy applies to Tree Surgeons Coventgarden customers in the area and covers personal data collected in connection with enquiries, quotations, contracts, service delivery, administration, and related correspondence. By using our services, you acknowledge that your personal data may be processed in line with this policy and applicable data protection law.

Last updated: [insert date]