Privacy Policy - Tree Surgeons Northolt

This Privacy Policy explains how Tree Surgeons Northolt collects, uses, stores, and protects personal data. It applies to all Tree Surgeons Northolt customers in the area, including individuals, households, landlords, tenants, and commercial clients who use our tree surgery, arborist, maintenance, survey, and related services. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies when you:

request a quote or consultation;
book or receive tree surgery or related services;
communicate with us by email, phone, or other methods;
visit our website or interact with our marketing materials, where applicable;
are a customer, prospective customer, supplier contact, or site contact.

We only collect and process personal data where it is necessary for legitimate business purposes, service delivery, legal compliance, or other lawful grounds described below.

2. Personal data we collect

We may collect and process the following categories of personal data:

Identity and contact details

Name;
Address;
Telephone number;
Email address;
Property or site access details.

Service and transaction data

Details of the services requested or provided;
Quotes, invoices, payment records, and service history;
Notes about work undertaken, site conditions, and instructions;
Records of complaints, queries, or feedback.

Technical and usage data

IP address;
Browser type and device information;
Cookie data, if applicable;
Website interaction data where relevant.

Special category data

We do not intentionally collect special category data such as health information, unless you choose to provide it and it is necessary for a specific service or safety requirement. If such data is received, we will process it only where a lawful basis applies and where additional safeguards are in place.

3. How we use your personal data

We use personal data for the following purposes:

to provide quotes, assess site requirements, and arrange work;
to deliver tree surgery, pruning, felling, stump removal, surveys, and maintenance services;
to manage customer accounts and records;
to process payments and manage invoices;
to communicate with customers about bookings, service updates, or follow-up matters;
to handle complaints, disputes, or claims;
to meet legal, health and safety, insurance, tax, and record-keeping obligations;
to improve our services, operations, and customer experience;
to send marketing communications where lawful consent or legitimate interest permits.

We will always aim to keep the data we use relevant, adequate, and limited to what is necessary for the stated purpose.

4. Lawful basis for processing

Under GDPR, we must have a lawful basis for processing personal data. Depending on the situation, Tree Surgeons Northolt relies on one or more of the following:

Contract: when processing is necessary to provide a quote, carry out work, manage payments, or fulfil an agreement with you;
Legal obligation: when processing is required to comply with laws relating to tax, accounting, employment, insurance, or health and safety;
Legitimate interests: when processing is necessary for our business operations, such as record-keeping, service improvement, fraud prevention, or answering enquiries, provided your rights do not override those interests;
Consent: where we rely on your permission, for example for certain marketing communications or optional data use. You may withdraw consent at any time;
Vital interests: in rare cases where processing is needed to protect someone’s life or physical safety;
Public task: only where relevant in connection with official requirements or lawful requests.

Where we rely on legitimate interests, we assess the impact on your privacy and only proceed where processing is proportionate and reasonable.

5. Data sharing and processors

We do not sell your personal data. However, we may share it with trusted third parties who act as processors or independent controllers, where necessary to provide our services or meet legal obligations.

Examples of processors may include:

IT and cloud storage providers;
accounting and bookkeeping services;
payment processing providers;
customer relationship or scheduling systems;
email and communication service providers;
professional advisers such as insurers, auditors, or legal advisers;
subcontractors or specialist contractors assisting with tree surgery services.

Where a third party acts as a processor, they are contractually required to process data only on our instructions, keep it secure, and comply with data protection law. We take reasonable steps to ensure all processors offer appropriate technical and organisational safeguards.

In some cases, we may need to share information with regulatory bodies, insurers, local authorities, or law enforcement where legally required or necessary to protect our rights or the safety of others.

6. Data retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods depend on the type of data and the reason for processing.

Customer and service records: kept for a reasonable period after completion of work to manage queries, warranties, complaints, and future service needs;
Financial and tax records: retained for the period required by accounting and tax laws;
Communication records: kept as long as needed to respond to enquiries or maintain service history;
Marketing data: retained until you unsubscribe, object, or withdraw consent;
Website and technical data: retained for a limited period, depending on security and analytics needs.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

7. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff training, and restricted sharing of information on a need-to-know basis.

Although no system can be guaranteed as completely secure, we take data protection seriously and regularly review our safeguards to maintain an appropriate level of protection.

8. Your rights under GDPR

You have a number of rights in relation to your personal data. These rights may be subject to legal limits and exemptions, but we will always respond appropriately and within the required timeframes.

Right of access: you may request a copy of the personal data we hold about you;
Right to rectification: you may ask us to correct inaccurate or incomplete data;
Right to erasure: you may request deletion of your data in certain circumstances;
Right to restriction: you may ask us to limit processing in certain situations;
Right to object: you may object to processing based on legitimate interests or direct marketing;
Right to data portability: you may request transfer of data you provided to us in a structured, commonly used format, where applicable;
Right to withdraw consent: where processing is based on consent, you can withdraw it at any time;
Right to complain: you may raise concerns with the UK Information Commissioner’s Office if you believe your data protection rights have been breached.

To exercise your rights, you may contact us using the usual business channels. We may need to verify your identity before responding to your request.

9. Marketing communications

We may send you marketing messages where permitted by law, for example to provide updates about our services or seasonal tree care information. You may opt out at any time. If you object to direct marketing, we will stop using your data for that purpose.

10. Children’s data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is incidentally provided by an adult customer and is necessary for service delivery or safeguarding. If we become aware that data has been collected without a proper basis, we will take appropriate steps to delete or protect it.

11. International transfers

If personal data is transferred outside the UK, we will ensure that adequate safeguards are in place, such as approved contractual protections or transfers to countries with an appropriate level of data protection. We will only transfer data where it is necessary and lawful.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we process personal data. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers in the area to review this policy periodically so they remain informed about how their data is handled.

13. Summary of our commitment

Tree Surgeons Northolt is committed to protecting your privacy and using your personal data responsibly. We only collect what we need, use it for clear and lawful purposes, keep it secure, retain it for appropriate periods, and respect your rights. If you are a customer in the area, this policy applies to you whenever we handle your personal information in connection with our services.