Privacy Policy - Tree Surgeons Chiswick

This Privacy Policy explains how Tree Surgeons Chiswick collects, uses, stores, shares, and protects personal data relating to customers, prospective customers, and other individuals in the local area. It applies to all Tree Surgeons Chiswick customers in the area, including people who request quotes, book tree surgery services, make enquiries, or otherwise interact with our services. We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.

1. Who This Policy Applies To

This Privacy Policy applies to individuals whose personal data we process in connection with tree surgery, tree maintenance, arboricultural inspections, stump removal, hedge work, emergency call-outs, and related services. It also applies where we process data for administrative, legal, accounting, safety, insurance, and service management purposes. By engaging with our services or making an enquiry, you acknowledge that your data may be used in the ways described below.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for the provision and management of our services. The types of data we may collect include:

Identity details such as your name and, where necessary, the name of your organisation.
Contact details such as phone number, email address, and service address.
Property and service information such as details about trees, access requirements, requested work, site conditions, and photographs provided to us or taken during a site visit.
Payment and transaction data such as billing information, payment status, and records of services supplied.
Communication records including emails, messages, notes from phone calls, and correspondence relating to quotations, scheduling, complaints, or follow-up work.
Technical and usage data where relevant, such as basic device or enquiry metadata generated through forms or digital systems used to manage customer requests.
Insurance, legal, or health and safety information where needed for safe service delivery, risk assessment, or compliance purposes.

We do not seek to collect unnecessary personal data. Where sensitive or special category data is required, we will only process it when there is a valid legal basis and appropriate safeguards in place.

3. How We Use Personal Data

We process personal data for the following purposes:

To respond to enquiries and provide quotes.
To assess tree work requirements and carry out services safely and effectively.
To manage bookings, schedules, and service delivery.
To communicate with customers about work, updates, changes, or follow-up requirements.
To issue invoices, process payments, and manage accounts.
To keep records for quality assurance, training, and business administration.
To meet legal, tax, insurance, and regulatory obligations.
To defend or establish legal claims and resolve disputes.
To ensure site and worker safety and to manage operational risk.

We use personal data only for legitimate and clearly defined purposes. We will not use your data in a way that is incompatible with the reason it was collected unless permitted or required by law.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing activity. The lawful bases we rely on are:

Contract

We process personal data when it is necessary to enter into or perform a contract with you, such as preparing a quote, delivering tree surgery services, issuing invoices, or handling customer account administration.

Legal Obligation

We may process data to comply with legal requirements, including tax and accounting rules, health and safety obligations, insurance requirements, and lawful recordkeeping duties.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. This may include service administration, customer support, fraud prevention, internal recordkeeping, business improvement, and defending legal claims.

Consent

In limited circumstances, we may rely on your consent, for example where you have specifically agreed to receive certain optional communications. Where consent is used, you may withdraw it at any time.

We only process special category data or highly sensitive information where there is a lawful basis under data protection law and appropriate protection measures are applied.

5. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as data processors or independent controllers depending on the nature of the service. They may include:

IT and cloud service providers who store or support our systems and records.
Accountants and bookkeeping providers who assist with financial administration and compliance.
Payment service providers who process payments securely.
Insurance providers and claims handlers where required for coverage, incident management, or disputes.
Professional advisers such as legal advisers or compliance specialists.
Subcontractors or specialist contractors where necessary to complete work safely and properly.
Public authorities or regulators where disclosure is required by law.

We require processors to handle personal data securely, use it only for the purposes we specify, and implement appropriate technical and organisational safeguards. We do not sell personal data.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, insurance, and operational requirements. The retention period depends on the nature of the data and the reason it was obtained.

Enquiry records may be kept for a reasonable period to manage follow-up and business administration.
Customer and contract records may be retained for the duration of the working relationship and for a further period where needed for legal claims or compliance.
Invoice and tax-related information is generally retained in line with statutory accounting obligations.
Health and safety, insurance, or incident records may be retained longer where required by law or to establish or defend a claim.

When data is no longer required, we will delete it or anonymise it securely.

7. Data Security

We use appropriate measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, confidentiality obligations, and limited data access on a need-to-know basis. While no method of transmission or storage can be guaranteed to be completely secure, we take data protection seriously and work to reduce risk wherever possible.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain cases.
Right to object – to object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – to receive certain data in a structured, commonly used, machine-readable format where legally applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable data protection law. Some rights may be limited where we are legally required to retain or use the data.

9. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that suitable safeguards are in place to protect it in line with applicable legal requirements. This may include approved contractual safeguards or transfers to countries recognised as providing adequate protection.

10. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is necessary and lawful in connection with our services and the relevant responsible adult has provided the information. If we become aware that we have collected data improperly, we will take reasonable steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulatory guidance, or the way we operate. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

12. Contact and Complaints

If you have concerns about how your personal data is used, you can raise them with us and we will aim to resolve the matter promptly and fairly. You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

Tree Surgeons Chiswick is committed to respecting privacy and protecting the data entrusted to us. We process personal information only where necessary, keep it secure, retain it appropriately, and ensure that all customers in the Chiswick area are treated in line with applicable privacy rights and standards.