Privacy Policy - Tree Surgeons Bethnalgreen

This Privacy Policy explains how Tree Surgeons Bethnalgreen collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Bethnalgreen customers in the area, including prospective customers, existing customers, and anyone who makes an enquiry about our services. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We take your privacy seriously. This policy describes the types of information we may process, the lawful bases we rely on, how long we retain data, the categories of third parties that may process data on our behalf, and the rights you may exercise over your personal information. By engaging our services, contacting us, or otherwise interacting with us, you acknowledge that this policy may apply to the data we hold about you.

1. Information We Collect

We may collect and process different types of personal data depending on how you interact with us and the services you request. The information we collect is limited to what is necessary for legitimate business and service purposes.

Types of data we may collect

Identity data: such as your name, title, and any business or property ownership details relevant to service delivery.
Contact data: such as postal address, email address, and telephone number.
Service data: information about the trees, land, or property requiring work, including access details, job instructions, site notes, and photographs taken for surveying or completion records.
Payment data: details necessary to process payments, issue invoices, and maintain accounting records.
Communication data: records of correspondence, enquiries, complaints, estimates, and service updates.
Technical data: limited data such as device or browser information if you interact with us through digital systems used for administration or booking.

In some circumstances, we may also collect information about site conditions, hazards, neighbour access, or special instructions that are relevant to carrying out work safely and effectively. Where required, we may receive personal data from third parties, such as letting agents, landlords, managing agents, or contractors who arrange services on your behalf.

2. How We Use Your Data

We use personal data only where there is a valid legal reason to do so. Our use of your information is generally limited to operating our business, delivering services, managing customer relationships, and meeting legal obligations.

Purposes of processing

To respond to enquiries and provide quotations.
To assess job requirements and plan service delivery.
To carry out tree surgery, inspections, maintenance, or related services safely.
To communicate with you about appointments, changes, or follow-up matters.
To issue invoices, process payments, and manage accounts.
To keep appropriate business and compliance records.
To improve our customer service, internal processes, and operational efficiency.
To defend or establish legal claims where necessary.

We do not sell personal data. We also do not use personal data for unrelated purposes incompatible with the reason it was originally collected, unless we have a lawful basis to do so and where required, we notify you.

3. Lawful Basis for Processing

Under data protection law, we must identify a lawful basis for each type of processing. Depending on the context, we may rely on one or more of the following bases:

Lawful bases used by Tree Surgeons Bethnalgreen

Contract: where processing is necessary to provide a quotation, enter into a service agreement, or complete work you have requested.
Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing enquiries, maintaining records, improving services, or preventing fraud.
Legal obligation: where processing is required to meet obligations under tax law, health and safety requirements, or other applicable regulations.
Consent: where you have given clear consent for a specific purpose, such as receiving certain types of marketing communication. You may withdraw consent at any time if it has been used as the basis for processing.

We will only process special category data or other sensitive information where it is necessary and where an additional lawful condition applies. In normal circumstances, we do not seek such information, but it may arise incidentally in site notes or communications, for example where safety considerations require it.

4. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or as long as required by law. The exact retention period depends on the type of data and the reason for holding it.

Typical retention periods

Enquiry records: retained for a reasonable period to manage follow-up questions and quotations.
Customer and service records: retained for the duration of the business relationship and for a further period where needed for warranty, dispute handling, or accounting.
Financial records: retained for the period required by tax and accounting laws.
Health and safety records: retained where necessary to demonstrate compliance and manage incident history.
Marketing records: retained until you withdraw consent or object, where consent or legitimate interests apply.

When data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe manner. If we are involved in a legal dispute, investigation, or claim, we may retain relevant information for longer until the matter is resolved.

5. Processors and Third Parties

We may share personal data with trusted third parties who act as processors or independent controllers depending on their role. These parties only receive the information necessary to perform the relevant service and are expected to protect it appropriately.

Categories of processors and recipients

IT and cloud service providers: for secure storage, administration, communication, and record management.
Accounting and invoicing providers: to manage payments, bookkeeping, and tax compliance.
Booking, scheduling, or communications tools: to coordinate appointments and customer correspondence.
Subcontractors or specialist service providers: where necessary to complete work safely and effectively.
Professional advisers: such as accountants, insurers, or legal advisers where required.
Public authorities: where disclosure is required by law, regulation, court order, or to protect rights and safety.

Where we use processors, we require them to handle data securely and only in accordance with our instructions and applicable law. If a third party acts as an independent controller, they will be responsible for their own privacy practices, and we encourage you to review their policies where relevant.

6. Your Rights

As a data subject, you have rights under UK data protection law. These rights may be limited in some situations, but we will always assess each request carefully and respond where applicable.

Your rights include

Right of access: you may ask for a copy of the personal data we hold about you.
Right to rectification: you may request correction of inaccurate or incomplete data.
Right to erasure: you may ask us to delete your data in certain circumstances.
Right to restrict processing: you may ask us to limit how we use your information in certain cases.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to data portability: you may request transfer of certain data in a structured, commonly used format where technically feasible.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We will normally respond within the legally required timeframe. If you believe your data has been handled unlawfully, you also have the right to raise a complaint with the Information Commissioner’s Office (ICO).

7. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limited data sharing on a need-to-know basis.

Although we work to protect your information, no system can be guaranteed completely secure. We therefore encourage users to share only information that is necessary for the service requested and to notify us promptly of any suspected issue involving their data.

8. International Transfers

Where any service provider stores or processes data outside the UK, we will take steps to ensure that appropriate safeguards are in place, such as adequacy regulations or standard contractual protections, as required by applicable law.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. Any revised version will apply from the date it is made available. We encourage customers to review it periodically to stay informed about how their information is handled.

10. Applicability

This Privacy Policy applies to all Tree Surgeons Bethnalgreen customers in the area, including individuals and businesses who request, receive, or enquire about our services. By using our services, you acknowledge that your personal data may be processed in accordance with this policy and the principles set out above.

Tree Surgeons Bethnalgreen is committed to respecting your privacy and using your data responsibly, lawfully, and only where necessary to support safe, reliable, and professional service delivery.