Privacy Policy - Tree Surgeons Brimsdown

Tree Surgeons Brimsdown is committed to protecting the privacy and personal data of everyone who uses our services. This Privacy Policy explains how we collect, use, store, share, and protect personal information in line with the UK GDPR and the Data Protection Act 2018.

This policy applies to all Tree Surgeons Brimsdown customers in the area, including private individuals, landlords, property managers, businesses, and anyone who enquires about or receives our tree surgery services.

1. Who We Are

Tree Surgeons Brimsdown provides professional tree surgery and related arboricultural services. For the purposes of data protection law, we act as the data controller when we decide why and how personal data is processed. This means we are responsible for ensuring that your information is handled lawfully, fairly, and transparently.

2. Personal Data We Collect

We only collect personal data that is necessary for providing our services, managing customer relationships, complying with legal obligations, and improving service quality. The types of data we may collect include:

Identity details such as your name, title, and organisation name if applicable.
Contact details such as address, email address, and telephone number.
Property information relevant to tree inspection, quotation, work scheduling, access, or safety.
Service records including details of enquiries, quotations, bookings, completed work, and customer communications.
Payment information where needed to issue invoices, confirm payments, or manage accounts.
Technical data such as basic website or device information if you interact with our digital systems.
Health and safety information where required to carry out work safely on your property or to protect workers and third parties.

We do not intentionally collect special category data unless it is necessary and lawful to do so. If such information is provided, we will handle it with additional care and only process it where a valid legal basis applies.

3. How We Collect Personal Data

We may collect personal data directly from you when you:

make an enquiry;
request a quotation or site visit;
book or receive a service;
communicate with us by phone, email, or message;
complete forms or submit documents;
make a payment or receive an invoice.

We may also collect data from third parties where it is lawful to do so, for example from property owners, managing agents, insurers, or public sources when required to complete a legitimate service request or to verify information.

4. Lawful Basis for Processing

Under GDPR, we must have a valid lawful basis for each type of processing. Tree Surgeons Brimsdown may rely on one or more of the following:

Performance of a Contract

We process personal data where it is needed to provide a service you have requested, such as preparing a quotation, carrying out tree surgery work, arranging access, invoicing, or completing aftercare.

Legal Obligation

We may process data to comply with legal duties, including tax record keeping, health and safety obligations, insurance requirements, and other regulatory responsibilities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include responding to enquiries, maintaining service records, preventing fraud, improving our operations, and managing customer communications.

Consent

In limited situations, we may rely on your consent, particularly for optional communications or certain forms of electronic contact. Where consent is used, you have the right to withdraw it at any time.

Vital Interests

In rare circumstances, we may process information to protect someone’s life or physical safety, such as in emergency situations involving urgent tree hazards or dangerous site conditions.

5. How We Use Your Data

We use your personal data for the following purposes:

to respond to enquiries and provide quotations;
to assess work requirements and site conditions;
to deliver tree surgery and related services;
to manage appointments, access arrangements, and follow-up work;
to issue invoices and manage payments;
to maintain accurate business and compliance records;
to handle complaints, queries, and disputes;
to meet legal, tax, and insurance obligations;
to improve our services and customer experience;
to protect against unlawful activity and maintain site safety.

We will not use your personal data for purposes that are incompatible with those stated in this policy unless we have a lawful reason to do so.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods may vary depending on the type of information and the reason it was collected.

As a general rule:

customer and service records are retained for a period needed to manage the relationship and any follow-up matters;
financial and tax records are kept for the period required by law;
health and safety records are kept where necessary to demonstrate compliance and protect against claims;
enquiry records may be deleted sooner if no service is provided and there is no further legitimate reason to keep them.

When personal data is no longer required, it is securely deleted, anonymised, or otherwise disposed of.

7. Data Processors and Third Parties

We may use trusted third-party service providers, known as processors, to help us operate our business. These may include providers of:

IT and cloud storage systems;
accounting and invoicing software;
payment processing services;
communication tools;
customer administration systems;
professional advisers such as accountants or legal advisers.

Processors are only permitted to process personal data on our instructions and must protect it appropriately. We ensure that suitable contracts are in place with processors so that your data remains secure and is used only for authorised purposes.

We may also share data with other third parties where necessary, such as insurers, regulators, public authorities, emergency services, or property-related professionals, if required by law or to protect our legitimate interests.

8. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and staff confidentiality obligations.

While we do our best to safeguard information, no system can be guaranteed as completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will take appropriate steps in line with legal requirements.

9. Your Rights

Under data protection law, you have several rights regarding your personal data. These include the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete information;
erase your data in certain circumstances;
restrict processing in certain situations;
object to processing based on legitimate interests or direct marketing;
data portability where applicable;
withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to raise any concerns with us first so we can try to resolve them promptly.

10. Cookies and Online Data

If you interact with our online services, we may use cookies or similar technologies to support functionality, analyse usage, and improve the website experience. Where required, we will provide appropriate notice and obtain consent for non-essential cookies. You can manage cookie preferences through your browser settings.

11. International Transfers

Where any personal data is transferred outside the UK, we will ensure that suitable safeguards are in place to protect it in accordance with applicable data protection law. This may include approved contractual protections or transfers to jurisdictions with adequate legal protections.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. The updated version will apply from the date it is published or otherwise communicated to customers. We encourage you to review it periodically to stay informed.

13. Summary of Key Points

In summary: Tree Surgeons Brimsdown collects only the personal data needed to provide tree surgery services, manage our business, and meet legal obligations. We process data on lawful bases such as contract, legal obligation, legitimate interests, consent, and vital interests where applicable. We retain information only for as long as necessary, use trusted processors under contract, and respect your rights under GDPR.

Your privacy matters to us, and we are committed to handling your personal information fairly, securely, and transparently.