Privacy Policy - Tree Surgeons Abbeywood

This Privacy Policy explains how Tree Surgeons Abbeywood collects, uses, stores, shares, and protects personal data in connection with our tree surgery and related services. It applies to all Tree Surgeons Abbeywood customers in the area, including individuals, homeowners, landlords, tenants, business clients, and anyone else who uses or enquires about our services. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tree Surgeons Abbeywood provides arboricultural and tree care services, including surveys, maintenance, pruning, felling, stump removal, hedge work, site clearance, and associated advice. For the purposes of data protection law, we act as the data controller when we decide why and how your personal data is processed.

2. Personal Data We Collect

We collect only the information needed to provide our services, manage customer relationships, and meet legal and contractual obligations. The categories of data we may collect include:

Identity data such as your name, title, and business name where applicable.
Contact data such as address, email address, and telephone number.
Property and service data including property location, site access information, tree details, photos, quotations, job notes, and service history.
Payment and transaction data such as invoices, payment status, and transaction records.
Communication data including emails, messages, call notes, and correspondence relating to enquiries, quotes, complaints, or service updates.
Technical data where relevant, such as basic device or usage information if you contact us by digital means.
Special category data only where strictly necessary and lawfully permitted, for example where accessibility needs or health-related information affects site access or service delivery.

We do not intentionally collect unnecessary personal data. Please do not provide information that is not relevant to your request or our services.

3. How We Collect Data

We may collect personal data directly from you when you:

request a quotation or site visit;
book or use our services;
make an enquiry or complaint;
communicate with us by phone, email, or other means;
complete forms or provide information during service delivery;
make payments or request invoices.

We may also receive information from third parties where necessary, such as property owners, tenants, managing agents, insurers, local authorities, or subcontractors acting on our behalf. Where we receive data from another source, we will use it only for the purpose for which it was provided and in line with this policy.

4. Why We Use Your Data

We process personal data for the following purposes:

to provide quotations, assessments, and tree surgery services;
to communicate about appointments, access, job progress, and aftercare;
to maintain accurate customer and service records;
to issue invoices, process payments, and manage accounts;
to meet legal and regulatory obligations, including safety, tax, and insurance requirements;
to handle disputes, claims, and complaints;
to improve our service quality and business operations;
to protect our staff, customers, property, and operations from fraud, misuse, or unlawful activity.

5. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each type of processing. Depending on the circumstances, Tree Surgeons Abbeywood may rely on the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you, such as providing a quote, carrying out tree work, sending invoices, or managing service arrangements.

Legal Obligation

We may process data where required to comply with legal obligations, such as record keeping, health and safety requirements, tax laws, and other regulatory duties.

Legitimate Interests

We may process personal data where it is in our legitimate business interests and those interests are not overridden by your rights and freedoms. This may include managing customer relationships, improving services, preventing fraud, securing our premises, and keeping internal records. When relying on this basis, we consider whether the processing is necessary and proportionate.

Consent

Where consent is needed, for example for optional communications or the use of certain types of data beyond the original purpose, we will ask for it clearly. You may withdraw consent at any time, although this will not affect processing already carried out before withdrawal.

Vital Interests and Public Task

These bases are unlikely to apply in most cases, but may be used in rare circumstances where necessary to protect someone’s life or where a lawful public function requires processing.

6. Data Sharing and Processors

We may share personal data with trusted third parties when necessary to deliver our services or meet legal obligations. These third parties may act as processors or independent controllers. Processors only act on our instructions and must keep data secure and confidential.

Examples of processors and service providers may include:

accounting and bookkeeping providers;
payment processing services;
IT, cloud storage, email, and data backup providers;
customer management or scheduling systems;
subcontractors or specialist contractors engaged for a job;
health and safety, legal, or insurance advisers;
regulators, law enforcement, or public authorities where required by law.

We require processors to apply appropriate technical and organisational measures to protect your personal data. If data is transferred outside the UK, we will ensure suitable safeguards are in place in accordance with data protection law.

7. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, and to satisfy legal, accounting, insurance, or dispute-resolution requirements. Retention periods may vary depending on the type of data and the context in which it was obtained.

Customer and job records are generally retained for a reasonable period after the service is completed to manage queries, warranties, and follow-up needs.
Financial and tax records are retained for the periods required by law.
Communication records are kept for as long as needed to respond to enquiries, resolve issues, or demonstrate service history.
Safety and incident records may be kept longer where necessary for insurance, compliance, or legal claims.

When data is no longer needed, it will be securely deleted, anonymised, or destroyed.

8. Data Security

We take the security of personal data seriously. Appropriate safeguards are used to help prevent unauthorised access, loss, misuse, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and careful selection of processors. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to certain conditions and exemptions.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – in some cases, you can ask us to delete your personal data.
Right to restriction – you can request limited processing in certain circumstances.
Right to data portability – where applicable, you may request your data in a structured, commonly used format.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – if we rely on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We aim to respond within the timescales required by law.

10. Children’s Data

Our services are not directed at children, and we do not knowingly collect children’s personal data unless it is necessary in connection with a customer enquiry or service arrangement and lawfully provided by an adult with authority to do so.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or how we process personal data. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically.

12. Complaints

If you have concerns about how your personal data is handled, please contact us using the usual service channels for Tree Surgeons Abbeywood so we can address the issue. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unhappy with how we process your data.

Effective for all Tree Surgeons Abbeywood customers in the area, this policy is intended to be clear, fair, and compliant. We are committed to respecting your privacy and using personal data only when we have a valid reason to do so.