Privacy Policy - Tree Surgeons Finsburypark

This Privacy Policy explains how Tree Surgeons Finsburypark collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Finsburypark customers in the area, including individuals and organisations who request quotations, book services, make enquiries, or otherwise interact with us in connection with tree surgery, tree care, hedge work, stump removal, pruning, and related services.

We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy also explains your rights and how we support them.

1. Information We Collect

We collect only the personal data that is necessary for business, legal, and operational purposes. The type of information we may collect depends on how you interact with us.

Information you provide directly

Identity information such as your name or business name.
Contact details such as address, email address, and telephone number.
Property and site details relevant to the work requested.
Service and quotation information including the type of tree work requested, preferred dates, and notes about access or safety concerns.
Billing and payment information where required to process invoices or payments.
Communication records such as emails, messages, call notes, and feedback.
Health and safety information if relevant to carrying out work safely on site.

Information collected automatically

When you communicate with us digitally, we may collect limited technical information such as message timestamps or basic device and service logs where necessary for security, record keeping, or system administration. We do not use intrusive tracking practices without a lawful basis.

Information from third parties

We may receive personal data from third parties where needed to deliver our services, such as property managers, landlords, contractors, suppliers, or public authorities. We may also obtain information from professional referrals or public sources where relevant and lawful.

2. How We Use Personal Data

We use personal data only for legitimate business purposes connected with providing our services and meeting our obligations. These purposes may include:

responding to enquiries and preparing quotations;
booking, planning, and delivering tree surgery and related services;
assessing site access, safety requirements, and work specifications;
issuing invoices, managing accounts, and processing payments;
communicating with customers about appointments, service updates, and aftercare;
maintaining business records and audit trails;
managing complaints, disputes, and service quality;
meeting legal, tax, insurance, and regulatory requirements;
protecting against fraud, misuse, or unlawful activity.

We will not use your personal data for incompatible purposes without informing you and ensuring there is a lawful basis to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing personal data. Depending on the activity, we rely on one or more of the following:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotations, scheduling work, delivering services, managing payments, and handling service-related communication.

Legal obligation

We process data when needed to comply with legal obligations, including record keeping, tax and accounting duties, insurance requirements, and health and safety responsibilities.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, improving service delivery, preventing fraud, and keeping operational records.

Consent

In limited situations, we may rely on your consent, for example where specific optional communications or non-essential processing requires it. Where consent is used, you may withdraw it at any time.

Vital interests

In exceptional circumstances, we may process information to protect someone’s vital interests, such as in an emergency affecting safety on site.

4. Sharing and Processors

We do not sell personal data. However, we may share data with trusted third parties where necessary to operate our business and provide services. These third parties act as processors or, in some cases, independent controllers.

Types of processors we may use

IT and cloud service providers that store emails, documents, scheduling information, or backup data.
Accounting and invoicing providers that help manage financial records and payments.
Payment service providers that process card or online payments securely.
Administrative support providers that assist with bookings, customer records, or communications.
Safety, compliance, or specialist contractors where specific work coordination is required.

All processors are expected to handle data securely, use it only for agreed purposes, and implement appropriate technical and organisational safeguards. Where required by law, we will also share information with insurers, legal advisers, regulators, or public authorities.

5. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, unless a longer period is required by law or needed to resolve disputes. Retention periods vary according to the type of information and why it is held.

Quotation and enquiry records are usually kept for a limited period to manage follow-up and business administration.
Customer service and project records may be retained for several years to support continuity, warranty matters, and dispute resolution.
Financial and tax records are kept in line with statutory obligations.
Health and safety records are retained where required for compliance and risk management.

When data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices.

6. Data Security

We take reasonable and proportionate steps to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These steps may include access controls, secure storage, staff awareness, and routine checks of our systems and records. While no method of transmission or storage is completely risk-free, we aim to use appropriate safeguards at all times.

7. International Transfers

If any processor or service provider stores or accesses data outside the UK, we will ensure appropriate safeguards are in place so that your data remains protected in accordance with applicable law.

8. Your Rights

Subject to conditions and exemptions under data protection law, you have several rights regarding your personal data.

These rights include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your data has not been handled properly.

9. Children’s Data

Our services are intended for adults and businesses. We do not knowingly collect personal data from children unless it is necessary in a specific lawful context, such as site safety or family property arrangements, and only with appropriate safeguards.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practice, or service delivery. Any updated version will apply from the date it becomes effective. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

11. Summary of Our Approach

In short, Tree Surgeons Finsburypark only collects personal information that is necessary to provide services, manage business operations, and meet legal obligations. We rely on lawful bases such as contract, legal obligation, legitimate interests, consent, and, where relevant, vital interests. We retain data only as long as needed, use processors carefully, and respect your rights under data protection law. Our aim is to treat your personal data with care, transparency, and accountability at every stage.