Privacy Policy - Tree Surgeons Kingston

This Privacy Policy explains how Tree Surgeons Kingston collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Kingston customers in the area, including prospective customers, current customers, and anyone who interacts with our services in relation to tree care, tree surgery, pruning, removal, stump grinding, hedge maintenance, and related arboricultural work. We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Tree Surgeons Kingston provides professional tree care services to residential and commercial customers. In this policy, “we,” “us,” and “our” refer to Tree Surgeons Kingston. Personal data means any information that can identify a living individual directly or indirectly. This may include names, addresses, contact details, payment information, service history, and communication records.

2. Information We Collect

We collect only the information necessary to provide services, manage our relationship with customers, and meet legal obligations. The categories of data we may collect include:

Identity data: name, title, and any business or property owner details.
Contact data: address, phone number, email address, and preferred communication method.
Service and property data: property access details, site notes, photographs, job descriptions, quotation information, and records of completed work.
Financial data: invoice details, payment records, and limited billing information needed for transaction processing.
Technical data: limited website or device information where applicable, such as IP address or browser type, if you contact us through digital means.
Communication data: correspondence, enquiries, feedback, complaints, and any information you choose to share with us.

We generally do not collect special category data. If such information is accidentally provided, we will only use it where permitted by law and where necessary for a legitimate purpose connected to our services.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide quotations, assess work, and deliver tree surgery services;
to arrange appointments, access, and site visits;
to manage customer accounts and communications;
to prepare invoices, process payments, and maintain financial records;
to keep records of completed work, safety assessments, and customer preferences;
to comply with legal, regulatory, insurance, and tax obligations;
to handle complaints, disputes, or claims;
to improve our services, operations, and customer experience;
to protect our business, staff, customers, and property from fraud, misuse, or security risks.

We will only process personal data for specified, explicit, and legitimate purposes and will not use it in a way that is incompatible with those purposes.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis to process personal data. Depending on the context, Tree Surgeons Kingston may rely on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes, scheduling work, carrying out tree surgery services, and managing payments.

Legal Obligation

We may process data to comply with legal duties such as tax reporting, accounting requirements, health and safety obligations, and responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided these do not override your rights and freedoms. This may include responding to customer enquiries, maintaining records, improving services, managing risk, and protecting against fraud or misuse. We carry out a balancing assessment where required.

Consent

In some circumstances, we may rely on your consent, for example where it is appropriate to use certain optional communications or where sensitive information has been voluntarily supplied. Where consent is used, you may withdraw it at any time.

5. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as data processors or, in some cases, independent controllers. We only share the minimum information necessary and require appropriate safeguards.

Examples of processors and recipients may include:

IT and hosting providers: for secure storage, systems management, and data backup;
Accounting and bookkeeping providers: for financial administration, invoicing, and tax records;
Payment service providers: for processing card or online payments;
Communication services: for email, messaging, scheduling, and record management;
Insurance professionals, auditors, or legal advisers: where necessary for compliance or dispute resolution;
Subcontractors or specialist service partners: where required to complete work safely and effectively.

We may also disclose data where necessary to comply with legal requirements, enforce our terms, protect rights and property, or respond to lawful requests from public authorities. We do not sell personal data.

6. International Transfers

Where any processor or service provider stores or accesses data outside the UK, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent protections required by law. Our aim is to keep your data protected regardless of where it is processed.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including legal, accounting, reporting, and insurance requirements. Retention periods vary depending on the type of information and the reason it is held.

Customer and service records: retained for as long as needed to manage the service relationship and handle follow-up queries.
Financial and tax records: retained for the period required by law.
Job notes, quotes, and correspondence: retained for a reasonable period to support service history, warranty matters, or dispute resolution.
Safety and compliance records: retained where necessary to demonstrate legal compliance and manage risk.

When data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices.

8. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our procedures. No system is completely secure, but we work to keep risk as low as reasonably possible.

9. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to legal limitations and exemptions, but we will always consider requests carefully and respond within the required timeframe.

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you may request deletion of your data in certain circumstances.
Right to restrict processing: you may ask us to limit how we use your data in some situations.
Right to data portability: you may request certain data in a commonly used electronic format.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing relies on consent, you may withdraw it at any time.

If you exercise a right, we may need to verify your identity before responding. This helps protect your data from unauthorised disclosure.

10. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is necessary for a service-related reason and provided by a parent, guardian, or authorised adult. If we become aware that we have collected data from a child inappropriately, we will take steps to delete it where required.

11. Complaints and Further Information

If you have concerns about how we handle personal data, we encourage you to raise them with us so we can investigate and respond appropriately. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed. We aim to resolve issues fairly, promptly, and transparently.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any updates will take effect when published, and the revised version will apply to all Tree Surgeons Kingston customers in the area. We encourage you to review this policy periodically so you remain informed about how your personal data is used.

Last updated: This policy is effective as of the date it is published and remains in force until replaced.