Privacy Policy - Tree Surgeons Carshalton

This Privacy Policy explains how Tree Surgeons Carshalton collects, uses, stores, shares, and protects personal data when providing tree surgery and related services. It applies to all Tree Surgeons Carshalton customers in the area, including prospective customers, residential clients, commercial clients, and anyone who interacts with us in connection with our services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tree Surgeons Carshalton refers to the business operating under this name and any staff, contractors, or authorised representatives acting on its behalf. For the purposes of data protection law, we act as the data controller for the personal data we collect and use in relation to our services. This means we decide why and how your personal data is processed.

2. Personal Data We Collect

We only collect personal data that is necessary to provide our services, manage our business, and meet our legal obligations. The types of information we may collect include:

Identity data, such as your name and title.
Contact data, such as your address, email address, and telephone number.
Property and service data, such as details about your garden, trees, access arrangements, service instructions, and job specifications.
Transaction data, such as payment records, invoices, and records of services provided.
Communication data, including enquiries, complaints, quotes, correspondence, and feedback.
Technical data, if you visit any digital services we use, such as device information, IP address, and basic usage data.
Documentation data, such as records needed for insurance, safety, and compliance purposes.

We may also receive information from third parties where necessary, such as from property owners, managing agents, insurers, payment providers, or public sources. We do not intentionally collect special category data unless it is essential and a lawful basis applies.

3. How We Use Your Data

We use personal data for the following purposes:

To provide quotations, assess work requirements, and schedule services.
To carry out tree surgery, maintenance, pruning, removals, stump grinding, and related work.
To communicate with you before, during, and after a job.
To process payments, issue invoices, and keep financial records.
To maintain safety, quality, and operational records.
To manage complaints, disputes, and insurance matters.
To comply with legal, tax, and regulatory obligations.
To improve our services and manage our business effectively.

We will never use your personal data for purposes that are incompatible with the reasons it was collected unless we have a lawful basis to do so.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis to process personal data. Depending on the circumstances, Tree Surgeons Carshalton relies on one or more of the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotations, delivering agreed services, taking payment, and managing customer instructions.

Legal Obligation

We process data where necessary to comply with legal requirements, such as accounting, tax, health and safety, insurance, and record-keeping obligations.

Legitimate Interests

We may process personal data where it is in our legitimate interests and where those interests are not overridden by your rights and freedoms. This may include managing customer relationships, responding to enquiries, preventing fraud, maintaining business records, and improving our services.

Consent

In limited cases, we may rely on your consent, for example where you agree to receive certain types of marketing communication. Where consent is used, you can withdraw it at any time.

5. How We Share Personal Data

We only share personal data when necessary and with appropriate safeguards. Data may be shared with trusted processors and service providers who help us operate our business. These may include:

Payment processors who handle card or electronic payments.
Accounting and bookkeeping providers who help with invoicing and financial administration.
IT and cloud service providers who store or support secure business systems.
Communication service providers who help deliver emails, messages, or calls.
Insurance providers and claims handlers where needed for risk management or disputes.
Subcontractors or specialist trades engaged to support specific services, where appropriate.
Professional advisers, such as accountants or legal advisers.
Public authorities where disclosure is required by law.

All processors are expected to handle personal data securely and only in accordance with our instructions and applicable data protection law. We do not sell your personal data.

6. International Data Transfers

Where any processor stores or accesses data outside the UK, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, the UK International Data Transfer Agreement, or equivalent legal protections to ensure your personal data remains protected.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, insurance, and operational requirements. Retention periods depend on the type of data and the reason for holding it. In general:

Customer and job records are kept for a reasonable period after completion of work so we can manage queries, warranties, and follow-up issues.
Financial records are kept for the period required by tax and accounting law.
Insurance and incident records may be kept longer where necessary to defend or manage claims.
Marketing consent records are kept until you withdraw consent or we no longer need them.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful selection of processors. Although no system can be guaranteed to be completely secure, we take reasonable steps to reduce risk and protect your information.

9. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may apply depending on the circumstances:

Right of access - you may request a copy of the personal data we hold about you.
Right to rectification - you may ask us to correct inaccurate or incomplete data.
Right to erasure - you may ask us to delete your data in certain situations.
Right to restrict processing - you may ask us to limit how we use your data in certain cases.
Right to object - you may object to processing based on legitimate interests or direct marketing.
Right to data portability - you may request certain data in a structured, commonly used format.
Right to withdraw consent - where we rely on consent, you can withdraw it at any time.

You also have the right to raise concerns with the Information Commissioner's Office (ICO) if you believe your data has been mishandled. We encourage you to contact us first so we can try to resolve any issue promptly and fairly.

10. Cookies and Similar Technologies

If we use websites or digital tools that involve cookies or similar technologies, these may collect limited technical data to support functionality, security, and usage analysis. Where required, we will provide notice and request consent before placing non-essential cookies. You can manage cookie settings through your browser or device settings.

11. Children’s Data

Our services are not directed to children, and we do not knowingly collect personal data from children unless it is necessary in connection with a property, household, or service request and appropriate lawful grounds exist. If we become aware that data has been collected incorrectly, we will take steps to delete it where required.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or how we process personal data. Any updated version will apply from the date it is made available. We encourage you to review this policy periodically so you remain informed about how we handle your information.

13. Summary of Key Principles

At Tree Surgeons Carshalton, we aim to process personal data in a way that is:

Lawful and based on a valid legal ground.
Fair and not misleading.
Transparent so you understand how your data is used.
Limited to what is necessary for the service.
Secure through suitable protective measures.
Retained only as long as needed for the relevant purpose.

This Privacy Policy is intended to provide clear information to all Tree Surgeons Carshalton customers in the area about how their personal data is handled. By using our services, making an enquiry, or allowing us to carry out work, you acknowledge that your information may be processed as described in this policy and in accordance with applicable law.