Privacy Policy - Tree Surgeons Finchley

This Privacy Policy explains how Tree Surgeons Finchley collects, uses, stores, and protects personal data relating to all Tree Surgeons Finchley customers in the area. It applies to anyone who uses our tree surgery services, requests a quotation, communicates with us, or otherwise interacts with our business in connection with services provided in Finchley and the surrounding area.

We are committed to handling personal data in a way that is lawful, fair, transparent, and secure. We also aim to ensure that individuals understand what information we collect, why we collect it, how long we keep it, and what rights they have under applicable data protection law, including the UK GDPR and the Data Protection Act 2018.

1. Information We Collect

We only collect personal data that is relevant to providing tree surgery services, managing customer relationships, meeting legal obligations, and operating our business effectively. The information we may collect includes:

Identity details such as your name and title.
Contact details such as your address, email address, and telephone number.
Property details where work is to be carried out, including access notes or site-specific instructions.
Service and transaction information such as quotations, booking details, invoices, payment records, and service history.
Communication records including emails, messages, call notes, and any feedback or complaints.
Technical information if you visit our digital platforms, such as basic device or usage data, where applicable.
Special category data only when strictly necessary and usually only if you choose to provide it, for example information about access or safety requirements that may relate indirectly to health or disability.

We generally do not seek to collect sensitive personal data unless it is needed to deliver a service safely or to comply with a legal requirement. If such information is provided, we will handle it with heightened care and only for the purpose for which it was shared.

2. How We Use Personal Data

We use personal data for a range of business and legal purposes connected to our services. These may include:

Providing tree surgery and related services.
Preparing quotations, assessing work requirements, and arranging site visits.
Managing appointments, completing work, and following up on service matters.
Processing payments and maintaining accounting records.
Responding to enquiries, feedback, or complaints.
Maintaining internal records and improving our services.
Meeting legal, tax, insurance, and regulatory obligations.
Protecting our business, staff, customers, and property from fraud, misuse, or unlawful activity.

We will only use your information where we have a valid legal reason to do so. We do not use personal data for purposes that are incompatible with the reasons it was originally collected, unless we have a lawful basis to do so and we have informed you where required.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Depending on the situation, we may rely on one or more of the following:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. For example, this includes providing quotations, scheduling work, carrying out tree surgery services, and managing billing.

Legal Obligation

We may process personal data when required to comply with legal obligations, such as tax record-keeping, health and safety duties, insurance requirements, or responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include record keeping, service improvement, fraud prevention, business administration, and protecting our legal rights.

Consent

In limited circumstances, we may rely on your consent, particularly where it is appropriate and required by law. If we do, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

4. Sharing and Processors

We may share personal data with trusted third parties when necessary to run our business and deliver services. These third parties act either as independent controllers or as processors acting on our instructions.

Examples of processors or service providers may include:

IT and cloud service providers that store data securely and support business systems.
Accounting and bookkeeping providers that help manage invoices, payments, and tax records.
Payment service providers that process card or electronic payments.
Administrative support services that help with scheduling or record management.
Professional advisers such as insurers, legal advisers, or auditors, where necessary.
Subcontractors or specialist contractors assisting with service delivery, where needed and appropriate.

We require processors to handle personal data securely, confidentially, and only for the purposes we specify. They must not use your information for their own purposes unless they have a separate lawful basis and have informed you appropriately.

We may also disclose personal data if required by law, court order, regulatory obligation, or to protect our rights, customers, staff, or the public. We do not sell personal data.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Retention periods vary depending on the type of data and the reason for processing.

Customer records and service history may be retained for several years after the completion of services to support business administration, warranty discussions, and dispute resolution.
Financial and tax records are generally kept for the period required by law.
Communication records may be kept for as long as necessary to manage ongoing customer relationships or resolve issues.
Health and safety records may be retained where needed to demonstrate compliance or manage claims.

When personal data is no longer needed, we will take reasonable steps to delete it securely or anonymise it so that it can no longer identify you.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures are designed to reflect the nature of the information we handle and the risks involved.

Security measures may include access controls, secure storage, limited staff access on a need-to-know basis, and careful management of digital and paper records. While no system can be guaranteed to be completely secure, we work to protect your data to a high standard and review our practices regularly.

7. Your Rights

As a data subject, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the legal basis for processing. They include:

Right of access – you can ask for a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – in some circumstances, you can ask us to delete your personal data.
Right to restrict processing – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – in some cases, you can ask for data you provided to us in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

You also have the right to raise concerns with the relevant supervisory authority if you believe your data has been handled unlawfully or unfairly. We encourage you to contact us first so we can try to resolve any issue promptly and respectfully.

8. International Transfers

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place to protect it. This may include using countries recognised as providing adequate protection or implementing approved contractual safeguards. Any such transfer will be carried out in line with applicable legal requirements.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we process personal data. Any updates will take effect when published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their information is used.

10. Scope of This Policy

This policy applies to all Tree Surgeons Finchley customers in area, including prospective customers, current customers, and individuals who have previously used our services. By engaging with us, requesting services, or sharing your details, you acknowledge that your personal data may be processed in accordance with this policy.

We are committed to maintaining transparency, accountability, and respect for privacy in everything we do. If we change the way we process data in a way that materially affects your rights, we will take steps to notify you where required.