Privacy Policy - Tree Surgeons Hampstead

This Privacy Policy explains how Tree Surgeons Hampstead collects, uses, stores, shares, and protects personal data when providing tree surgery and related services. It applies to all Tree Surgeons Hampstead customers in the area, including prospective customers, existing customers, suppliers, and website or telephone enquirers where applicable. We are committed to handling personal data lawfully, fairly, transparently, and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tree Surgeons Hampstead operates as a tree surgery service provider offering arboricultural services such as tree pruning, tree removal, stump grinding, site surveys, safety assessments, and related maintenance. For the purposes of data protection law, we act as a data controller when we decide how and why personal data is processed.

We understand that privacy matters. This policy sets out the type of information we may collect, the reasons we process it, the legal grounds we rely on, how long we keep it, who may process it on our behalf, and the rights you have in relation to your personal data.

2. Personal Data We Collect

We may collect and process different categories of personal data depending on the service requested and the way you interact with us. This may include:

Identity information such as your name, title, and, where relevant, company name.
Contact information such as address, email address, and telephone number.
Property and service information including property location, access notes, service requirements, job details, photographs of trees or sites, and quotes or invoices related to the work.
Payment information such as transaction records and billing details.
Communication records including emails, text messages, call notes, complaints, queries, and feedback.
Technical information where applicable, such as IP address, browser type, and basic usage data if you visit our digital services.

We generally do not seek to collect special category data unless it is necessary and relevant. If such information is incidentally provided, for example through correspondence, we will only process it where a lawful basis applies and where appropriate safeguards are in place.

3. How We Use Your Data

We use personal data for the following purposes:

to provide quotations and assess tree surgery requirements;
to arrange and deliver services safely and effectively;
to manage customer accounts, billing, and payment processing;
to communicate with you about appointments, changes, and service updates;
to maintain records of work completed, including safety and site information;
to handle complaints, disputes, and customer queries;
to meet legal, regulatory, tax, insurance, and accounting obligations;
to improve our services, business operations, and customer experience;
to protect against fraud, misuse, or unlawful activity;
to establish, exercise, or defend legal claims where necessary.

We will only use your personal data for the purpose for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. Depending on the context, Tree Surgeons Hampstead relies on one or more of the following lawful bases:

Contract

Processing is necessary for the performance of a contract or to take steps at your request before entering into a contract. This includes providing quotes, arranging services, completing tree work, sending invoices, and managing payments.

Legal Obligation

We may process data to comply with legal obligations, including accounting rules, tax obligations, health and safety requirements, insurance needs, and record-keeping duties.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. Examples include service administration, customer support, internal record keeping, fraud prevention, and operational improvement. We always consider your reasonable expectations and the impact of the processing before relying on this basis.

Consent

In limited cases, we may rely on your consent, for example for certain optional communications. Where consent is used, it will be freely given, specific, informed, and easy to withdraw. Withdrawal of consent will not affect the lawfulness of processing carried out before it was withdrawn.

5. Sharing and Processors

We do not sell personal data. However, we may share it with trusted third parties where necessary to run our business and deliver services. These third parties may act as processors or independent controllers depending on the service they provide.

Examples of processors and service providers may include:

accountants and bookkeeping providers;
payment processors and banking services;
IT, cloud storage, and software providers;
customer management and scheduling systems;
document storage and secure backup providers;
professional advisers, such as insurers or legal advisers, where required;
subcontractors or specialist arboricultural support providers engaged to complete a job.

Where we use processors, they are required to process personal data only on our instructions, keep it secure, and comply with applicable data protection laws. If a third party acts as an independent controller, they will process your data under their own privacy terms and legal obligations.

We may also disclose information where required by law, court order, regulatory request, or to protect our rights, property, staff, customers, or the public.

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, and to satisfy legal, accounting, insurance, and operational requirements. Retention periods may vary depending on the type of record and the reason it is held.

As a general approach:

quotes and general enquiry records may be kept for a reasonable period to manage follow-up and business administration;
customer service and job records may be kept for the duration of the relationship and for a period afterwards;
invoices, payment, and tax-related records are usually retained for the legally required period;
complaints, claims, and legal records may be retained longer where necessary to resolve disputes or defend claims.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, password protection, encryption where appropriate, staff confidentiality obligations, and regular review of data handling practices.

Although we work hard to protect your information, no system can be guaranteed to be completely secure. If a data breach affecting your personal data occurs, we will act in accordance with applicable legal requirements and notify the relevant authorities and affected individuals where necessary.

8. International Transfers

Where personal data is transferred outside the UK, we will only do so where adequate safeguards are in place and the transfer complies with data protection law. This may involve the use of approved contractual protections or transfers to countries recognised as providing an adequate level of protection.

9. Your Rights

You have a number of rights under data protection law in relation to your personal data. Subject to legal limits, these may include:

The right of access to request a copy of the personal data we hold about you.
The right to rectification to correct inaccurate or incomplete data.
The right to erasure in certain circumstances, sometimes called the right to be forgotten.
The right to restrict processing in certain situations.
The right to object to processing based on legitimate interests or direct marketing.
The right to data portability where processing is based on consent or contract and carried out by automated means.
The right to withdraw consent where consent is the lawful basis.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to contact us first so that we can try to resolve any concern promptly and fairly.

10. Children’s Data

Our services are generally intended for adults acting on their own behalf or on behalf of property owners or managers. We do not knowingly collect personal data from children in a way that is unnecessary for service provision. If we become aware that data has been collected improperly, we will take reasonable steps to delete it or obtain appropriate authorisation where lawful.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our data handling practices. Any revised version will apply from the date it is published or otherwise communicated. We recommend reviewing this policy periodically so that you remain informed about how we use personal data.

12. Summary of Our Commitment

Tree Surgeons Hampstead is committed to respecting your privacy and using personal data responsibly. We collect only what we need, use it for clear and lawful purposes, keep it only as long as necessary, and protect it through appropriate safeguards. This policy applies to all Tree Surgeons Hampstead customers in area and is designed to reflect our ongoing commitment to lawful, transparent, and fair data handling.

In short, we aim to ensure that your information is handled with care, used appropriately, and kept secure while we deliver reliable tree surgery services.