Privacy Policy - Tree Surgeons Gipsyhill

This Privacy Policy explains how Tree Surgeons Gipsyhill collects, uses, stores, shares, and protects personal data when providing tree surgery and related services. It applies to all Tree Surgeons Gipsyhill customers in the area, including individuals, property owners, tenants, managing agents, landlords, and business clients who use our services or communicate with us about our work.

We are committed to handling personal information in a lawful, fair, and transparent way. This policy is written to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We may collect and process different types of personal data depending on how you interact with us. The information we collect may include:

Identity details such as your name or the name of your organisation.
Contact details such as address, email address, and telephone number.
Property information including site address, access details, and relevant notes about trees or outdoor areas.
Service information such as the nature of your enquiry, quotes requested, job specifications, and records of completed work.
Payment and billing information such as invoices, payment status, and transaction records.
Communication records including messages, call notes, and correspondence relating to estimates, appointments, complaints, or follow-up work.
Technical data such as limited website or device data if you contact us online, where applicable.

We do not intentionally collect more data than is necessary for the purposes described in this policy. Where we need to collect particularly sensitive information, we will only do so if there is a lawful reason and if it is relevant to the service being delivered.

2. How We Use Personal Data

Tree Surgeons Gipsyhill uses personal data only where needed to manage our business and provide our services properly. We may use your information to:

respond to enquiries and provide quotes;
arrange site visits, surveys, and appointments;
carry out tree surgery, pruning, removal, stump grinding, and related services;
manage contracts and service delivery;
issue invoices, process payments, and maintain accounting records;
keep records of work completed, customer preferences, and service history;
handle complaints, queries, and warranty or liability issues;
meet legal and regulatory obligations;
improve our operations, customer service, and internal processes.

We may also use information to protect our legitimate business interests, for example to prevent fraud, maintain security, or defend legal claims. Any use of data will be kept relevant and proportionate to the reason for collection.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of personal data processing. Tree Surgeons Gipsyhill may rely on the following lawful bases:

Contract

We process personal data when it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes providing quotes, arranging work, and carrying out services you have booked.

Legal Obligation

We may process personal data where necessary to comply with legal duties, including tax, accounting, health and safety, and record-keeping obligations.

Legitimate Interests

We may process data where it is in our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms. Examples include improving our services, maintaining business records, preventing misuse, and communicating about existing work.

Consent

In limited cases, we may rely on your consent, for example for certain types of optional communication. Where consent is used, you may withdraw it at any time.

Special category data is not usually required for our services. If such data is ever processed, we will only do so where permitted by law and with appropriate safeguards.

4. Data Sharing and Processors

We may share personal data with trusted third parties where necessary for business operations, legal compliance, or service delivery. These third parties may act as processors or, in some cases, independent data controllers.

Examples of processors may include:

IT and cloud storage providers;
accounting and bookkeeping providers;
payment processing services;
customer management or administration systems;
communication platforms used for email or messaging;
professional advisers such as lawyers, insurers, or auditors where necessary.

When we use processors, we require them to protect personal data, process it only on our instructions, and use suitable technical and organisational security measures. We do not sell personal data.

We may disclose information where required by law, court order, law enforcement request, or to protect our rights, employees, customers, or the public. If a business transfer occurs, such as a restructuring or sale, personal data may be transferred as part of that process, subject to appropriate safeguards.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including to meet legal, accounting, insurance, and regulatory requirements. Retention periods can vary depending on the type of record.

Customer and project records: retained for the period needed to manage services and handle follow-up issues.
Financial and tax records: retained for the period required by law.
Communication records: retained for a reasonable period to support customer service and dispute resolution.
Health and safety or incident-related records: retained where necessary for legal compliance and insurance purposes.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. Retention periods may be extended if needed to establish, exercise, or defend legal claims.

6. Security of Your Information

Tree Surgeons Gipsyhill uses appropriate safeguards to protect personal data from unauthorised access, loss, misuse, or alteration. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and limited access to records on a need-to-know basis.

While we work hard to protect your information, no system is completely secure. If a data incident occurs that affects your rights and freedoms, we will take appropriate action in line with applicable law, including notifying relevant authorities where required.

7. Your Rights

As a data subject under UK GDPR, you have rights over your personal information. Subject to legal limits, these rights may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of personal data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to data portability – to receive certain data in a structured, commonly used format.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

To help protect privacy, we may need to verify your identity before responding to a request. We aim to respond within the time limits required by law.

8. Automated Decision-Making

We do not normally use automated decision-making or profiling in a way that produces legal or similarly significant effects. If this changes, we will update this policy and explain the logic involved, the significance, and the possible consequences for you.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or business practices. The most current version will apply to your use of our services and any current processing of your personal data. We encourage customers to review the policy periodically to stay informed.

10. Summary of Our Commitment

Tree Surgeons Gipsyhill is dedicated to treating personal information with care, transparency, and respect. We only collect data that is necessary, use it for clear and lawful purposes, keep it secure, and retain it only for as long as needed. We also ensure that customers in the area have meaningful rights and can exercise control over their information.

This policy applies to all Tree Surgeons Gipsyhill customers in area. By using our services or contacting us about a service, you acknowledge that your personal data may be processed in accordance with this Privacy Policy and applicable data protection law.