Privacy Policy - Tree Surgeons Enfield

This Privacy Policy explains how Tree Surgeons Enfield collects, uses, stores, shares, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Tree Surgeons Enfield customers in the area, including individuals and organisations who enquire about, receive, or otherwise interact with our tree surgery services.

We are committed to handling personal information in a lawful, fair, transparent, and secure manner. We only collect data that is necessary for delivering our services, managing customer relationships, meeting legal obligations, and improving our operations. By using our services or contacting us about our services, you acknowledge that your personal data may be processed as described in this policy.

1. Who We Are

Tree Surgeons Enfield provides tree surgery and related arboricultural services to customers in Enfield and surrounding local areas. For the purposes of data protection law, we act as the data controller when we decide why and how your personal data is processed.

In some situations, we may act with other organisations as separate controllers, or we may use third parties to process data on our behalf. Where this applies, we take steps to ensure that appropriate data protection safeguards are in place.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, and, where relevant, business name.
Contact data: address, email address, telephone number, and other communication details.
Service and enquiry data: information you provide about your property, trees, site access, service requirements, and preferred appointment times.
Transaction data: details relating to quotations, invoices, payments, and service history.
Technical data: limited website or device information, such as IP address, browser type, and usage data, where applicable.
Correspondence data: records of emails, messages, calls, complaints, or feedback.
Marketing preferences: your choices about receiving marketing or service updates, where relevant.

We do not intentionally collect special category data unless it is necessary and lawful to do so, for example if you voluntarily provide information relevant to access needs or legal claims. We ask that you only share information that is relevant to your enquiry or service.

3. How We Collect Data

We collect personal data in several ways:

directly from you when you make an enquiry, request a quotation, or use our services;
from correspondence by phone, email, message, or written communication;
from property owners, managers, or authorised representatives acting on your behalf;
from third parties involved in service delivery, such as subcontractors or payment providers;
from publicly available sources where necessary for service planning or legal compliance;
automatically through technical systems if you interact with any online service used by us.

We aim to collect only the data needed for a specific and legitimate purpose. We do not sell personal data.

4. Why We Use Your Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to arrange site visits, assessments, and tree surgery services;
to manage bookings, contracts, and customer communication;
to issue invoices, receive payments, and maintain accounting records;
to comply with legal, regulatory, insurance, and tax obligations;
to protect our business, customers, staff, and third parties;
to resolve disputes, handle complaints, and manage claims;
to improve our services, processes, and customer experience;
to send non-marketing service information where necessary for the work we provide.

Where required, we will ensure that processing is limited to what is relevant and proportionate for the intended purpose.

5. Lawful Basis for Processing

We process personal data only where a lawful basis under the UK GDPR applies. Depending on the context, our lawful bases may include:

Contract

We process personal data where it is necessary to take steps before entering into a contract, or to perform a contract with you. This includes providing quotations, scheduling work, delivering services, and handling payment arrangements.

Legal Obligation

We may process data to comply with legal duties, such as tax record-keeping, health and safety obligations, insurance requirements, and responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. This may include managing our business, improving services, preventing fraud, securing systems, and keeping appropriate records.

Consent

Where we rely on consent, such as for certain marketing communications or optional data uses, you have the right to withdraw consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

Vital Interests

In rare cases, we may process data where necessary to protect someone’s vital interests, such as in an emergency involving health or safety.

6. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, including to meet legal, accounting, insurance, and reporting requirements. Retention periods depend on the type of data and the reason it is held.

Customer and contract records: retained for the duration of the relationship and for a reasonable period afterwards.
Financial and tax records: retained in line with statutory requirements.
Correspondence and complaint records: retained for as long as needed to resolve the matter and defend our legal position if necessary.
Marketing preferences: retained until you opt out or until they become outdated.

When data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a safe manner.

7. Processors and Third Parties

We may share personal data with trusted third parties that help us operate our business. These parties act as data processors or, in some cases, independent controllers. They are only allowed to use your data for the purposes we specify or where they have their own legal obligations.

Examples of processors or third parties may include:

administrative support providers;
accounting and bookkeeping services;
payment service providers;
IT and cloud storage providers;
communications or scheduling systems;
subcontractors or specialist service partners assisting with tree surgery work;
legal, insurance, or professional advisers where necessary.

We require appropriate contractual protections and security measures when using processors. We do not permit processors to use personal data for their own unrelated purposes.

8. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures may include access controls, secure storage, limited permissions, staff awareness, and careful handling of records.

Although we take data security seriously, no system can be guaranteed to be completely secure. If a personal data breach occurs, we will assess the risk and take appropriate action in line with our legal obligations.

9. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to ask us to limit the way we use your data in certain cases.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to receive certain data in a structured, commonly used format, where applicable.
Right to withdraw consent: where processing is based on consent.

These rights are not absolute and may be subject to conditions or exemptions under applicable law. If you make a request, we may need to verify your identity before responding.

10. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We only allow such transfers where necessary and where a suitable level of protection is maintained.

11. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is provided by a parent, guardian, or authorised adult in connection with a service request. If we become aware that we have collected data unlawfully, we will take appropriate steps to delete or secure it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any revised version will apply from the date it is published or communicated, as appropriate.

We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

13. Summary of Key Principles

Tree Surgeons Enfield processes personal data lawfully, transparently, and securely. We collect only the information needed to provide services, maintain records, meet legal obligations, and protect our legitimate interests. We retain data only for as long as necessary, use trusted processors under appropriate safeguards, and respect your legal rights in relation to your personal information.

If you are a customer of Tree Surgeons Enfield in the area, this policy applies to the personal data we hold about you in connection with our services.