Privacy Policy - Tree Surgeons Hayes

This Privacy Policy explains how Tree Surgeons Hayes collects, uses, stores, shares, and protects personal data when providing tree surgery and related services. It applies to all Tree Surgeons Hayes customers in the area, including residential, commercial, and property management clients. We are committed to handling personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What Information We Collect

We only collect personal data that is necessary for delivering our services, managing enquiries, completing work, and meeting legal or operational requirements. The information we may collect includes:

Identity details: name, title, and related identifying information.
Contact details: address, email address, telephone number, and preferred communication method.
Service information: details about the trees, site conditions, access arrangements, work requested, and service history.
Payment information: billing details, invoice records, and payment status. We do not keep unnecessary card information where payment is handled by a third-party payment provider.
Technical information: limited data such as device information or basic enquiry records if you contact us through digital systems.
Correspondence: messages, complaints, feedback, and notes from communications with us.

We do not intentionally collect special category data unless it is needed for a specific lawful reason. If such information is provided voluntarily, it will be handled carefully and only where permitted by law.

2. How We Use Personal Data

Tree Surgeons Hayes uses personal data for the following purposes:

To respond to enquiries and prepare quotations.
To assess work requirements and plan safe tree surgery services.
To schedule visits, manage appointments, and carry out contracted work.
To issue invoices, record payments, and maintain financial records.
To communicate about service updates, site matters, and follow-up requirements.
To meet legal obligations, including tax, accounting, and health and safety duties.
To resolve disputes, defend legal claims, and maintain business records.
To improve the quality of our services and customer experience.

We only use personal data in ways that are relevant and proportionate to the service being provided.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for using personal data. Depending on the situation, Tree Surgeons Hayes relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with a customer. This includes preparing quotations, arranging services, carrying out agreed work, and handling billing.

Legal obligation

We may process personal data when required to comply with legal obligations, such as maintaining financial records, meeting safety requirements, or responding to lawful requests from authorities.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include record keeping, service management, fraud prevention, and ensuring the effective running of the business.

Consent

In limited cases, we may rely on consent, for example where it is required for certain communications or optional uses of data. Where consent is used, you may withdraw it at any time.

4. Sharing and Processors

We do not sell personal data. We may share information only where necessary for delivering our services, meeting legal requirements, or operating our business securely. Personal data may be shared with trusted processors who act on our instructions and are required to protect data appropriately.

Examples of processors may include:

Accounting and bookkeeping service providers.
Payment processing providers.
IT and data storage providers.
Scheduling, communication, or administrative software providers.
Professional advisers such as lawyers or accountants, where necessary.

Where processors handle data on our behalf, they are only allowed to use it for the agreed purpose and must maintain suitable security measures. We may also disclose data to insurers, regulators, law enforcement, or other authorities where required by law.

5. Data Retention

We keep personal data only for as long as it is needed for the purpose it was collected. Retention periods depend on the type of information and why it is held. In general:

Enquiry records are kept for a reasonable period to manage follow-up communication and future reference.
Customer and service records are retained for the duration of the business relationship and for a period afterwards where needed for tax, legal, or insurance purposes.
Financial and invoice records are kept for the period required by law.
Correspondence and complaint records may be retained for resolving disputes or defending claims.

When personal data is no longer required, it is securely deleted, anonymised, or otherwise disposed of safely.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and careful management of third-party systems. While no system can be guaranteed completely secure, we work to keep personal data protected in line with the nature and sensitivity of the information.

7. Your Rights

Individuals whose personal data we process have a range of rights under data protection law. Subject to legal limits, these may include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete information.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to ask us to limit how we use your data in some situations.
Right to object: to object to processing based on legitimate interests.
Right to data portability: to request transfer of certain data in a structured format where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

You also have the right to raise concerns with the Information Commissioner’s Office if you believe your data protection rights have not been respected.

8. Children’s Data

Tree Surgeons Hayes does not knowingly collect personal data from children unless it is necessary in connection with a property, service arrangement, or legal requirement and only where lawful. If we become aware that data has been collected inappropriately, we will take reasonable steps to delete or protect it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or business practices. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

10. Summary of Our Commitment

Tree Surgeons Hayes values privacy and handles personal data responsibly, fairly, and transparently. We collect only what is necessary, use it for clear and lawful purposes, keep it secure, retain it only as long as needed, and respect the rights of every customer in the area. Our aim is to provide a safe, reliable service while ensuring that personal information is treated with care and in compliance with data protection law.