Privacy Policy - Tree Surgeons Westminster

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected by Tree Surgeons Westminster. It applies to all Tree Surgeons Westminster customers in the area, including prospective customers, existing customers, property owners, tenants, and anyone who makes an enquiry for tree surgery, arboricultural, hedge maintenance, or related services. We are committed to handling personal data in a lawful, fair, and transparent way in line with the UK GDPR and the Data Protection Act 2018.

1. Who we are

For the purposes of data protection law, Tree Surgeons Westminster is the data controller for the personal data described in this policy. This means we decide how and why your personal data is used. We only process data where we have a valid reason to do so and where this is necessary for our business operations, service delivery, legal compliance, or legitimate interests.

2. What personal data we collect

We may collect and process different types of personal information depending on how you interact with us and the services you request. The data we collect may include:

Identity details such as your name, title, and business name if applicable.
Contact details such as telephone number, email address, and postal address.
Property information including the location of the trees, access details, and service requirements.
Service records such as quotations, invoices, work schedules, job notes, and maintenance history.
Communication records including emails, messages, call notes, and correspondence relating to enquiries or complaints.
Payment information where needed for billing and account management.
Technical data such as basic website or device information if you submit information online.
Visual records such as photographs or videos of trees, sites, or completed work for assessment, planning, quality control, or evidence.

We do not seek to collect special category personal data unless it is necessary and lawfully permitted. If such information is inadvertently provided, we will handle it carefully and only use it where there is a lawful basis to do so.

3. How we use your data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To assess tree work requirements and plan site visits.
To deliver tree surgery and related services safely and efficiently.
To manage appointments, invoices, and payments.
To communicate with you about your booking, site access, or service updates.
To maintain records of work completed and customer preferences.
To handle complaints, disputes, insurance matters, or warranty issues.
To comply with legal and regulatory obligations.
To improve our services, systems, and customer experience.

We only use your personal data when necessary and always aim to keep our use proportionate to the purpose.

4. Lawful basis for processing

Under the UK GDPR, we must have a lawful basis to process personal data. Depending on the activity, Tree Surgeons Westminster may rely on one or more of the following bases:

Contract

We process your personal data where it is necessary to enter into or perform a contract with you. This includes providing quotations, carrying out agreed tree surgery work, issuing invoices, and managing customer accounts.

Legitimate interests

We may process your data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing and improving our services, keeping business records, handling customer enquiries, preventing fraud, and protecting our property and staff.

Legal obligation

Some data must be processed to meet legal requirements, such as tax, accounting, insurance, health and safety, and compliance with arboricultural or local authority obligations.

Consent

In limited cases, we may ask for your consent, for example where it is appropriate to use certain optional communication methods or to store specific information beyond what is required for service delivery. Where consent is used, you may withdraw it at any time.

5. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected. Retention periods vary depending on the type of information and the legal or business need to retain it.

Customer and job records are normally retained for a reasonable period after completion of services to allow us to handle queries, complaints, warranties, or future work requests.
Financial and tax records are retained for the period required by law.
Communication records are kept for as long as needed to manage the relationship or resolve issues.
Photographs and site records may be retained where they are necessary for proof of work, safety records, or legal protection.

When personal data is no longer needed, it is securely deleted, anonymised, or destroyed. We review retention periods periodically to ensure they remain appropriate.

6. Processors and data sharing

We may share personal data with trusted third-party processors that help us operate our business and provide services. These processors only act on our instructions and are required to protect your data appropriately.

Examples of processors may include:

IT and cloud service providers that host data, store records, or support email systems.
Accounting and invoicing providers that assist with billing, bookkeeping, and financial administration.
Payment service providers where payment processing is required.
Communication and customer management tools that help manage enquiries and service records.
Insurance providers, legal advisers, or auditors where needed for claims, compliance, or professional advice.
Subcontractors or specialist arboricultural partners where necessary to complete a job safely and effectively.

We may also disclose personal data where required by law, court order, regulatory request, or to protect our rights, staff, customers, or the public. We do not sell your personal data.

7. Data security

We use appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, misuse, or alteration. These measures may include restricted access, password protection, secure storage, staff training, and regular review of our data handling practices. While no system can be guaranteed to be completely secure, we take data protection seriously and aim to reduce risks as far as reasonably possible.

8. Your rights

As a data subject, you have a number of rights under the UK GDPR. These rights may apply in different circumstances and may be subject to legal limitations. Your rights include:

Right of access to request a copy of the personal data we hold about you.
Right to rectification to ask us to correct inaccurate or incomplete data.
Right to erasure to request deletion of your data in certain situations.
Right to restriction to ask us to limit how we use your data in certain circumstances.
Right to object to processing based on legitimate interests or direct marketing.
Right to data portability to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent where processing is based on consent.

If you wish to exercise any of these rights, we will respond in accordance with applicable law and within the required time limits. We may need to verify your identity before handling a request to ensure your information remains protected.

9. Cookies and online enquiries

If you contact us through an online form or similar digital method, we may process the information you provide to handle your enquiry. Any website-related technical information should be treated in line with this policy and any applicable cookie or website notices. We only collect what is reasonably necessary for communication, security, and service improvement.

10. International transfers

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place to protect it in accordance with data protection law. This may include standard contractual protections or other lawful transfer mechanisms. We take steps to ensure that any transfer does not reduce the level of protection your data receives.

11. Children’s data

Our services are generally intended for adults, property managers, landlords, tenants, and business customers. We do not knowingly collect personal data from children unless it is necessary and lawfully justified in connection with a service request. If we become aware that we have collected data inappropriately, we will take steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service arrangements. Any updated version will apply from the date it is made available. We encourage customers to review it periodically so they remain informed about how their data is handled.

13. How we uphold your privacy

Tree Surgeons Westminster is committed to keeping personal information secure, relevant, and limited to what is necessary. We aim to process data in a way that is lawful, transparent, and respectful of your rights. By using our services, making an enquiry, or engaging with us in the Westminster area, you acknowledge that your personal data may be processed as described in this policy.

This Privacy Policy applies to all Tree Surgeons Westminster customers in the area.