Privacy Policy - Tree Surgeons Paddington

This Privacy Policy explains how Tree Surgeons Paddington collects, uses, stores, shares, and protects personal data relating to customers, prospective customers, and other individuals in the Paddington area. It applies to all Tree Surgeons Paddington customers in area, including anyone who requests quotes, books services, communicates with us, or otherwise uses our tree surgery services. We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We collect only the information that is necessary for legitimate business, legal, and operational purposes. The categories of personal data we may collect include:

Identity data such as your name and, where relevant, the name of your business or property owner.
Contact data such as address, email address, and telephone number.
Service data such as details about the trees, hedges, or outdoor areas requiring work, access requirements, and service preferences.
Payment and transaction data such as payment status, invoice details, and records of services provided.
Communication data such as messages, quotations, complaints, feedback, and notes from phone, email, or other correspondence.
Technical data when you interact with digital systems we use, such as IP address, browser type, device information, and basic usage information.
Safety and site data where necessary, including access notes, risk-related observations, and information needed to carry out tree surgery safely.

We generally do not seek to collect special category data. If such information is provided incidentally, for example in relation to access, health, or safety needs, we will only process it where permitted by law and where appropriate safeguards are in place.

2. How We Use Personal Data

We use personal data for the following purposes:

To provide quotations, assess work, and arrange tree surgery services.
To carry out work safely and efficiently at your property or site.
To manage bookings, invoicing, payments, and account administration.
To communicate with you about appointments, service updates, and changes to scheduled work.
To respond to enquiries, complaints, and requests.
To maintain records for business, insurance, tax, and legal compliance.
To improve service quality, staff training, and operational planning.
To defend or establish legal claims where necessary.

We will only use your personal data for the purpose for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose. If we need to use it for an unrelated purpose, we will notify you and explain the legal basis.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the circumstances, Tree Surgeons Paddington relies on one or more of the following lawful bases:

Contract

We process your personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes, confirming bookings, completing tree surgery work, and handling payment administration.

Legal Obligation

We may process personal data where required to comply with legal obligations, including tax, accounting, health and safety, insurance, and record-keeping requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include managing our business, improving services, preventing fraud, ensuring site safety, keeping internal records, and handling customer enquiries. When we rely on legitimate interests, we consider whether the processing is necessary and whether it is proportionate.

Consent

In limited cases, we may rely on your consent, for example where it is the most appropriate basis for specific optional processing. Where consent is used, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing and Processors

We may share personal data with trusted third parties where necessary for the operation of our business and the delivery of services. These third parties act as processors or, in some cases, independent controllers. We only share the minimum information required and take reasonable steps to ensure data is protected.

Examples of processors and service providers may include:

IT and cloud storage providers used to manage records, scheduling, and communications.
Accounting, invoicing, and payment service providers.
Professional advisers such as insurers, legal advisers, or auditors.
Subcontractors or specialist service partners assisting with specific tree surgery tasks, where needed.
Waste disposal or recycling providers where relevant to the services we deliver.

We may also disclose data to public authorities, regulators, courts, or law enforcement where required by law or where disclosure is necessary to protect our rights, property, staff, customers, or the public.

Where processors act on our behalf, they are required to process personal data only in accordance with our instructions and to implement appropriate security measures. We aim to use providers that maintain suitable confidentiality, integrity, and availability standards.

5. Retention of Personal Data

We keep personal data only for as long as it is necessary for the purposes for which it was collected, including legal, accounting, insurance, and dispute-resolution requirements. Retention periods may vary depending on the type of information and the reason for processing.

Customer and contract records are usually kept for the duration of the service relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law.
Correspondence and quotations may be retained for operational and evidential purposes.
Safety and incident records may be kept where necessary to demonstrate compliance or manage liability.

When personal data is no longer needed, we will delete, anonymise, or securely archive it in accordance with our retention practices. In some cases, we may retain records for longer where there is an active or potential legal claim.

6. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and limited access to information on a need-to-know basis. While no system can be guaranteed to be completely secure, we work to maintain appropriate safeguards proportionate to the nature of the data we hold.

7. Your Rights

Under data protection law, you have certain rights in relation to your personal data. These rights may be subject to conditions and exceptions, depending on the circumstances.

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete information.
Right to erasure – in some cases, you may request deletion of your data.
Right to restriction – you may ask us to restrict how we use your data in certain situations.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to data portability – in some circumstances, you may request your data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, you may contact us using the usual communication methods you have used with us. We may need to verify your identity before responding. We aim to respond within the time limits required by law.

8. Complaints

If you have concerns about how your personal data is handled, we encourage you to raise them with us first so we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will apply from the date it is published or otherwise made available. We recommend reviewing this policy periodically to stay informed about how we protect personal data.

10. Additional Notes

We expect all personal data to be provided accurately and kept up to date where relevant. Please only share information that is necessary for us to deliver the requested service. Where we receive data relating to third parties, you should ensure that you have the authority to provide it and that those individuals are aware of this policy where appropriate.

Tree Surgeons Paddington values privacy and treats customer information with care. Our approach is designed to be lawful, fair, and transparent, while supporting the safe and efficient delivery of services across the Paddington area. By engaging our services, you acknowledge that your personal data may be processed as described in this Privacy Policy and in accordance with applicable data protection laws.