Privacy Policy - Tree Surgeons Leyton

This Privacy Policy explains how Tree Surgeons Leyton collects, uses, stores, shares, and protects personal data relating to our customers, prospective customers, website users, and anyone who makes an enquiry about our tree surgery services. This policy applies to all Tree Surgeons Leyton customers in the Leyton area and to anyone whose personal data is processed by us in connection with our services.

We are committed to handling personal information lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only process personal data where we have a valid legal basis and we take appropriate technical and organisational steps to protect the information we hold.

1. Who We Are

Tree Surgeons Leyton provides professional tree care and related services for residential and commercial customers in and around Leyton. In the context of this Privacy Policy, we are the data controller for the personal data we collect and decide how and why that data is used.

Personal data means any information that can identify an individual directly or indirectly, such as a name, address, phone number, email address, or service history. Special category data is not routinely collected unless it is necessary and permitted by law.

2. Personal Data We Collect

We collect only the data needed to respond to enquiries, provide services, manage accounts, and meet our legal obligations. Depending on your interaction with us, we may collect the following information:

Identity and contact details such as name, address, email address, and telephone number.
Service details including property information, tree location, access notes, requested work, quotes, and job instructions.
Communication records such as enquiries, messages, complaints, feedback, and correspondence.
Payment and billing information where needed to process invoices, payments, refunds, and accounts.
Technical information such as basic device or browser data if you interact with us electronically.
Legal and compliance records including permissions, risk assessments, insurance-related information, and contract records.

We do not intentionally collect more data than is necessary. If you provide information about another person, you must ensure that you have the authority to share it with us.

3. How We Use Personal Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to deliver tree surgery and related services;
to arrange site visits, access, and job scheduling;
to communicate about appointments, service updates, and aftercare;
to issue invoices, process payments, and manage accounts;
to deal with complaints, disputes, or claims;
to maintain business records and meet legal obligations;
to improve our services, operations, and customer experience;
to protect our business, staff, customers, and property;
to prevent fraud, misuse, or unlawful activity.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose and that such use is permitted by law.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing personal data. The lawful bases we rely on are:

Contract

We process personal data where it is necessary to enter into or perform a contract with you, such as providing a quote, completing tree work, or managing billing and service delivery.

Legal Obligation

We may process data to comply with legal duties, such as tax recordkeeping, insurance requirements, health and safety obligations, and other statutory responsibilities.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include managing customer relationships, improving services, protecting against fraud, and maintaining secure business records.

Consent

Where required, we will rely on your consent, for example for certain optional communications. If we rely on consent, you may withdraw it at any time. Withdrawal of consent will not affect processing carried out before it was withdrawn.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties when necessary to operate our business and deliver services. These third parties act as processors or independent controllers depending on the circumstances.

Processors may include:

accounting and bookkeeping service providers;
payment service providers and invoicing systems;
IT support, cloud storage, and data backup services;
customer management or scheduling software providers;
professional advisers such as insurers, solicitors, or consultants;
subcontractors or specialist contractors engaged to assist with service delivery;
regulatory, legal, or law enforcement bodies where required by law.

We require processors to handle personal data securely, only on our instructions where applicable, and in compliance with data protection law. We do not sell personal data.

6. International Transfers

If any processor stores or accesses data outside the UK, we will take appropriate safeguards to ensure that personal data remains protected to an adequate standard. These safeguards may include recognised contractual protections and lawful transfer mechanisms.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, or reporting requirements. The exact retention period depends on the type of information and the reason it was collected.

In general:

Enquiry records may be kept for a limited period if no service is booked.
Customer and contract records are usually retained for the duration of the service relationship and for an appropriate period afterwards.
Invoice and tax records are retained in line with statutory requirements.
Complaint or claim records may be kept longer where needed to resolve disputes or defend legal claims.

When personal data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in a safe manner.

8. Data Security

We use reasonable and proportionate security measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and regular review of our data handling practices.

While no system is completely risk-free, we aim to reduce risks through careful data handling and by limiting access to those who need it for legitimate business purposes.

9. Your Rights

Under data protection law, you have several rights regarding your personal data. These rights may be subject to conditions and exemptions depending on the circumstances.

Right of access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete data.
Right to erasure - you can request deletion of your data in certain situations.
Right to restriction - you can ask us to limit how we use your data in some circumstances.
Right to data portability - you may request your data in a structured, commonly used format where applicable.
Right to object - you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable data protection law. We may need to verify your identity before responding.

10. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is necessary in the context of a customer relationship and lawful to do so. If we become aware that we have collected data unlawfully, we will take appropriate steps to remove it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, operational practices, or service arrangements. Any updated version will apply from the date it is published or otherwise communicated.

We encourage customers in the Leyton area to review this Privacy Policy periodically so they remain informed about how Tree Surgeons Leyton handles personal data.

12. Summary of Our Approach

Tree Surgeons Leyton is committed to privacy, transparency, and lawful data handling. We collect only the data needed to provide our services, rely on valid lawful bases, share information only with appropriate processors, keep data no longer than necessary, and respect your rights under UK data protection law. This policy applies to all Tree Surgeons Leyton customers in the area and covers the personal data processed in connection with our tree surgery services.