Privacy Policy - Tree Surgeons Kilburn

This Privacy Policy explains how Tree Surgeons Kilburn collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Kilburn customers in the area, including people who enquire about our services, request quotations, book work, or receive tree surgery and related services. We are committed to handling personal information in a lawful, fair, transparent, and secure manner in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who This Policy Applies To

This policy applies to all customers, prospective customers, property owners, tenants, business clients, contractors, and other individuals in the Kilburn area who interact with Tree Surgeons Kilburn. It also applies where we process personal information on behalf of a customer as part of delivering our services at a property or site.

2. Information We Collect

We only collect personal data that is necessary for providing our services, managing customer relationships, meeting legal obligations, and maintaining our business operations. The types of information we may collect include:

Identity details such as your name and, where needed, company name.
Contact details such as phone number, email address, and service address.
Service information such as details of the work requested, property access notes, site photographs, and job specifications.
Payment and billing data such as invoice details, payment status, and transaction records.
Communication records including emails, call notes, text messages, complaint details, and feedback.
Technical information if you interact with us online, such as device or browser information and basic usage data.
Safety and access information that may be needed to carry out tree surgery safely at a site.

We do not intentionally collect more information than required. In some circumstances, we may also receive data from third parties such as landlords, managing agents, insurers, local authorities, or other individuals arranging work on your behalf.

3. How We Use Personal Data

Tree Surgeons Kilburn uses personal data for the following purposes:

To respond to enquiries and provide quotations.
To plan, schedule, and carry out tree surgery and related services.
To manage customer accounts, billing, and payments.
To maintain service records and job histories.
To communicate about appointments, changes, and service updates.
To handle complaints, disputes, and insurance-related matters.
To meet legal, accounting, safety, and tax obligations.
To improve our services, processes, and customer experience.
To protect our business, staff, customers, and property from fraud or misuse.

We only use personal data where we have a valid legal reason to do so. We do not sell personal information.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the situation, Tree Surgeons Kilburn relies on one or more of the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotations, arranging site visits, performing the work, issuing invoices, and managing customer requests.

Legal Obligation

We may process personal data to comply with legal requirements, such as tax records, health and safety duties, insurance requirements, and record-keeping obligations.

Legitimate Interests

We may process data where it is reasonable and necessary for our legitimate business interests, provided your rights do not override those interests. This can include business administration, service improvement, fraud prevention, and maintaining evidence of work carried out.

Consent

In limited cases, we rely on consent, for example where it is required for certain types of marketing or optional communications. Where consent is used, you may withdraw it at any time.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods vary depending on the type of data and the reason for processing.

Quotation and enquiry records may be kept for a reasonable period to respond to follow-up questions or future service requests.
Customer and job records are retained for the period needed to manage the contract and any related claims or disputes.
Invoice and payment records are retained for the duration required by tax and accounting law.
Health and safety records may be retained longer where necessary to demonstrate compliance or manage incidents.

When personal data is no longer needed, we will securely delete, anonymise, or destroy it.

6. Processors and Third Parties

We may share personal data with trusted third parties, known as processors, who help us run our business and provide services. These parties are only allowed to use your information on our instructions and must protect it appropriately. Examples may include:

Accounting and bookkeeping providers.
IT and cloud storage providers.
Payment processing providers.
Scheduling or job management software providers.
Insurance providers and claims handlers.
Subcontractors or specialist contractors where required to complete a job.

We may also disclose data where required by law, court order, regulatory authority, or to protect the rights, safety, or property of Tree Surgeons Kilburn, our customers, or others. Where a third party processes data on our behalf, we use appropriate contractual and security safeguards.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, disclosure, or alteration. These measures may include access controls, password protection, secure storage, staff confidentiality obligations, and restricted sharing of information on a need-to-know basis.

Important: no system is completely secure, but we work to reduce risks and protect your information to an appropriate standard.

8. Your Rights Under GDPR

You have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and any legal exceptions that may limit their use.

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain situations.
Right to restrict processing – to ask us to limit how we use your data in certain circumstances.
Right to data portability – to request that we provide certain data in a usable format.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data has not been handled properly. We encourage you to raise any concerns with us first so we can address them promptly.

9. Automated Decision-Making

Tree Surgeons Kilburn does not use fully automated decision-making that has legal or similarly significant effects on customers. If this changes, we will update this policy and provide any required information about the process.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or how we handle personal data. Any updated version will apply from the date it is published. We recommend reviewing this policy periodically to stay informed about how we protect your information.

11. Our Commitment

Tree Surgeons Kilburn is committed to respecting privacy and using personal data responsibly. Whether you are requesting a one-off service or ongoing work, we will process your information only where necessary and in a way that is proportionate to the services we provide. We aim to be clear, accountable, and transparent at every stage of the customer relationship.

By using our services, you acknowledge that we may process your personal data in line with this Privacy Policy and applicable data protection law.