Privacy Policy - Tree Surgeons Blackheath

This Privacy Policy explains how Tree Surgeons Blackheath collects, uses, stores, shares, and protects personal data when providing tree surgery and related services. It applies to all Tree Surgeons Blackheath customers in the area, including people who request quotes, make bookings, receive services, or communicate with us in connection with any arboricultural work. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to customers, prospective customers, property owners, tenants, commercial clients, suppliers, and anyone else whose personal data we process in the course of operating our tree surgery services in Blackheath and the surrounding area. It also applies where data is collected through phone calls, email, online forms, messaging, invoices, site visits, and service records.

2. Information we collect

We may collect and process the following categories of personal data:

Identity details such as your name.
Contact details such as address, telephone number, and email address.
Property details such as site address, access notes, tree locations, and service requirements.
Payment and billing details where necessary to process transactions and maintain accounts.
Communication records including emails, messages, call notes, and service instructions.
Service and quotation information including requested work, assessment notes, photographs, and scheduling details.
Technical data such as IP address or device information if you interact with digital services.
Health and safety information where relevant to carrying out work safely, such as site hazards or access restrictions.

We generally do not seek to collect special category data unless it is necessary and appropriate for a specific lawful purpose. If such information is provided to us, we will handle it with additional care and only where permitted by law.

3. How we collect personal data

We may collect personal data directly from you when you:

request a quote or consultation;
book or receive a service;
make an enquiry or complaint;
communicate with us by phone, email, or message;
complete a form or provide information during a site visit.

We may also receive data from third parties, such as property managers, agents, contractors, insurers, or other parties involved in arranging or authorising work. Where appropriate, we may also collect data from publicly available sources to verify property or service details.

4. Lawful basis for processing

We only process personal data when we have a lawful basis to do so under UK GDPR. Depending on the context, we rely on one or more of the following:

Contract – when processing is necessary to provide a quote, perform services, manage bookings, issue invoices, or fulfill a customer agreement.
Legal obligation – when we must retain records or share information to comply with tax, accounting, health and safety, or other legal requirements.
Legitimate interests – when processing is necessary for our legitimate business interests, such as responding to enquiries, improving services, maintaining security, and managing customer relationships, provided these interests do not override your rights and freedoms.
Consent – where we need your permission for a specific purpose, such as certain marketing communications or optional data use. You may withdraw consent at any time.

Where we rely on legitimate interests, we assess the impact on your privacy and take steps to ensure that data use remains proportionate and necessary.

5. How we use your information

We use personal data for the following purposes:

to provide tree surgery and related services;
to prepare quotes, estimates, and work plans;
to arrange site visits, appointments, and project scheduling;
to communicate about services, access requirements, and job updates;
to issue invoices and process payments;
to keep records of work completed and customer instructions;
to manage complaints, disputes, or insurance matters;
to meet legal, tax, and regulatory obligations;
to improve service quality, training, and operational efficiency;
where permitted, to send relevant business updates or promotional messages.

6. Sharing personal data and processors

We may share personal data with trusted third parties who act as processors or independent controllers, depending on the circumstances. These may include:

Payment providers who process transactions securely.
Accounting and bookkeeping providers who help manage records and tax compliance.
IT and cloud service providers who store or support business systems, email, and data backups.
Scheduling, communication, and customer management tools used to organise services.
Waste disposal, subcontracting, or specialist service partners where required to complete work.
Professional advisers such as insurers, legal advisers, or auditors.
Public authorities where disclosure is required by law or necessary to protect rights, safety, or property.

We only use processors that provide appropriate security and privacy safeguards. Where processors handle data on our behalf, they are required to act under our instructions and to protect your personal information.

7. International transfers

In some cases, service providers may store or process data outside the UK. When this happens, we ensure that appropriate safeguards are in place, such as adequacy regulations or approved contractual protections, to keep personal data secure and lawfully transferred.

8. Data retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the nature of the service provided.

Customer and service records are generally retained for a reasonable period after completion of work to handle follow-up queries, disputes, or warranty-related matters.
Financial records are retained for the period required by tax and accounting laws.
Communication records may be retained for operational and evidential purposes.
Marketing preferences are kept until you unsubscribe or withdraw consent, where applicable.

When personal data is no longer needed, we securely delete, anonymise, or dispose of it.

9. Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and careful selection of processors. While no system is completely secure, we work to reduce risk and respond appropriately to any security concern.

10. Your rights

Under data protection law, you have several rights in relation to your personal data. These may include the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete information;
erase your data in certain circumstances;
restrict the processing of your data in certain cases;
object to processing based on legitimate interests or direct marketing;
data portability where processing is based on consent or contract and carried out by automated means;
withdraw consent at any time where we rely on consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how your data is handled. We encourage you to raise concerns with us first so we can try to resolve the matter promptly.

11. Marketing communications

We may send occasional marketing communications where permitted by law and, where required, with your consent. You can opt out of marketing at any time. Even if you opt out, we may still contact you about active bookings, invoices, safety matters, or other service-related issues.

12. Children’s data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is necessary in connection with a property, family arrangement, or lawful service context. If we become aware that we have collected data without an appropriate basis, we will take reasonable steps to delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, service practices, or operational needs. The most current version will apply to your use of our services. We encourage you to review this policy periodically to stay informed about how we protect personal data.

14. Summary of commitments

In summary, Tree Surgeons Blackheath will only collect the personal data needed to provide services safely and effectively, use it for clear and lawful purposes, share it only with trusted processors or where legally required, and keep it only for as long as necessary. We aim to treat all customer information with care, transparency, and respect, and to ensure that everyone in the Blackheath area who uses our services can trust how their data is handled.