Privacy Policy - Tree Surgeons Pinner

This Privacy Policy explains how Tree Surgeons Pinner collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Pinner customers in the area, including individuals who request quotations, book services, receive tree surgery work, or otherwise engage with us for arboricultural services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Tree Surgeons Pinner is the data controller for the personal data we collect and use in relation to our services. This means we determine why and how personal information is processed. We take privacy seriously and aim to collect only the information we need to provide safe, efficient, and professional tree surgery services.

2. Personal Data We Collect

We may collect and process different types of personal data depending on how you interact with us. This may include:

Identity details such as your name and title.
Contact details such as your address, telephone number, and email address.
Property information needed to assess and carry out tree surgery work.
Service and booking information including enquiries, quotations, instructions, and job records.
Payment and invoicing details where relevant to billing and accounting.
Correspondence such as messages, emails, complaints, and feedback.
Technical data if you interact with our online systems, such as IP address or browser type, where applicable.
Health or safety information only where necessary to carry out work safely, for example access needs or site hazards.

We do not intentionally collect more information than is needed for the purpose of delivering our services and managing our business.

3. How We Collect Data

We may collect personal data directly from you when you:

request a quote or consultation;
make a booking or place an order for services;
communicate with us by phone, email, or other means;
provide information during site visits or assessments;
submit feedback, complaints, or other enquiries.

We may also receive data from third parties where necessary, such as landlords, managing agents, insurers, local authorities, or subcontractors involved in delivering the service. In every case, we only use data where we have a valid legal basis.

4. Why We Use Personal Data

Tree Surgeons Pinner uses personal data for the following purposes:

to provide quotations and assess service requirements;
to arrange, deliver, and manage tree surgery work;
to maintain safety on site and comply with legal obligations;
to process payments and issue invoices;
to respond to enquiries and manage customer relationships;
to keep business and accounting records;
to handle complaints, disputes, and insurance matters;
to improve our services and business operations;
to detect and prevent fraud or misuse.

We will only use your personal data where necessary and proportionate to the purpose for which it was collected.

5. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis to process personal data. Depending on the context, we rely on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotations, scheduling work, carrying out tree surgery services, and managing payments.

Legal Obligation

We may process data where needed to meet legal requirements, such as tax, accounting, health and safety, and record-keeping obligations.

Legitimate Interests

We may process data where it is in our legitimate interests to do so and where those interests are not overridden by your rights and freedoms. Examples include maintaining business records, handling enquiries, improving service delivery, and defending legal claims.

Consent

In limited circumstances, we may ask for your consent to process certain information. Where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

6. Sharing Your Data and Processors

We may share personal data with trusted third parties that help us run our business and provide services. These third parties act as processors or independent controllers, depending on the situation. Processors may include:

accountants and bookkeepers;
IT, cloud storage, and software providers;
payment processing services;
subcontractors assisting with specialist work;
insurers, surveyors, or loss adjusters;
professional advisers and legal advisers;
public authorities where required by law.

Where a third party acts as a processor, they are required to process personal data only on our instructions and to apply appropriate security measures. We do not sell personal data.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or reporting obligations. Retention periods may vary depending on the type of information and the reason for processing.

Customer records are generally retained for the duration of the relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law.
Correspondence and job records may be kept to evidence service history, resolve disputes, or manage warranty issues.
Health and safety records are retained where necessary to comply with legal obligations and demonstrate safe working practices.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff training, and limiting access to data on a need-to-know basis. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to legal limits, these may include:

The right to be informed about how your data is used.
The right of access to obtain a copy of your personal data.
The right to rectification if information is inaccurate or incomplete.
The right to erasure in certain circumstances, also known as the right to be forgotten.
The right to restriction of processing in certain cases.
The right to data portability where processing is based on consent or contract and carried out by automated means.
The right to object to processing based on legitimate interests, including direct marketing where applicable.
Rights related to automated decision-making, where such processing occurs.

If you wish to exercise any of these rights, we will respond in line with applicable legal requirements. We may need to verify your identity before responding to certain requests.

10. International Transfers

Where any service providers or systems are located outside the UK, we will ensure that appropriate safeguards are in place to protect your personal data. These safeguards may include approved contractual protections and other measures required by law.

11. Children’s Data

Our services are generally directed to adult customers, property owners, landlords, and business clients. We do not knowingly collect personal data from children unless it is necessary in a specific service context and lawful to do so. If we become aware that we have collected data from a child without appropriate authority, we will take steps to delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our services, or how we process personal data. Any updated version will apply from the date it is published or otherwise communicated. We encourage you to review this policy periodically to stay informed.

13. Summary of Our Commitment

Tree Surgeons Pinner is committed to respecting privacy, handling data responsibly, and using personal information only when there is a lawful and legitimate reason to do so. We aim to keep your data accurate, secure, and retained only for as long as needed. If you are a customer in the Pinner area, this policy applies to your use of our services and explains how your information is managed.

Last reviewed: This policy is intended to be clear, practical, and compliant with UK data protection law.