Privacy Policy - Tree Surgeons Upminster

This Privacy Policy explains how Tree Surgeons Upminster collects, uses, stores, and protects personal data when providing tree surgery and related services. It applies to all Tree Surgeons Upminster customers in the area, including anyone who requests a quote, books a service, communicates with us, or receives work from us. We are committed to handling personal data in a lawful, fair, and transparent way in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Tree Surgeons Upminster acts as the data controller for personal information collected in connection with our services. This means we decide why and how your personal data is used. We take our responsibilities seriously and aim to only collect information that is necessary to deliver services safely and effectively.

2. Personal Data We Collect

We may collect and process different types of personal data depending on how you interact with us. The information we collect may include:

Identity details such as your name and title
Contact details such as your address, email address, and telephone number
Service details including information about the trees, gardens, or properties requiring work
Communication records such as enquiries, messages, booking details, and feedback
Billing and payment data where relevant, including records needed for invoicing and account management
Technical data if you use our digital systems, such as IP address, device information, or usage data
Site access and safety information required to carry out work responsibly and to protect people and property

We do not intentionally collect special category data unless it is necessary and you have provided it, or unless another lawful basis applies. If such data is ever relevant, we will handle it with additional care and safeguards.

3. How We Use Your Data

We use personal data to operate our business and provide services effectively. Typical uses include:

Responding to enquiries and providing quotations
Arranging appointments and delivering tree surgery services
Managing customer relationships and service records
Handling invoices, payments, and account administration
Complying with legal, safety, and tax obligations
Improving our services, processes, and customer experience
Dealing with complaints, insurance matters, or disputes

We only use your data where we have a valid reason to do so and where that use is proportionate to the purpose for which it was collected.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each use of personal data. Tree Surgeons Upminster may rely on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotes, booking work, carrying out tree surgery, and managing payments.

Legal Obligation

We may process personal data to comply with legal requirements, including accounting, taxation, health and safety, and record-keeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining customer records, improving our services, preventing fraud, and ensuring secure operations.

Consent

In limited cases, we may rely on your consent, for example where you specifically agree to receive certain types of communication. Where consent is used, you may withdraw it at any time.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties where necessary for service delivery, administration, or compliance. These third parties act as processors when they handle personal data on our behalf and only under our instructions. Examples of processors and service providers may include:

Accounting or bookkeeping providers
Payment processing services
IT and cloud storage providers
Email, communications, and scheduling systems
Insurance advisers or claims handlers
Waste disposal or subcontracted service providers where needed to complete work

We require processors to protect your data, use it only for agreed purposes, and keep it secure. We do not sell personal data. We may also share information with authorities, insurers, or professional advisers where required by law or where necessary to protect our legal interests.

6. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, or as required by law. Retention periods depend on the type of data and the reason for processing. In general:

Quotation and enquiry records may be kept for a limited period in case of follow-up or dispute
Customer and service records may be retained for the duration of the relationship and for a reasonable period afterward
Financial and tax records are kept for the period required by law
Health and safety or incident records may be retained longer where necessary for legal or insurance purposes

When data is no longer needed, we will delete it securely or anonymise it so it can no longer identify you. Our retention approach is based on necessity, legal compliance, and good business practice.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff training, and careful selection of service providers. While no system is completely secure, we work hard to keep your data protected and to minimise risk.

8. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may apply depending on the circumstances and legal basis for processing. You have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete information
Erase your data in certain situations
Restrict how we use your data in certain circumstances
Object to processing based on legitimate interests
Data portability where processing is based on consent or contract and is carried out by automated means
Withdraw consent where we rely on consent

You also have the right to raise concerns with the Information Commissioner’s Office (ICO) if you believe your data has not been handled properly. We encourage you to contact us first so we can try to resolve any issue promptly and fairly.

9. Cookies and Similar Technologies

If we use a website or digital tools that place cookies or similar technologies, these may be used for basic functionality, security, analytics, or service improvement. Where required by law, we will provide appropriate information and choices about those technologies. Any such data is handled in accordance with this Privacy Policy and applicable legal requirements.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We recommend reviewing this policy periodically so you remain informed about how your personal data is used.

11. Summary of Our Commitment

Tree Surgeons Upminster is committed to processing personal data responsibly and only where we have a valid legal basis. We collect the information needed to provide safe, reliable, and professional services, retain it only as long as necessary, and use trusted processors where appropriate. We also respect your rights and aim to make our handling of personal data clear, secure, and lawful at all times.

By using Tree Surgeons Upminster services, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.