Privacy Policy - Tree Surgeons Euston

Tree Surgeons Euston is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our services. It applies to all Tree Surgeons Euston customers in the area, including individuals, households, landlords, property managers, and businesses that engage our tree surgery, arboricultural, maintenance, inspection, and related services.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws. Please read this policy carefully to understand what we do with your information and what rights you have.

1. Information We Collect

We may collect and process the following categories of personal data:

Identity data such as your name, title, and, where relevant, company name or job title.
Contact data such as email address, telephone number, service address, billing address, and correspondence details.
Service and project data such as details of the tree work requested, site conditions, access information, quotations, invoices, work history, photographs, and service notes.
Payment and transaction data such as payment status, transaction references, and invoice records.
Technical data if you communicate with us electronically, including limited device or usage information generated by our systems.
Communication data such as records of calls, emails, messages, complaints, feedback, and requests.
Health and safety data where necessary, for example information about site hazards, access restrictions, or any special considerations required to carry out work safely.

We generally do not seek to collect special category personal data. If such data is provided to us, for example information relating to accessibility or safety, we will only process it where there is a lawful basis and appropriate safeguards.

2. How We Use Your Personal Data

We use personal data to provide our services and to run our business efficiently. This may include:

responding to enquiries and preparing quotations;
planning, scheduling, and carrying out tree surgery and related work;
assessing site conditions and safety requirements;
issuing invoices, processing payments, and managing accounts;
maintaining service records and job histories;
handling complaints, claims, or disputes;
meeting legal, tax, insurance, and regulatory obligations;
improving our services, record-keeping, and customer experience;
preventing fraud, misuse, or unlawful activity; and
communicating important operational or service-related updates.

We only use personal data for the purposes stated in this policy or for closely related purposes that would reasonably be expected.

3. Lawful Basis for Processing

We process personal data only where we have a lawful basis under UK GDPR. Depending on the context, the legal grounds may include:

Contract

We process your information when it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes preparing quotations, arranging work, and delivering services.

Legal Obligation

We may process data where required to comply with legal obligations, including tax, accounting, health and safety, insurance, and record-keeping requirements.

Legitimate Interests

We may process data for our legitimate business interests, provided your rights and interests do not override those interests. Examples include managing our operations, improving services, preventing fraud, and maintaining customer records. We consider the impact of such processing and use appropriate safeguards.

Consent

In limited circumstances, we may rely on your consent, for example where it is required for a specific optional activity. If consent is used, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Vital Interests

In rare cases, we may process data to protect someone’s vital interests, such as in an emergency where safety concerns arise on site.

4. Sharing Your Information and Processors

We may share personal data with trusted third parties where necessary for the purposes described in this policy. These third parties act either as processors or, in some cases, independent controllers.

Processors are service providers that process data on our instructions and on our behalf. They may include:

accounting and bookkeeping providers;
IT, cloud storage, and data backup services;
payment processing providers;
customer relationship and scheduling systems;
communication and email service providers;
professional advisers such as insurers, legal advisers, and auditors; and
subcontractors or specialist contractors engaged to help complete a project.

Where we use processors, we ensure they are bound by appropriate contractual obligations to protect your personal data and only act on our instructions.

We may also disclose information where required by law, to regulatory bodies, to law enforcement, or to protect our rights, our customers, or the public.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, tax, and reporting obligations. Retention periods depend on the type of information and the reason for processing.

Customer and service records are generally retained for the duration of the customer relationship and for a reasonable period afterwards.
Financial and accounting records are retained for the period required by law.
Safety, dispute, or claims-related records may be kept longer where needed to establish, exercise, or defend legal claims.
Communication records may be retained for operational, evidential, and customer service purposes.

When personal data is no longer required, we will delete it or anonymise it securely. We may retain certain records where required by law or where there is a valid ongoing business or legal reason.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limited access on a need-to-know basis.

Although we take reasonable steps to safeguard your information, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we work continuously to reduce risks.

7. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete data.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restriction - to ask us to limit processing in certain situations.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent - where processing is based on consent.

Important: these rights are not absolute and may be subject to legal limitations. If we are unable to comply with a request, we will explain why.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

8. International Transfers

Where personal data is transferred outside the UK, we will take steps to ensure that appropriate safeguards are in place and that the transfer complies with applicable data protection law. This may include the use of approved contractual protections or transfers to countries with adequate protection.

9. Children’s Data

Our services are generally directed to adults and business customers. We do not intentionally collect personal data from children unless it is necessary for a specific service arrangement and lawful to do so. If we become aware that we have collected children’s data without proper authorisation, we will take appropriate steps to remove it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data practices. Any updated version will apply from the date it is published or otherwise made available. We encourage you to review this policy periodically.

11. Summary of Our Privacy Commitments

We aim to handle your information fairly, lawfully, and transparently. In practice, this means we:

collect only the information needed to provide our services and manage our business;
use personal data for clear, legitimate purposes;
rely on appropriate lawful bases under UK GDPR;
share data only with trusted processors and where necessary;
keep data only for as long as required; and
respect and support your data protection rights.

Tree Surgeons Euston takes privacy seriously and is committed to maintaining the trust of every customer in the area. If our processing activities change, we will update this policy so that it remains accurate, transparent, and compliant.