Privacy Policy - Tree Surgeons Aldgate

Tree Surgeons Aldgate is committed to protecting the privacy and personal data of all customers, prospective customers, and website or service users in the Aldgate area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Tree Surgeons Aldgate customers in the area, including anyone who requests a quotation, books work, receives site assessments, or otherwise engages our services.

1. Who We Are

This policy applies to the personal data processed by Tree Surgeons Aldgate in connection with the provision of arboricultural and related services. For the purposes of data protection law, Tree Surgeons Aldgate is the data controller for the personal information described in this Privacy Policy. This means we decide how and why your data is used.

2. Information We Collect

We only collect personal data that is necessary for the delivery, management, and administration of our services. The information we may collect includes:

Identity details such as your name or business name.
Contact details including phone number, email address, and service address.
Service information such as the type of tree work requested, property details, access information, and job notes.
Communication records including emails, messages, call notes, and appointment arrangements.
Billing and payment data such as invoicing details, transaction history, and payment status.
Technical information if you interact with our digital systems, such as device information, IP address, and browser data where relevant.
Health and safety details where necessary for completing work safely, for example site hazards, access limitations, or special instructions.

We generally do not seek to collect special category data, but in limited cases it may be provided to us indirectly if relevant to access, safety, or job planning. Where this occurs, we will only process it when allowed by law and necessary for the service.

3. How We Collect Your Data

We collect data in several ways:

Directly from you when you request a quotation, make an enquiry, book a service, or communicate with us.
From property-related information provided during surveys, assessments, or site visits.
From payment and accounting records linked to services delivered.
From service partners or third parties where you have authorised contact or where this is required to complete work.

We do not sell personal data. We also do not use your information for unrelated purposes without a lawful basis.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Tree Surgeons Aldgate relies on the following bases:

Contract

We process personal data when it is necessary to provide a quote, arrange and carry out tree surgery services, manage bookings, issue invoices, and fulfil our contractual obligations.

Legal Obligation

We may process data to comply with legal requirements, including tax, accounting, insurance, and health and safety obligations.

Legitimate Interests

We may process data where it is reasonably necessary for our legitimate business interests, provided your rights do not override those interests. This can include managing customer records, improving service delivery, preventing fraud, and maintaining operational security.

Consent

Where required, we will ask for your consent before sending marketing communications or using certain optional data processing activities. You may withdraw consent at any time.

5. How We Use Your Information

Tree Surgeons Aldgate uses personal information to:

Provide quotations and assess job requirements.
Schedule and deliver tree surgery and related services.
Communicate about appointments, safety issues, or service updates.
Process payments and maintain financial records.
Meet legal, regulatory, and insurance requirements.
Handle complaints, disputes, or service queries.
Maintain business records and improve customer service.

We only use personal data for the purposes for which it was collected unless we reasonably determine that a compatible purpose applies, or we obtain your consent where needed.

6. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to run our business and provide services. These parties act as processors or independent controllers depending on the nature of their role.

Processors may include:

IT and cloud storage providers.
Accounting and invoicing systems.
Payment service providers.
Customer record or communication platforms.
Scheduling or job management tools.

These processors are only allowed to use your data according to our instructions and must keep it secure. We require appropriate data processing terms and safeguards to be in place before sharing data.

We may also disclose personal data where required by law, to law enforcement, insurers, professional advisers, or to protect our rights, property, staff, or customers.

7. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, including for service delivery, legal compliance, and the resolution of disputes. Retention periods depend on the type of data and the reason for processing.

Quotation and enquiry records are normally retained for a limited period after the enquiry has ended.
Customer and job records are retained for as long as needed to manage the service relationship and any follow-up obligations.
Financial records are retained for the period required under tax and accounting law.
Health and safety-related records may be kept longer where needed to demonstrate compliance or address claims.

When data is no longer required, it is securely deleted, anonymised, or otherwise disposed of in line with our retention practices.

8. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures include access controls, secure storage, staff awareness, and limiting data access to those who need it for legitimate business purposes.

Although we use reasonable safeguards, no system can be guaranteed to be completely secure. If a data breach occurs that is likely to affect your rights or freedoms, we will respond in line with applicable law.

9. Your Rights

As a data subject, you have several rights under UK GDPR. These rights may be subject to legal limitations and exemptions.

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – you may request deletion of your data in certain circumstances.
Right to restriction – you may ask us to limit how we use your data in certain cases.
Right to data portability – you may request certain data in a structured, commonly used format.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing relies on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the timeframe required by law and may need to verify your identity before proceeding.

10. Marketing Communications

We will only send you marketing communications where we are permitted to do so. If you have given consent, or if lawful soft opt-in rules apply, you may receive updates about our services. You can opt out of marketing at any time. We will always respect your choice to stop marketing messages.

11. International Transfers

If any of our service providers store or process data outside the UK, we will ensure suitable safeguards are in place. These safeguards may include adequacy regulations or approved contractual protections to keep your information secure and legally protected.

12. Children’s Data

Our services are directed to adults, property owners, landlords, tenants, businesses, and other legitimate service users. We do not knowingly collect personal data from children unless it is incidental and necessary for service-related purposes, such as site access or safety, and only where lawful.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. The latest version will apply to all Tree Surgeons Aldgate customers in area from the time it is published or otherwise communicated.

14. Further Information

If you are unhappy with how your personal data has been handled, you have the right to raise your concerns with the UK data protection authority. We encourage you to contact us first so we can try to resolve any issue promptly and fairly.

This Privacy Policy is intended to be clear, lawful, and transparent. By using Tree Surgeons Aldgate services, you acknowledge that your personal information may be processed in accordance with this policy and applicable data protection laws.