Privacy Policy - Tree Surgeons Eastham

This Privacy Policy explains how Tree Surgeons Eastham collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Eastham customers in the area, including prospective customers, current customers, property owners, business clients, and anyone who contacts us for tree surgery or related arboricultural services. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tree Surgeons Eastham provides tree care and related services, including assessments, pruning, removals, stump work, and site management. For the purposes of data protection law, we act as a data controller when we determine how and why personal data is used. This means we decide what information is needed to provide services, manage enquiries, maintain records, and meet legal and operational obligations.

2. Personal Data We Collect

We collect only the data that is necessary for business, legal, and service-related purposes. The types of personal information we may collect include:

Identity details such as your name.
Contact details such as address, email address, and telephone number.
Property information where required to assess and carry out tree surgery work.
Service information including quotations, bookings, job records, and notes relating to the work requested.
Billing and payment information needed to manage invoices, accounts, and financial records.
Communication records such as emails, messages, call notes, and customer service correspondence.
Technical data if you interact with our digital systems, such as basic device or usage information collected by service providers.
Health and safety information where it is necessary to carry out work safely, for example access issues or site risks.

We do not intentionally collect special category data unless it is required for a specific reason and there is a lawful basis to do so. If such data is ever needed, we will handle it with additional protection and only where permitted by law.

3. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange site visits, bookings, and service delivery.
To assess work requirements and carry out tree surgery safely and effectively.
To issue invoices, process payments, and maintain accounts.
To keep accurate business records.
To manage complaints, disputes, or customer queries.
To meet legal, tax, insurance, and regulatory obligations.
To improve our services, processes, and customer communication.

We only use your data for purposes that are compatible with the reason it was collected, unless we have a lawful basis to use it for another legitimate and appropriate purpose.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each use of personal data. Tree Surgeons Eastham may process your information on the following grounds:

Contract

We process data when it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes providing quotations, arranging services, and completing work you have requested.

Legal obligation

We may need to process and retain certain data to comply with legal duties, including tax, accounting, health and safety, and insurance obligations.

Legitimate interests

We may use data for our legitimate business interests where those interests are not overridden by your rights and freedoms. This can include managing enquiries, improving our services, preventing fraud, maintaining security, and keeping internal records.

Consent

Where consent is required, we will obtain it clearly and in advance. You may withdraw consent at any time, although this will not affect any processing already carried out lawfully before withdrawal.

5. Sharing and Processors

We do not sell your personal data. However, we may share it with trusted third parties where necessary for operational, legal, or administrative reasons. These may include processors that act on our instructions and handle data on our behalf.

Examples of processors and recipients may include:

Accounting and bookkeeping providers who help manage invoices and financial records.
IT and cloud service providers who store data or support communication systems.
Payment service providers who process transactions securely.
Insurance providers or professional advisers where required for claims or risk management.
Subcontractors or operational partners if needed to complete work safely and efficiently.
Regulators, law enforcement, or public authorities where disclosure is legally required.

We require processors to protect personal data, use it only for the agreed purpose, and maintain appropriate security measures. Where data is transferred or accessed outside the UK, we will ensure suitable safeguards are in place in accordance with data protection law.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods depend on the type of information and the reason it is held.

Customer and job records are retained for the period needed to manage the service relationship and any follow-up matters.
Financial records are retained for the period required by tax and accounting law.
Communication records may be held for as long as necessary to manage ongoing enquiries, complaints, or contractual issues.
Safety and compliance records may be kept longer where required to demonstrate legal compliance or manage claims.

When data is no longer needed, we will delete it securely or anonymise it so it can no longer identify you.

7. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These rights may be subject to legal limitations in some situations.

Right of access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete data.
Right to erasure - you may ask us to delete data where there is no legal reason for us to keep it.
Right to restriction - you can request that we limit how we use your data in certain circumstances.
Right to object - you can object to processing based on legitimate interests, including direct business communications where relevant.
Right to data portability - in some cases, you may request that we provide your data in a structured, commonly used format.
Right to withdraw consent - where we rely on consent, you may withdraw it at any time.

If you believe your data protection rights have been infringed, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

8. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures are designed to reflect the nature of the data we hold and the risks associated with processing it. Access to personal data is limited to individuals who need it for legitimate business purposes.

9. Children’s Data

Tree Surgeons Eastham services are not directed at children, and we do not knowingly collect personal data from children unless it is necessary in the course of providing services connected to a property or lawful request. If we become aware that we have collected data inappropriately, we will take suitable steps to delete it or otherwise process it lawfully.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their information is used.

11. Summary of Our Commitment

Tree Surgeons Eastham is committed to responsible and transparent data handling. We collect only the data we need, use it for clear and lawful purposes, keep it for no longer than necessary, and protect it through appropriate safeguards. We respect your rights and aim to ensure that all customers in the Eastham area can trust us to handle personal information with care, professionalism, and compliance.