Privacy Policy - Tree Surgeons Barbican

This Privacy Policy explains how Tree Surgeons Barbican collects, uses, stores, and protects personal data in relation to our services. It applies to all Tree Surgeons Barbican customers in the area, including individuals, property owners, landlords, tenants, business clients, and anyone who requests or receives our tree surgery, arboricultural, site clearance, stump removal, pruning, or related services. We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tree Surgeons Barbican provides tree care and arboricultural services to customers in Barbican and the surrounding area. For the purposes of data protection law, we act as the data controller when we decide why and how personal data is processed. This means we are responsible for ensuring that your personal information is used fairly, lawfully, and transparently.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity details such as your name, title, and company name where relevant.
Contact details including address, email address, and telephone number.
Property details such as the location of trees, access information, and site notes needed to provide our services.
Service information including quotes, job records, invoices, service requests, and details of work carried out.
Payment and billing information where needed for invoicing, accounting, and payment processing.
Communication records such as emails, messages, call notes, and correspondence relating to enquiries or service delivery.
Technical information where applicable, such as website usage data or device information if you interact with our online systems.
Health and safety information if required to carry out work safely, for example access restrictions or site risk details.

We only collect personal data that is relevant and necessary for the purposes described in this policy. Where possible, we limit the amount of data collected and use it only for legitimate business and service reasons.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To assess tree work requirements and plan site visits.
To deliver arboricultural and related services safely and effectively.
To manage customer accounts, records, and service history.
To issue invoices, process payments, and maintain financial records.
To communicate with customers about appointments, work schedules, and service updates.
To comply with legal, tax, accounting, and safety obligations.
To handle complaints, claims, or disputes.
To improve our services, internal processes, and customer experience.

We will not use your personal data for purposes that are incompatible with those described above unless we have a valid legal basis to do so.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis before processing personal data. Tree Surgeons Barbican relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you, such as preparing a quote, carrying out tree surgery work, or invoicing for services.

Legal Obligation

We may process data to meet legal obligations, including tax, accounting, insurance, record-keeping, and health and safety requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This includes managing our customer relationships, maintaining service records, responding to enquiries, and improving our operations. We assess such processing carefully to ensure it is fair and proportionate.

Consent

In limited situations, we may rely on your consent, for example for certain optional communications. Where consent is used, you may withdraw it at any time.

5. Sharing Data and Processors

We may share personal data with trusted third parties when necessary for service delivery, administration, or legal compliance. These parties act as processors or independent controllers depending on the circumstances.

Examples of processors and recipients may include:

IT and cloud service providers that support data storage, email, or business systems.
Accountants, bookkeepers, or payroll providers assisting with financial administration.
Payment service providers handling transactions securely.
Waste disposal, subcontracted arboricultural, or specialist service providers involved in completing a job.
Legal, insurance, or regulatory advisers where necessary.

When we use processors, we ensure that they are bound by appropriate contractual terms and only process data on our instructions, with suitable security measures in place. We do not sell your personal data.

6. International Transfers

Where a processor or service provider stores or accesses data outside the United Kingdom, we take appropriate steps to ensure that your personal data remains protected. This may include using approved contractual safeguards and reviewing the destination country's data protection standards.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods vary depending on the type of data and the reason for processing.

Customer and job records: retained for a period necessary to manage services, resolve queries, and maintain business records.
Financial and tax records: retained for the period required by accounting and tax legislation.
Communication records: retained for as long as needed to deal with the enquiry or maintain evidence of our dealings.
Health and safety records: retained where necessary to demonstrate compliance and manage risk.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. We review retention on a regular basis to ensure we are not keeping information longer than needed.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and careful selection of processors. While no system can be guaranteed completely secure, we take data security seriously and work to reduce risks where possible.

9. Your Rights

As a data subject, you have rights under data protection law in relation to your personal data. These rights may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to ask us to limit how we use your data in certain cases.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

Some rights may be subject to legal exceptions or limits. For example, we may need to retain certain records to comply with legal obligations or defend legal claims. We will respond to valid requests in line with data protection law.

10. Children’s Data

Our services are not generally directed to children, and we do not intentionally collect personal data from children unless it is necessary in connection with a service request involving a household or property. Where such data is processed, we do so carefully and only when appropriate.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically to stay informed about how we process personal data.

12. Summary of Our Commitment

Tree Surgeons Barbican is committed to collecting only the personal data needed to provide safe, efficient, and professional services. We process data lawfully, keep it secure, retain it only as long as necessary, and respect your rights under the UK GDPR. This policy applies to all Tree Surgeons Barbican customers in the area and is intended to provide clear and transparent information about how we handle your information.