Privacy Policy - Tree Surgeons Crystalpalace

Tree Surgeons Crystalpalace is committed to protecting the privacy and personal data of everyone who uses our services. This Privacy Policy explains how we collect, use, store, share, and protect personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Tree Surgeons Crystalpalace customers in the area, including prospective customers, existing customers, business clients, and individuals who enquire about our tree surgery services.

We believe in handling personal data fairly, lawfully, and transparently. By using our services, making an enquiry, or communicating with us, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

We may collect and process different types of personal data depending on how you interact with us. The information we collect is limited to what is necessary for legitimate business and service purposes.

Personal Data You Provide Directly

Identity details such as your name
Contact details such as telephone number and email address
Address details including property location or site address
Service information relating to the work requested or completed
Communication records such as emails, messages, or notes from calls
Billing and payment information where needed to manage invoices and payments
Customer preferences and instructions relevant to service delivery

Information We May Collect Automatically

When you contact us electronically or visit our online services, we may collect limited technical information, such as:

Device or browser information
IP address
Log data relating to system use
Cookies or similar technologies where applicable

This information is used mainly to maintain security, improve service performance, and understand basic usage patterns.

2. How We Use Your Personal Data

We use personal data only for lawful and specific purposes connected to our business operations. These may include:

Responding to enquiries and providing quotations
Arranging site visits and service appointments
Delivering tree surgery and related services
Managing customer relationships and service records
Processing invoices, payments, and refunds where applicable
Meeting legal, tax, accounting, and regulatory obligations
Handling complaints, disputes, or insurance-related matters
Maintaining safety, security, and quality standards

We will not use your personal data for purposes that are incompatible with the reasons for which it was originally collected unless we have a lawful basis to do so.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing personal data. Tree Surgeons Crystalpalace relies on the following legal bases where appropriate:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotations, arranging services, and completing tree surgery work agreed with customers.

Legal Obligation

We may process personal data when required to comply with legal duties, including tax, accounting, record-keeping, health and safety, and other statutory requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include responding to customer enquiries, preventing fraud, improving services, and maintaining operational records.

Consent

In limited circumstances, we may rely on your consent, particularly where it is required by law. If we rely on consent, you have the right to withdraw it at any time.

4. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Retention periods depend on the type of information and the reason it is held.

In general:

Customer enquiry records may be kept for a reasonable period to support follow-up communication and service continuity
Contract and service records may be retained for the duration of the service relationship and for a period afterwards
Financial and invoicing records are retained in line with tax and accounting requirements
Complaints or dispute records may be retained until the matter is resolved and for a further period if needed for legal protection

When data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices.

5. Sharing Personal Data with Processors

We may share personal data with trusted third-party processors who help us operate our business and deliver services. These processors act on our instructions and are not allowed to use your data for their own purposes.

Examples of processors may include:

IT and cloud service providers that support data storage and secure communications
Accounting or bookkeeping providers that assist with financial administration
Payment service providers that process transactions securely
Administrative support providers that help manage records or service scheduling
Professional advisers such as insurers, legal advisers, or auditors where necessary

We require processors to implement appropriate technical and organisational measures to protect personal data and to comply with data protection law.

We may also disclose information where required by law, court order, or regulatory authority, or to protect our rights, property, staff, customers, or the public.

6. Data Security

We take reasonable and appropriate steps to protect personal information against unauthorised access, accidental loss, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and operational procedures designed to reduce the risk of misuse.

While no system can be guaranteed to be completely secure, we work to ensure that personal data is protected using standards appropriate to the nature of the information we hold.

7. Your Data Protection Rights

You have rights under data protection law in relation to your personal data. Subject to certain legal conditions and exceptions, these rights may include:

Right of access – to request a copy of the personal data we hold about you
Right to rectification – to ask us to correct inaccurate or incomplete data
Right to erasure – to request deletion of your data in certain circumstances
Right to restrict processing – to ask us to limit how we use your data in specific situations
Right to object – to object to processing based on legitimate interests
Right to data portability – to receive certain data in a structured, commonly used format where applicable
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time

To exercise your rights, you may make a request using the appropriate communication channel provided by our business. We may need to verify your identity before responding to your request. We aim to respond within the time limits set by law.

8. International Transfers

Where personal data is transferred outside the UK, we will only do so where appropriate safeguards are in place to ensure a level of protection consistent with applicable data protection laws. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent protective measures.

9. Children’s Data

Our services are intended for adults or persons acting on behalf of property owners, managers, or organisations. We do not knowingly collect personal data from children except where it is incidentally included in service-related communications and only where necessary and lawful.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to remain informed about how their data is protected.

11. Our Commitment

At Tree Surgeons Crystalpalace, we understand that privacy is important. We are committed to processing personal data responsibly, keeping information secure, and respecting the rights of everyone who uses our services. Our goal is to ensure that our handling of data is transparent, fair, and limited to what is necessary for lawful business purposes.

This Privacy Policy applies to all Tree Surgeons Crystalpalace customers in the area and should be read alongside any relevant service terms or legal notices that apply to our work.